Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.cer (raw, json)
Hash identifier: 79sqRSTd703j9c00/5qko0pc/S8OY3Xeu08QExVFuyc=
Subject key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B3D04D431BA104C39C180EC209F537
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197877
IP: 91.228.207.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:d0:4d:43:1b:a1:04:c3:9c:18:0e:c2:09:f5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:f0:3f:db:7d:36:80:c7:59:72:20:26:be:
1a:99:0f:79:0d:8b:55:38:ba:e3:8a:e3:a5:c7:2c:
bc:b3:56:2f:2b:34:e6:55:a5:be:ae:75:77:a7:b1:
69:12:29:b8:51:1a:c2:92:06:6f:91:9d:57:86:55:
49:73:99:bf:3f:72:3f:fe:99:ef:e0:0e:13:96:54:
85:20:e4:1a:65:2f:e4:08:ba:73:fc:ca:aa:8d:c2:
2e:b0:d3:27:9c:86:36:35:3f:5b:b3:39:e2:c9:b3:
d0:df:93:76:f8:da:00:10:e3:fe:5a:fd:a5:15:5f:
62:ce:a3:5d:13:33:23:ae:d5:01:6d:97:e4:de:d2:
b5:d3:9b:fc:35:60:4c:d6:42:ca:c1:fd:85:1d:9a:
89:63:7b:66:0f:56:eb:db:84:8f:c1:24:18:c0:78:
e2:f5:8c:9c:9c:91:74:60:ea:31:f7:c5:a1:e7:db:
df:a6:1a:12:d7:8c:fb:a0:58:69:6c:84:14:8a:f1:
20:c6:c2:9a:5b:1a:0e:4a:63:b1:18:a1:d5:aa:17:
ef:88:78:28:2a:55:35:cc:9c:25:8d:46:91:a1:0b:
0d:22:1e:d5:7d:67:29:f3:8c:ee:bd:c0:04:93:34:
26:ff:73:39:97:02:a5:b9:a1:cf:20:71:f9:85:3c:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.207.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197877
Signature Algorithm: sha256WithRSAEncryption
84:bf:a3:4d:63:38:62:bc:2c:b3:05:0d:37:04:28:7d:98:20:
6b:04:08:ca:33:1f:ba:f0:f4:dc:b6:a3:d8:a2:fa:36:c6:2b:
b9:01:a3:ca:32:4a:44:c3:fc:73:b5:f6:b0:3f:b1:79:a5:fb:
c3:d2:e6:b5:9d:ee:d6:b0:3a:96:5c:fc:e8:ff:5c:6f:ee:2f:
9b:10:e1:03:98:c4:a9:01:a3:b5:a9:50:85:db:ec:ca:0d:30:
94:f1:7a:2e:93:35:3a:31:13:be:60:12:aa:7e:74:11:ac:24:
8d:16:80:c2:e8:1a:aa:e4:16:90:44:e6:83:64:18:6a:a4:66:
27:7c:4e:31:5e:bb:9c:96:d4:99:ea:93:e2:d7:8b:fa:bd:a4:
55:70:d9:d0:e0:9a:41:d2:af:b0:3a:8a:c5:aa:42:6e:7b:f0:
d5:48:9c:9e:a5:76:c9:df:0a:dd:cc:cf:e5:96:e6:77:72:d6:
9c:16:da:05:4c:bf:ec:c9:d1:77:00:6f:a8:57:8e:9a:16:aa:
b7:39:58:73:0d:13:a8:93:ff:20:62:70:39:38:ab:73:3e:d3:
42:96:c6:9f:d6:72:c5:ff:91:46:a0:1d:3b:d0:e0:db:9a:93:
7f:a8:38:1f:a3:01:eb:d0:6e:21:c7:11:3f:06:8a:31:df:fb:
2d:aa:b3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:34 2025 by rpki-client