Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zQwDKJL2la9ME_sKyoBD0Xsbl78.cer
File: zQwDKJL2la9ME_sKyoBD0Xsbl78.cer (raw, json)
Hash identifier: 3j+5m6gaaNHBIz0t4td2kYzm5nzrrI/NxoS4V/ZcmJw=
Subject key identifier: CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D8DB328E261704C903332A5A2BACC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200010
IP: 185.137.98.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:db:32:8e:26:17:04:c9:03:33:2a:5a:2b:ac:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd0c032892f695af4c13fb0aca8043d17b1b97bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:c0:a3:47:2c:02:f4:fc:a3:fa:aa:7b:5f:
78:cd:2f:c1:8b:b7:00:c7:da:1d:96:7a:98:14:d6:
3f:1c:ac:bc:6c:f1:a3:bd:55:86:d3:d4:3f:e7:70:
d1:56:16:4d:28:6c:9f:5b:cf:9e:49:ca:d8:74:ba:
bb:87:12:94:45:e1:26:10:c9:cc:9b:88:45:a0:22:
d4:59:90:69:48:b0:b1:f6:d9:51:d8:ac:79:6a:d3:
71:09:e2:e9:29:c2:18:34:c7:24:cf:ef:4c:b3:c8:
50:f2:6e:73:54:5c:9f:42:7b:73:fc:cd:9e:1b:f3:
93:e9:be:e9:94:61:58:f3:f5:83:f4:54:70:7e:38:
f2:85:5e:cd:70:3e:1c:be:88:6d:61:7d:d7:39:2d:
86:b8:dd:9d:a5:fe:05:c9:62:2e:fd:d7:c2:71:65:
c4:e1:07:cd:72:42:48:dc:23:39:c7:0b:f0:f2:39:
35:59:3f:1f:9e:da:7e:d2:c9:42:9f:5c:9e:51:80:
19:24:ce:49:ab:bb:04:0c:34:57:8f:56:62:1b:d4:
20:37:d5:9f:92:fd:19:3a:d1:bc:27:5c:be:ef:5b:
77:aa:87:84:01:04:7a:8b:e6:a3:45:47:64:5a:79:
88:78:09:82:21:7a:05:94:69:c1:a0:4d:bd:06:99:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0C:03:28:92:F6:95:AF:4C:13:FB:0A:CA:80:43:D1:7B:1B:97:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/384a32-3e1c-4d86-bdb8-35276b7975ae/1/zQwDKJL2la9ME_sKyoBD0Xsbl78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.98.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200010
Signature Algorithm: sha256WithRSAEncryption
27:36:c8:21:0f:bd:24:dc:90:36:1e:9b:15:37:af:9b:4c:03:
72:7b:d0:02:6e:c9:69:47:02:d1:46:f6:14:4c:b8:7f:69:9b:
55:8d:fa:46:5d:5b:11:b9:eb:2c:76:c2:39:ff:bd:f4:99:4d:
f8:c4:67:a6:db:37:90:45:f3:ba:52:f4:e5:ba:20:1f:fe:69:
2a:e7:d4:a4:f6:fb:2e:e2:27:c6:f8:bb:72:a9:44:e8:1b:28:
ba:59:57:4e:3c:cb:88:96:56:3b:78:2a:ed:e2:23:d8:2d:7b:
08:f5:a7:26:e8:06:f9:10:30:97:5b:7a:f2:06:f9:53:35:58:
95:fc:d6:82:22:8e:90:05:8a:8f:c0:fc:90:db:7d:fd:b7:6a:
07:f4:59:29:6f:5a:ed:f3:94:f4:46:06:de:2c:aa:ca:db:c8:
70:b8:05:7d:49:5e:65:71:1a:e4:40:39:93:ba:49:c4:f4:cd:
40:5d:d7:c2:2e:05:c9:ff:cf:a2:a2:18:38:b7:6a:68:d9:01:
2f:89:83:d6:1d:6c:e1:b1:00:c8:6b:68:27:7f:d3:c7:63:93:
59:78:8d:7d:96:22:6d:70:7d:a7:a6:6e:11:08:70:fa:24:b1:
a1:78:1a:fd:08:00:6e:de:11:7a:21:e0:0b:84:c5:9d:d9:49:
f4:42:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:09 2025 by rpki-client