
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
File: rQVANtrTLReoyRbcLfuzzoo2RSw.cer (raw, json)
Hash identifier: ehDStj6+wjH04onmZlrzD3XS8DvTgUOH+DjHtCnqsos=
Subject key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C307CB3BA65AD0D52227F4BB8E0EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13278
IP: 195.234.165.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:30:7c:b3:ba:65:ad:0d:52:22:7f:4b:b8:e0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:59:21:42:e7:84:26:c1:da:87:ba:0f:18:
ef:98:cb:32:35:81:f0:a6:11:b8:82:67:ef:4f:1d:
2c:a7:6f:e5:63:55:96:ab:d9:d6:ea:ef:9e:d0:b2:
6d:df:05:0c:f3:da:e7:40:e4:bc:a5:d3:d4:d7:91:
b7:2d:1f:c2:45:3a:7c:60:25:73:a3:6b:f3:c9:c0:
4d:66:2d:f0:32:da:e0:c8:33:84:6f:d4:27:1e:cb:
6d:d2:56:3d:dc:7d:72:c8:ae:25:b8:0d:61:60:28:
dd:02:0c:19:35:87:90:8e:16:8b:b4:e4:29:bc:5a:
da:90:b2:46:82:c8:90:31:ae:3b:00:c1:7a:8e:45:
90:8f:76:ee:3a:80:1f:1f:45:3e:1f:5a:2a:0d:fd:
ba:fc:36:8b:3d:4b:4f:01:1a:5f:d3:33:54:c8:88:
2c:cc:3f:75:2b:42:a8:a3:66:26:ef:86:e4:da:f0:
20:63:b1:cd:ac:c2:40:c7:bc:67:83:f6:ab:bd:3d:
3f:ee:47:8b:ec:f4:a3:82:41:0d:d9:32:18:8a:a4:
d1:c0:35:d4:03:7c:2c:4a:ab:88:54:df:a9:9b:b2:
c4:b4:19:a5:f3:65:12:fd:61:ad:ab:6f:69:ec:c6:
2c:16:b1:bf:bf:9c:9f:3c:4f:1d:0f:5d:02:18:61:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.165.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13278
Signature Algorithm: sha256WithRSAEncryption
08:94:f3:b8:87:e5:8e:99:f1:a1:5c:cc:73:30:b5:78:ab:e3:
d0:7e:34:4a:60:2a:ce:c1:ba:c0:ad:eb:22:ba:91:87:77:41:
db:e5:b1:3c:24:d4:f0:bb:4d:4f:44:c7:f7:b4:7e:82:01:81:
be:2e:7f:98:f0:75:09:f6:65:53:a3:28:cd:9c:1a:86:06:e9:
a4:88:71:0a:0d:e7:0a:68:dd:bf:3d:e6:4d:8e:1b:9f:40:86:
05:17:c2:8e:2b:91:0a:25:ce:62:87:7e:a3:f5:d3:bd:d1:b0:
9f:8e:58:c4:79:bf:fd:b2:be:5d:fb:5f:f6:0b:36:31:c0:6b:
56:c2:cf:db:98:29:cf:78:80:a5:1f:30:c9:c0:58:7c:0c:a0:
df:e4:74:f8:44:ac:3d:c7:68:2d:9e:42:c7:e4:29:45:1a:6b:
55:90:84:3a:d8:5f:e1:99:9f:45:a9:2d:dc:85:e9:4f:c4:53:
d5:20:ad:f7:9a:aa:f6:47:99:5a:24:44:d8:04:87:45:69:b1:
10:d8:4c:45:a5:5f:82:cc:59:18:6b:1c:b2:9a:e3:e2:c7:64:
08:50:a2:21:31:af:8b:83:d9:fb:13:58:d8:68:e0:b4:cf:9c:
03:47:72:4e:5b:4e:d9:f1:ee:fa:06:a7:18:8d:35:ad:06:4b:
d7:db:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:35 2025 by rpki-client