Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
File: q8Legg4C88P4bluMnEndxJMlEj8.cer (raw, json)
Hash identifier: bYUZ7EQ14mExGdvREac/lvOhjIf1/mf3EwbkNtLBReY=
Subject key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2341A529798798954A5AF4D22EE38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201072
IP: 193.57.184.0 -- 193.57.199.255
IP: 193.57.204.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:34:1a:52:97:98:79:89:54:a5:af:4d:22:ee:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:fc:07:3e:89:32:0e:e6:d9:0c:92:62:7e:
05:a4:2c:84:b9:37:d3:6a:ab:91:92:74:84:1a:5d:
7b:b7:ee:32:5e:95:f9:3e:56:1d:09:9f:39:9d:c9:
75:f9:8e:4e:2e:bb:3f:af:c5:ce:4b:7b:f1:69:26:
0b:55:c5:26:5f:e4:47:e4:23:2d:85:5f:58:37:dd:
ac:09:c1:2d:0e:ad:db:4c:1b:07:d8:c5:cc:f2:c1:
7c:13:16:e6:c5:72:0e:41:53:40:69:7c:a6:fc:70:
f2:c7:e8:17:fa:3a:79:c9:2f:0f:43:8c:ae:79:28:
0f:0a:5f:c4:3a:98:50:f0:54:bb:49:f1:39:83:95:
6f:11:22:81:e7:a3:be:01:7d:3f:11:38:df:a8:3f:
5a:1a:14:a6:cd:f3:e1:7d:d8:59:66:5f:b6:e2:13:
81:94:4a:cf:8c:4f:0f:23:21:76:af:e3:4f:8e:4c:
ad:11:af:c3:f6:b9:0c:85:7c:df:2d:4b:c3:f5:97:
2a:16:26:bb:33:23:04:a9:7f:7d:32:67:66:ec:b2:
45:45:10:f9:8d:be:47:48:ea:3b:95:80:7f:1c:a5:
c7:60:d0:5b:1d:ad:ef:86:46:99:bd:54:b8:3d:c3:
79:8a:00:df:8e:11:d6:75:fd:57:69:ba:2e:5f:bd:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.184.0-193.57.199.255
193.57.204.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201072
Signature Algorithm: sha256WithRSAEncryption
14:25:53:d8:b4:f7:6f:8c:aa:49:32:eb:89:75:55:84:b6:79:
d7:7d:0b:12:ab:92:60:3e:b9:eb:01:69:29:c3:dc:db:02:29:
1f:1a:c6:c1:81:3a:f3:b3:05:ca:03:89:be:34:48:b6:19:80:
d3:ff:99:ef:59:bf:fd:74:d8:4d:54:5c:6b:7f:21:29:82:1e:
d9:fa:c8:e5:bc:20:5b:bc:6a:20:15:7d:70:7f:fd:6a:14:89:
d3:36:6d:13:eb:f5:b3:30:ff:46:07:b2:7f:0e:a9:ca:38:41:
4a:7d:26:8a:27:a4:ce:e0:5c:ca:a6:db:b2:86:6b:7a:69:a0:
ba:1f:49:22:24:eb:d6:83:07:84:fc:b5:60:15:c1:4d:e5:bb:
77:52:a3:db:a6:2c:56:9e:9a:a7:de:6a:20:0f:11:d9:29:c5:
ed:a7:20:d5:9c:f5:b8:4b:e4:12:19:0f:0e:bd:94:82:41:ac:
64:ea:1c:b0:2f:13:fb:33:2d:35:24:53:9d:6a:2d:43:1b:4b:
02:26:1a:cd:50:6c:10:ff:79:97:8b:9f:15:59:4e:bd:a8:32:
2e:8e:50:ee:dc:48:5b:8b:d2:75:d6:61:39:d8:ac:f2:51:1a:
ad:98:d6:bf:26:20:81:93:18:35:61:c2:cc:6e:05:69:0e:35:
f8:d9:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:36 2025 by rpki-client