Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/blQs7eU6DFcUWmr_L1gZbwLUoS4.cer
File: blQs7eU6DFcUWmr_L1gZbwLUoS4.cer (raw, json)
Hash identifier: Jof5/4IFmMN8n5JY9fAfFgq+ooWt4tWMmq6v+TUeG7A=
Subject key identifier: 6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942827E1EF0D6A9D916D40DDBE52CB0F2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207327
IP: 195.226.218.0/24
IP: 2a10:2d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:e1:ef:0d:6a:9d:91:6d:40:dd:be:52:cb:0f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e542cede53a0c57145a6aff2f58196f02d4a12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ac:a5:72:75:ee:26:ad:ba:c1:83:a2:e5:be:
38:98:8d:ad:1f:2f:fd:26:71:00:b4:fe:6a:ce:4e:
3e:ac:15:e9:1d:44:00:38:cd:a4:04:f8:11:9b:8f:
61:1f:8f:7b:b0:23:93:0c:85:2c:76:20:67:fa:2a:
de:de:d2:ec:de:8f:57:25:47:52:03:3b:cf:27:1b:
96:c5:87:b7:08:44:6c:67:19:89:d9:a2:f8:c5:f6:
3b:69:4d:a8:09:79:ff:66:36:5a:b7:36:10:f0:5f:
1a:4d:ee:97:7d:10:43:4e:e6:4d:ac:94:77:22:e0:
a2:06:48:ed:bc:2d:98:82:ce:84:c4:8f:2d:6a:c7:
d7:e0:d1:e4:29:04:9c:70:18:0d:61:0e:d6:55:e8:
60:61:34:7b:42:46:df:65:fb:c1:9e:57:06:b4:1a:
22:d6:e6:23:ac:c0:7a:99:19:80:ef:0e:8b:83:8b:
19:ed:b5:5a:bf:d5:e5:c1:74:f3:eb:06:54:f8:42:
9c:65:aa:7c:38:d8:f8:ce:4b:47:e0:c1:78:ee:24:
cf:65:34:e4:d5:02:ca:da:65:ba:9a:c6:25:f1:cc:
37:e5:14:36:67:99:ca:48:eb:2a:3e:d3:37:7f:2e:
e9:a6:d4:65:e2:8b:b5:02:94:6f:ed:98:d1:2e:4e:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:54:2C:ED:E5:3A:0C:57:14:5A:6A:FF:2F:58:19:6F:02:D4:A1:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/32169a-4a5a-411b-b006-318c71b119f7/1/blQs7eU6DFcUWmr_L1gZbwLUoS4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.218.0/24
IPv6:
2a10:2d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207327
Signature Algorithm: sha256WithRSAEncryption
87:3c:68:49:83:b0:f4:51:2e:fc:b7:4f:3b:80:c2:d1:b2:d1:
ec:3a:c5:4e:ab:58:ce:05:9f:ac:a5:c5:d4:ff:87:5d:98:87:
a1:40:e5:55:75:40:41:e9:a2:f4:32:3a:8e:72:3e:9a:6d:ec:
5c:31:7d:cb:fe:02:0c:23:91:6c:7e:98:2d:c3:1c:5b:4c:37:
b4:f4:85:c0:49:83:17:f2:15:0c:85:c2:ba:11:f0:65:41:92:
5a:8b:cf:cb:f8:8b:53:dc:e3:31:f7:84:a3:a4:c6:68:5f:2a:
61:e3:ea:fb:c4:10:c4:93:3b:7d:c4:4a:85:36:90:94:46:ee:
f8:69:1e:e8:f8:37:61:8e:e9:15:4c:7a:f2:a8:9e:29:a6:42:
d8:9c:33:bb:d5:9d:f7:ea:3d:ef:2e:38:12:8f:f8:4b:4b:fc:
79:a3:68:a5:43:8f:0a:8f:71:e1:68:a5:c7:0d:eb:6d:cd:f7:
9c:3a:48:68:da:56:ae:a6:fd:9a:62:50:bf:77:a7:ad:b7:f7:
a6:46:ed:69:9f:26:7c:59:18:c6:c5:59:0b:ca:65:f3:0c:87:
67:b6:92:70:e0:c9:48:3d:2b:63:cf:d3:7c:1b:06:65:e5:1a:
32:09:7e:c1:13:9a:0e:37:bd:da:ec:75:c1:73:ce:26:36:f5:
37:b9:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:26 2025 by rpki-client