Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
File: gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer (raw, json)
Hash identifier: Uh4QpOmV9hwDSwQnbtXumUqIbUats4A12SHWTSUh3P0=
Subject key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F22F0C6EAC4BDFDA7767830ABE609
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44999
AS: 196798
IP: 87.236.8.0/21
IP: 93.188.120.0/21
IP: 176.62.216.0/21
IP: 185.110.208.0/22
IP: 185.121.244.0/22
IP: 188.94.224.0/21
IP: 2a01:6e20::/32
IP: 2a03:ccc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:22:f0:c6:ea:c4:bd:fd:a7:76:78:30:ab:e6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:87:5c:6e:80:15:7d:c6:b0:9a:b2:8e:1c:
ea:e3:69:4e:31:8b:a9:52:08:12:b5:f6:53:8d:3d:
dd:a0:3a:15:36:e1:87:d6:7b:21:69:6a:e7:7a:32:
77:aa:5c:a1:fc:a3:09:ec:39:54:07:4f:c1:b9:8d:
6c:5f:60:0f:ed:5f:b8:d1:35:20:cf:87:e6:59:17:
e5:65:12:a0:39:e6:67:4d:11:f5:a3:98:59:19:18:
d2:37:91:03:5d:9b:b8:d5:8f:69:b2:48:04:96:af:
a6:5a:3e:3b:5f:66:44:1c:d3:ea:11:7e:21:10:bb:
7d:af:fb:f6:9b:88:d4:59:8e:49:87:44:7a:fb:d2:
14:55:92:47:28:09:9a:32:d2:db:e9:a8:0b:67:b2:
9c:d1:0b:be:47:3c:39:51:22:ed:2b:1d:60:36:69:
d7:d1:7a:c1:d9:52:4d:1f:08:cb:2d:bd:f4:f0:9f:
fd:85:a8:4c:de:4e:f2:6b:a3:e7:82:76:04:b5:36:
34:85:6c:96:77:1e:a1:2b:9d:95:a4:e1:38:c8:f5:
7e:93:78:e1:6d:21:14:85:3e:ae:48:15:66:70:ec:
12:f3:f5:ce:79:73:2d:44:c5:a1:b8:1f:ea:82:6a:
bf:65:d6:d0:f7:bb:33:be:30:72:90:14:f0:7f:f8:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.8.0/21
93.188.120.0/21
176.62.216.0/21
185.110.208.0/22
185.121.244.0/22
188.94.224.0/21
IPv6:
2a01:6e20::/32
2a03:ccc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44999
196798
Signature Algorithm: sha256WithRSAEncryption
6f:0f:18:62:b5:69:e9:b0:cb:2c:a9:a0:87:b9:d0:4c:fc:e8:
e7:b6:c6:9d:72:9c:aa:bd:eb:cc:98:c0:68:50:b8:68:4b:29:
f5:3d:6c:b2:53:32:de:75:29:fe:8c:fc:ae:d2:11:55:2b:5b:
12:4a:01:be:a8:63:3d:d0:9f:8c:a2:5f:97:12:a4:f1:96:52:
0d:3d:46:34:25:35:fb:9c:66:dd:fd:83:be:b6:1e:60:a8:8b:
4d:ed:6e:85:70:5e:fa:24:31:21:3a:1a:71:7f:8a:5c:af:02:
cf:97:5a:0c:94:4e:8c:ea:3b:c5:9b:40:69:30:11:7e:54:6d:
05:4c:d1:80:c0:04:95:e2:b8:b0:67:d1:a3:f6:a9:30:47:06:
fd:d1:67:b3:20:48:65:72:d9:86:c0:76:27:0b:4f:e9:e8:10:
05:fc:63:0e:df:cd:96:bf:48:98:bf:8f:f6:5c:86:da:cc:98:
a8:38:ab:92:68:90:67:94:b6:67:e2:41:1b:36:d3:09:0a:b4:
0e:bb:88:85:f4:87:ee:2e:f4:5d:f2:a0:c8:85:80:28:e9:76:
1c:7c:da:32:b4:af:86:74:25:38:df:1b:5e:6e:9b:67:19:ab:
bc:ea:83:d3:25:c6:de:fb:cd:51:ab:7b:dc:95:84:0d:70:fc:
0c:cd:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:43:32 2025 by rpki-client