Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
File: pqBDS-vl36Y92njCSk68HSzXNp0.cer (raw, json)
Hash identifier: d+1o815eiCKwKkrRt5wqGTRtD0KzELA2mIxJ6u2adck=
Subject key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B59E97C3253D9DD3E08EC77666811
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42649
AS: 208583
AS: 209437
IP: 178.239.48.0/20
IP: 185.24.248.0/22
IP: 185.149.56.0/22
IP: 185.195.92.0/22
IP: 2a0a:56c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:59:e9:7c:32:53:d9:dd:3e:08:ec:77:66:68:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:ad:fe:3b:d9:fc:87:5b:8e:a6:06:65:fc:
14:09:93:c8:4f:99:ce:bb:c6:db:dd:55:74:a2:6f:
d5:0e:2c:28:8a:cc:54:29:5d:c2:cd:41:81:30:2d:
dc:51:1d:f1:bc:4c:c9:dd:1e:74:1d:01:cd:9d:b9:
76:da:fc:a9:b3:b9:ce:56:bd:57:04:88:5e:8a:e2:
56:75:44:57:6d:16:ea:af:c4:f5:ea:1e:d1:0c:57:
61:59:be:65:72:0d:c0:73:8d:26:a4:71:83:ff:81:
e4:fc:33:8d:55:95:5a:25:a8:f9:ba:a6:d5:ab:f7:
d7:f8:01:fd:4c:b0:84:d1:ee:2d:45:2c:9a:2d:57:
22:3b:68:ea:cf:d3:e0:21:aa:c0:b7:d2:15:e3:eb:
c1:0a:85:bb:29:ad:01:0d:86:32:3e:01:a1:14:74:
14:28:d9:97:57:8e:99:a7:49:79:df:68:31:cb:14:
06:66:39:d5:9e:02:85:26:48:00:5b:e9:c2:2e:ee:
fd:f0:de:00:c0:c9:c1:a2:57:76:e8:fb:f4:0a:cd:
c3:36:bf:49:61:0b:a2:8a:51:01:62:42:01:95:ba:
fc:b4:88:09:cc:c1:05:a9:ca:f7:38:8c:af:0b:1a:
66:43:b6:a0:88:ca:41:5c:14:e7:2c:96:4d:9d:ed:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.48.0/20
185.24.248.0/22
185.149.56.0/22
185.195.92.0/22
IPv6:
2a0a:56c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42649
208583
209437
Signature Algorithm: sha256WithRSAEncryption
7e:ca:6f:2e:46:a6:f3:cb:68:ba:a2:a9:a9:53:55:93:cb:ad:
f1:41:1a:b1:c0:de:49:5b:83:22:c6:70:05:31:93:49:18:94:
c5:d2:e5:1b:2f:bd:5e:f9:2a:96:31:c3:3a:9b:3d:07:8d:e5:
a6:93:99:26:92:c5:75:26:38:c1:89:6c:49:c4:6c:4a:b3:b2:
23:bf:c5:e8:b9:1d:01:0f:04:c6:7d:41:b2:21:53:35:81:08:
46:84:44:eb:d5:14:74:24:31:7b:83:2f:a5:b6:bc:7a:14:e7:
a6:aa:78:8c:4f:56:83:f9:83:f7:13:c8:9f:08:44:d4:02:13:
9a:bb:c9:01:cb:56:fd:77:04:bd:13:02:56:7f:6f:51:76:d6:
64:f6:a4:fb:64:09:82:d5:43:35:77:98:c8:07:65:28:10:c8:
ef:89:73:2c:cd:0e:fd:b3:b2:73:a6:b7:16:ce:ae:54:8c:43:
8d:02:2c:cc:0f:0c:c9:9d:2b:d0:d9:ad:83:63:52:53:05:2d:
73:2d:ed:35:0a:53:b0:84:dc:92:5c:58:cb:6b:d3:95:19:74:
22:24:2f:e7:63:30:07:b2:2c:a6:9c:d4:a3:e3:8b:3c:0b:e4:
81:5b:12:59:a6:1a:1b:80:50:d3:c5:13:d5:f0:d1:be:06:d1:
db:78:54:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:09 2025 by rpki-client