Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
File: QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer (raw, json)
Hash identifier: SlsespZoE+pXZjYEsqMdYCWcbXddtkyNG619fW5tFu0=
Subject key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A3CE514EA0E92F46C897D0F91AF29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8976
IP: 193.105.64.0/24
IP: 2001:67c:e14::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3c:e5:14:ea:0e:92:f4:6c:89:7d:0f:91:af:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d5:f2:56:6b:3a:33:67:b5:cb:e7:4f:8d:09:
e2:56:cd:b4:16:51:8f:15:7f:6d:0b:b6:bb:a4:44:
ba:64:a3:d3:d9:8f:0b:1f:5d:2f:f2:d5:0b:a0:80:
80:f3:91:54:68:3b:6c:21:a1:e4:b0:93:21:74:ca:
dc:2b:3e:c7:b8:4d:b3:96:99:99:64:36:5b:d8:b2:
49:f5:1d:40:b1:18:04:b2:34:bc:ba:14:2c:3e:da:
6e:c9:88:0a:27:ca:dd:39:95:9b:19:c4:82:5e:7e:
f6:27:1a:21:78:08:55:04:a3:ee:3c:2c:f7:23:a2:
28:b3:88:d7:c0:89:ad:76:07:bd:16:a2:18:4c:05:
be:43:be:4d:41:e3:3c:f4:2a:07:6e:b8:ff:7d:dc:
ed:29:09:2f:7e:b9:9b:02:44:d9:81:6d:ac:a9:a2:
ac:f4:79:2c:c6:c3:82:c3:a1:40:fc:0c:78:3c:03:
16:73:b6:a5:e8:4c:51:5a:38:ab:b6:cb:92:96:13:
34:2e:00:13:c1:4e:89:28:4a:59:d3:54:af:c2:c8:
f5:40:ce:03:a3:e4:84:3b:0b:83:99:8a:4a:42:8b:
99:d6:d5:d1:81:79:63:db:1a:ab:74:a6:b3:d0:21:
14:2e:af:3a:e8:83:7d:e7:86:86:f7:7e:96:c2:6c:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.64.0/24
IPv6:
2001:67c:e14::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8976
Signature Algorithm: sha256WithRSAEncryption
0a:37:36:06:e6:a6:47:87:0c:c6:14:83:9f:6d:fe:0d:e8:6b:
2d:22:85:d6:2f:f0:9a:fa:11:42:50:c2:e2:d9:32:6e:ae:c2:
be:f0:17:3e:43:00:6b:3b:ca:2e:b7:1c:5b:53:11:0b:84:d8:
e6:79:63:8a:dd:03:09:d6:1a:7f:fd:76:d8:1c:25:71:f3:ec:
3d:e2:11:30:14:33:33:00:aa:98:07:31:b3:c5:20:4d:77:b4:
02:86:f8:f1:a7:d8:37:90:a9:07:8f:74:93:4c:de:f3:6d:4b:
d4:de:3a:41:81:4c:33:8d:c2:8e:dd:e3:4e:c7:14:31:da:6c:
a4:e8:13:ae:f0:2d:e0:58:82:80:ba:3c:61:6d:bd:ef:da:9b:
09:65:d9:c8:10:ca:4d:a9:4c:64:44:4a:88:d1:97:2a:47:3d:
b2:d3:9a:61:5c:97:e8:c5:32:55:36:c9:ab:b6:23:bc:cb:7f:
ec:c5:da:09:f1:52:8b:6f:d2:74:ed:17:5d:d3:f5:80:e4:be:
1e:d7:e3:54:2d:61:77:3b:ec:46:ee:89:0c:bb:00:c8:39:2b:
42:04:31:0c:c1:36:72:52:67:ca:19:0a:de:4a:87:71:a0:17:
52:59:b9:f6:68:f8:6b:78:b2:38:b3:08:56:c7:a8:0d:74:3a:
23:bc:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:55 2025 by rpki-client