Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer (raw, json)
Hash identifier: EKn3OayBu1rh+FnRzXJ7JnwZtS4Kpvhp0XSU9F41VU4=
Subject key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B22C30E2C0416177090B74ECFD112
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208134
IP: 45.92.136.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:22:c3:0e:2c:04:16:17:70:90:b7:4e:cf:d1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:ea:24:02:ea:b1:61:33:31:15:04:00:3d:
17:17:d9:f9:4b:b5:a2:0e:10:aa:fc:cd:e7:56:b4:
43:22:57:19:bb:b8:25:e4:ba:1c:38:ff:2e:91:f7:
50:71:ae:d9:3f:33:34:d5:03:0f:75:41:60:66:57:
2b:3a:04:a2:94:c9:a3:58:17:93:5a:49:9f:6e:2e:
40:a2:a0:20:bc:4b:03:8e:96:b1:45:9a:65:e7:e8:
4a:53:67:45:d8:36:83:f0:bf:e5:8a:2d:96:4e:67:
c5:79:17:7c:c7:0e:c6:49:90:8f:58:bc:45:79:ca:
67:b8:5f:b0:49:ff:27:3e:2d:1a:84:e6:ec:b1:b7:
08:31:1b:e4:e6:b6:ce:7b:48:7c:1a:db:80:7b:87:
0b:a6:70:49:91:bf:e0:70:52:17:74:c3:51:31:83:
3a:75:c7:b2:3f:03:92:87:95:c3:dc:a9:90:17:82:
61:7f:45:1b:3d:0b:6b:83:8e:4e:cd:11:63:f4:e1:
a0:00:2d:e2:c3:a3:8c:85:1d:ce:b5:65:fb:ca:e6:
d5:13:32:6c:e7:01:9f:74:51:b6:86:6c:b8:60:5c:
6a:67:eb:03:56:90:8e:1c:db:fa:4b:79:69:d8:0f:
17:e8:5d:c1:e5:ab:28:7a:74:f1:07:fe:97:e7:14:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208134
Signature Algorithm: sha256WithRSAEncryption
76:40:3c:c7:43:3d:ec:4a:5b:8a:20:5b:96:61:41:60:c4:16:
cc:cc:f7:aa:3c:e3:e5:89:dd:70:4b:6a:ed:5a:01:02:0d:d3:
1e:45:05:59:40:34:07:12:e8:d7:24:88:8a:9d:54:dc:07:d7:
51:10:ef:ad:8b:6c:a8:47:de:97:9f:1c:93:d0:a2:2b:da:c1:
f1:6e:5e:c1:9d:01:d6:ea:6c:cd:12:93:d3:1a:86:27:d5:2d:
45:67:9e:b3:10:20:d6:a5:27:0c:0b:55:00:5e:79:08:e4:dd:
f1:b2:e6:86:24:fe:69:9d:18:41:3b:7f:df:43:7b:8b:ae:81:
17:19:9a:56:ac:56:87:ea:87:44:0b:f9:d2:ad:89:76:58:16:
db:39:2e:2c:21:9a:cf:b6:30:29:d5:09:28:20:67:62:12:f8:
d6:3f:b6:3f:1d:3c:28:0e:87:08:63:0d:11:2a:23:3f:87:9b:
d0:71:17:6d:64:9a:df:a4:c4:e8:64:35:c2:41:73:24:da:ef:
a9:f6:13:1b:da:32:2d:c7:4f:5d:53:78:38:1f:65:08:7b:81:
3e:37:2c:35:b3:31:36:86:da:d6:4d:d4:97:a1:89:ab:22:0d:
77:cd:1d:65:a2:6a:56:73:27:06:d2:3d:79:c7:7c:07:b5:ff:
32:f5:8e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:03 2025 by rpki-client