Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer (raw, json)
Hash identifier: d7PBVeUYNrZJIezLxVBt7hMjX3vymi1nbDj+jPjiuUk=
Subject key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC3E6ADA8348621700A3612D98B5B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21379
IP: 217.147.160.0/20
IP: 2a06:7300::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3e:6a:da:83:48:62:17:00:a3:61:2d:98:b5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:69:ef:13:12:b2:50:a6:f0:3c:75:ce:2e:
8b:38:0f:be:94:59:84:5c:1f:19:67:46:3d:52:d5:
89:5e:9c:d4:af:56:18:75:d4:64:1b:26:04:97:28:
c5:1d:93:2d:0c:1d:b8:7b:e2:63:4d:12:1d:de:5c:
85:60:c5:ed:20:2a:6e:c7:88:3b:a5:e8:87:d1:1d:
ea:9e:06:90:e6:83:57:b0:f1:39:3b:31:c6:ae:f2:
a3:07:f1:7a:0c:3a:8d:5c:f2:fb:aa:2d:54:10:03:
0f:74:37:8d:0b:2c:5b:9a:52:f0:61:b0:b0:fe:be:
74:05:b8:64:04:2d:29:d8:05:36:bb:a6:b0:22:78:
e2:b7:d5:d2:8d:f5:60:27:4d:48:19:65:e4:96:b8:
a5:a6:b4:fd:e0:b6:10:26:45:8d:0c:ce:17:bf:c2:
d2:6d:82:8e:09:83:d6:76:b4:36:1d:b5:ab:43:46:
8b:85:c4:cd:91:ce:7e:b4:29:dd:75:b1:2c:4c:54:
eb:c6:1d:14:21:42:ef:9d:d5:c5:e4:0b:df:3f:e4:
ac:cd:c4:c0:13:4e:5e:d7:ec:d9:fe:c5:9c:2b:e1:
c9:e5:03:0a:c4:85:0f:e6:12:f7:eb:3f:71:ee:e3:
0e:91:5d:b3:19:07:7f:cd:18:eb:49:25:23:38:e4:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.160.0/20
IPv6:
2a06:7300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21379
Signature Algorithm: sha256WithRSAEncryption
4e:12:19:db:45:bc:69:16:b5:9a:35:16:ae:ad:85:24:e1:29:
0b:21:3d:04:f3:ed:2d:ad:9d:58:76:40:ee:c4:9c:af:92:ab:
97:f5:ea:db:43:a7:51:0d:1a:e1:28:60:2f:03:af:30:c7:37:
28:4b:09:88:f1:d8:f3:cf:58:5a:2c:a7:81:49:47:51:c1:88:
71:1e:f3:0e:6e:8e:4e:22:b8:09:d1:3d:96:8f:e7:d8:90:4f:
50:21:55:f7:01:cc:ed:86:4c:ea:a8:e0:ac:7b:27:18:26:06:
a9:15:3f:1b:b3:0b:b1:d6:e0:b7:04:d2:fd:97:a4:da:d4:50:
01:74:4b:a0:3d:4a:37:c6:d6:3a:ba:fc:9f:26:a9:51:5a:9f:
28:88:2e:fc:9a:bb:2b:8d:c4:cb:e2:29:ca:94:22:31:61:73:
4a:b9:4f:94:9d:9e:77:6b:79:fa:96:92:6d:d2:c7:32:64:04:
d8:03:93:d3:6b:4a:07:23:9d:cc:68:34:fd:db:dd:01:5a:1b:
b1:dd:4c:a3:63:ce:03:a1:17:a1:f3:62:ae:ce:4b:ed:12:5a:
25:b5:ff:77:5d:74:cc:0b:40:d3:a7:26:b9:d2:a5:13:88:a5:
06:ff:07:29:60:43:ab:59:95:a3:e1:38:40:30:30:ee:06:e8:
a8:dd:62:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:18 2025 by rpki-client