Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.cer (raw, json)
Hash identifier: aB0t5ESrH7NAlHfPsE4bXIS73Joya6MjKCAjdUM7j4Q=
Subject key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019440B5D868B7BFED187B33BEBC956F4EA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Jan 2025 12:20:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207925
AS: 212109
IP: 45.9.20.0/24
IP: 193.143.226.0/24
IP: 2a10:8700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:b5:d8:68:b7:bf:ed:18:7b:33:be:bc:95:6f:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 7 12:20:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5026c9974092e220542401281f9bdfd356c2842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:a3:b2:15:20:c8:95:8b:1f:5b:71:fc:f8:
0c:75:ab:21:2b:9a:78:a8:45:f5:35:7b:a9:cd:22:
57:56:d7:c2:6e:f5:4f:15:ca:13:10:aa:ca:ba:35:
5c:4f:74:8c:7a:f5:b2:72:26:44:87:9f:24:92:25:
87:2a:ba:e2:86:16:37:fa:c0:e2:af:98:4d:69:4c:
0a:06:3f:18:52:9a:90:92:6b:3c:e0:59:21:11:a7:
97:5b:c7:b9:16:47:2a:65:88:7a:5c:ca:df:6b:11:
c7:76:df:bd:35:a4:e7:43:75:d1:28:81:10:52:12:
5a:2c:fb:dc:bc:30:7b:a1:f0:b9:1a:d1:e9:33:db:
ee:23:78:43:e3:3e:a7:0b:f4:9c:fd:83:91:cf:ce:
11:1f:82:1f:09:1f:9c:e4:ec:3a:f4:03:5a:68:fa:
57:0d:39:79:d2:e4:c5:de:96:27:99:de:f6:5a:41:
54:ad:84:2e:81:57:3e:36:23:c8:58:06:57:e6:ef:
15:e4:04:d1:62:37:f8:d6:61:f4:d0:1a:66:12:d4:
f3:f1:dd:81:9c:9d:49:5b:1c:c5:dc:b5:cb:0c:f4:
b4:a6:0e:ca:dc:08:a6:84:f9:65:4b:61:3c:31:12:
09:e5:ce:1d:7b:a5:92:20:a0:0a:d6:34:6b:e7:da:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.20.0/24
193.143.226.0/24
IPv6:
2a10:8700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207925
212109
Signature Algorithm: sha256WithRSAEncryption
4b:ef:ff:62:12:e3:ff:12:9b:c9:ea:b9:76:42:f1:80:de:1d:
a8:40:22:99:a4:12:a1:69:ba:8e:61:1f:ab:eb:6d:01:6d:65:
d9:80:04:de:03:68:94:8f:e4:2e:19:e7:2d:64:f8:46:fb:20:
e4:9d:2e:0f:a3:36:01:17:45:81:3b:20:9b:25:76:35:f7:2a:
22:04:06:c6:d0:cd:91:74:62:0f:2b:ed:22:ba:c3:b7:b7:d5:
29:22:fd:f7:0f:e9:b4:6a:13:4b:86:0d:8a:0e:19:6b:85:46:
30:09:6d:5f:42:c9:fb:04:5e:3c:37:33:48:5a:f4:23:cc:1d:
58:72:73:9b:9a:81:2e:2c:50:2d:18:72:05:8d:0e:60:69:53:
d9:db:a5:1e:ed:ef:4f:b2:28:dc:eb:81:4e:e9:41:fd:4a:19:
aa:ef:83:7b:cf:ec:d7:c2:de:f3:7e:2a:70:5c:db:99:ad:12:
30:43:60:19:a2:d0:f6:50:c8:5a:46:4e:87:62:3a:a4:dc:18:
6b:c7:88:b3:43:e1:a3:aa:00:48:c5:8b:e6:eb:31:d7:04:ba:
0c:d0:d5:d2:a9:da:2f:bc:6e:29:ce:f9:07:18:b4:e8:36:8a:
11:9b:3a:39:38:1c:29:34:ec:5e:e0:39:dc:cc:79:f3:c2:6a:
d7:1a:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:52 2025 by rpki-client