Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X Configuration Manual page 269

show ipsec key pubkey-chain rsa
For information about the format of an RSA public key, see "Public Key Format"
on page 221 .
Example
host1#show ipsec key mypubkey rsa
30819f30 0d06092a 864886f7 0d010101 05000381 8d003081 89028181 009cfbde
a16cf72c 49fbd3c1 10d5d9d4 8ba15ec0 9adcb19e 18d488f8 e0370c51 2d10e751
ddd81be4 dfc78aad 9deb797f b2c51172 18967cfb e18f6efa 69285fef 10337527
78ca6bbc 907abb9e 44b12713 ab70cb0e a86d9c6c 80c99bd1 e2bf6b70 91222295
616a88bb cc479e15 be04f3a5 a6160645 844598c3 314b66af 3a8b7602 ed020301
0001
See show ipsec key mypubkey rsa.
Use to display a 1024-bit or 2048-bit ISAKMP/IKE public key that a remote peer
uses for RSA authentication.
To display a brief summary of the remote peers for which public keys are
configured on the router, use the summary keyword.
To display the public key for a remote peer with a specific IP address, use the
address keyword followed by the IP address, in 32-bit dotted decimal format.
To display the public key for a remote peer with a specific identity, use the name
keyword followed by either:
The fully qualified domain name (FQDN)
The FQDN preceded by an optional user@ specification; this is also referred
to as user FQDN format
The FQDN and user FQDN identifiers are case-sensitive and must exactly match
the identifier specified in the ipsec key pubkey-chain rsa command. For
example, a public key for user FQDN mjones@sales.company_abc.com does
not match a public key for FQDN sales.company_abc.com.
For information about the format of an RSA public key, see "Public Key Format"
on page 221 .
Field descriptions
Remote Peer IP address, FQDN, or user FQDN identifier of the remote peer
for which the peer public key can be used
Key Type Type of remote peer identifier: ip address (if IP address is
specified) or identity (if FQDN or user FQDN is specified)
Example 1 Displays a summary of the remote peers for which peer public keys
are configured
host1#show ipsec key pubkey-chain rsa summary
Remote Peer
-----------------------------
192.168.32.3
grp003.cust535.isp.net
tsmith@grp003.cust535.isp.net
Chapter 8: Configuring Digital Certificates
Key Type
----------
ip address
identity
identity
Monitoring Digital Certificates and Public Keys
243