Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer (raw, json)
Hash identifier: z92aBM5BpOo+S6h3rJ4zM4VoWD5nBFZRqwejb5QR3No=
Subject key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424455531B8B5E10C20E4BC9F1E2D6D69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209385
IP: 185.232.124.0/22
IP: 2a0c:a500::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:55:31:b8:b5:e1:0c:20:e4:bc:9f:1e:2d:6d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:43:52:51:cd:08:c4:11:b7:d7:34:0f:87:
5a:a8:6c:2d:c6:49:98:f9:30:74:72:a7:9a:ed:4a:
3f:fb:ea:60:8c:2c:52:07:1f:a0:ef:4c:77:0c:54:
5b:18:7c:14:f8:1a:84:4b:0c:77:4b:8b:51:16:84:
e3:0e:61:ec:2f:60:5e:c8:86:c3:94:ea:e9:e5:c3:
57:b5:15:65:16:ea:b7:69:9e:3f:cb:3a:e9:95:0a:
df:f9:63:a5:2a:8e:26:51:bb:29:f8:18:fc:e6:62:
30:7a:63:46:2c:f5:5e:13:43:26:64:93:c6:0a:35:
49:7f:72:62:c2:eb:25:d3:f4:d5:bb:7c:d3:0f:b3:
7d:66:f0:b1:68:89:72:d7:5d:17:97:60:9f:c2:40:
80:bf:82:0b:13:90:d8:e4:ed:57:bc:5f:0d:6b:bf:
79:9d:17:36:6a:fb:ad:12:98:08:57:ba:89:d5:1c:
8d:b3:65:f5:92:03:f3:bb:21:c0:37:a2:66:b2:e8:
0e:2e:8c:d4:74:c9:3f:7f:dc:05:71:e4:76:97:a8:
d1:de:dc:9f:09:bf:70:6a:05:e1:28:82:1b:56:7b:
40:fa:6f:a3:11:70:c8:54:22:6e:e1:81:e4:07:94:
fd:5e:16:1c:3b:d7:15:57:c1:8e:0a:18:e8:ac:21:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.124.0/22
IPv6:
2a0c:a500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209385
Signature Algorithm: sha256WithRSAEncryption
2c:93:25:fd:05:a1:d4:ea:80:9f:3a:22:45:c7:bb:bb:53:58:
e9:31:36:d0:00:9d:b1:d3:de:21:53:cf:f6:44:a8:2c:33:02:
6b:d1:19:e7:54:74:e6:0e:db:96:99:a4:f3:6e:c9:69:da:e0:
dd:22:c3:0e:45:ba:27:bb:50:c7:ab:30:21:9d:e2:c1:01:72:
91:50:da:2a:28:2f:53:1c:de:8a:41:9b:06:23:13:72:64:d1:
bc:0e:56:32:86:3c:51:9b:8a:d2:10:6f:c8:68:82:20:02:c5:
82:fa:17:ff:40:b3:39:94:72:04:7d:2e:c3:c3:03:20:5c:d0:
c1:c3:a6:df:88:08:4b:0e:e3:19:3f:3c:4c:ed:05:79:94:3f:
83:56:8a:b0:39:29:52:6f:86:84:90:e7:05:3a:17:b1:f5:6a:
a0:a5:8e:30:4e:1b:6e:62:54:62:c5:7a:99:36:8b:b3:44:d8:
85:82:d0:c6:2c:d4:c3:18:34:42:52:23:40:a7:a0:dc:13:88:
17:8d:cb:ff:7b:3a:23:74:e4:b1:4c:0a:0c:ce:b4:bd:ad:33:
05:af:ee:31:10:5a:bc:0c:af:06:87:d4:e9:65:b4:f0:f0:5f:
d7:1e:a1:e6:7c:91:6e:63:2d:17:8d:35:e0:6d:d7:a4:6b:fc:
f1:a7:e6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:03 2025 by rpki-client