Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
File: aQvbGIma-yf-H_eAUW_MC5PIuA0.cer (raw, json)
Hash identifier: DjNzFnfayWqJrci0hJZd7omyV2Bi0cdJaSKUCnkCrTQ=
Subject key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FCA5AA46C09F68678DE7843FA6C83C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.4.153.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a5:aa:46:c0:9f:68:67:8d:e7:84:3f:a6:c8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:44:4b:0c:31:78:b1:8e:63:d4:a8:43:9e:
96:22:4e:48:b7:0b:e0:39:a1:b6:da:09:2b:8e:3f:
a6:75:72:12:9c:3f:41:f8:22:89:2f:12:75:8f:c8:
37:32:30:4b:f7:83:34:f2:13:95:98:5b:2d:e6:ab:
e9:e4:6a:95:10:52:c2:6f:a5:bb:2b:90:3e:88:6c:
93:1e:04:ab:33:01:08:a7:c0:34:60:71:7c:6f:65:
a1:7e:42:2b:44:ec:45:67:2c:f2:54:a3:a1:61:e9:
c5:ef:6b:e1:12:1d:05:3b:3a:e2:19:50:38:2c:e0:
3c:37:6a:c9:4b:af:b7:11:e2:94:3b:5b:f7:41:23:
50:85:09:67:3d:66:ab:63:98:09:8e:c6:c9:0b:e8:
3b:d8:fc:9e:35:91:ac:2f:7c:36:8e:42:ce:ee:b2:
b5:ae:4c:00:5c:e1:01:1b:70:e4:6c:9f:b8:3a:89:
b8:64:f2:52:cf:7a:99:f2:72:aa:76:89:7f:db:8f:
8b:aa:9a:52:b4:01:e0:0e:e8:54:c9:9e:8a:47:06:
23:a4:20:83:c6:d6:e1:a1:7d:28:02:d6:09:7d:42:
80:ad:a3:1a:f1:c3:f1:75:a9:4d:ff:73:9f:e1:56:
6f:4b:a4:66:07:46:92:23:1c:a5:32:15:34:01:dd:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.153.0/24
Signature Algorithm: sha256WithRSAEncryption
03:75:d4:23:3f:19:e7:41:5d:01:a7:17:e7:cb:06:85:2f:7c:
48:1b:f8:21:1e:13:92:46:d2:18:45:64:63:cf:96:b6:ca:88:
b6:0e:57:b0:d3:8f:f2:d2:1b:52:dd:68:61:44:8d:10:ed:31:
65:1a:0a:4b:e3:aa:0a:62:a9:c9:da:33:10:0e:2e:1c:69:1d:
98:40:8d:b0:11:55:1f:96:d7:99:fb:4a:c1:54:42:00:64:1a:
75:9d:7d:63:7a:cd:d8:a4:95:4a:31:73:98:9a:c2:11:d7:4c:
a9:a1:87:62:ba:c3:e3:74:39:bd:f6:58:fb:59:c2:7e:7e:ac:
03:db:de:12:6c:aa:6e:d7:56:b1:e4:5a:c5:a0:6d:d8:8f:09:
d3:f3:56:e2:8d:e5:ec:30:fd:73:f7:e3:47:77:1a:f0:f5:87:
1e:92:b2:62:7f:84:f6:19:4c:f7:20:c9:d2:29:42:36:49:44:
ef:de:25:7c:b0:93:6f:56:e6:d6:8e:94:0a:89:1d:0a:c2:a1:
aa:e6:41:fe:d6:88:d1:00:0f:36:58:19:95:e1:31:76:11:ca:
40:fa:8b:b3:7f:6d:41:67:78:54:bd:b4:67:c5:26:37:3b:6e:
a3:66:42:1b:5c:d8:e4:4f:ba:81:09:0c:88:4a:7e:cb:18:29:
d7:65:b9:31
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQl/KWqRsCfaGeN54Q/psg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTBiZGIxODg5OWFmYjI3ZmUxZmY3ODA1MTZmY2MwYjkzYzhiODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU5ESwwxeLGOY9SoQ56WIk5Itwvg
OaG22gkrjj+mdXISnD9B+CKJLxJ1j8g3MjBL94M08hOVmFst5qvp5GqVEFLCb6W7
K5A+iGyTHgSrMwEIp8A0YHF8b2WhfkIrROxFZyzyVKOhYenF72vhEh0FOzriGVA4
LOA8N2rJS6+3EeKUO1v3QSNQhQlnPWarY5gJjsbJC+g72PyeNZGsL3w2jkLO7rK1
rkwAXOEBG3DkbJ+4Oom4ZPJSz3qZ8nKqdol/24+LqppStAHgDuhUyZ6KRwYjpCCD
xtbhoX0oAtYJfUKAraMa8cPxdalN/3Of4VZvS6RmB0aSIxylMhU0Ad29qQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGkL2xiJmvsn/h/3gFFvzAuTyLgNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzZkODQ3
MC00ODYxLTQxNmQtYTcyYS0yOGFkZWQ4ZGRmYWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvNmQ4NDcw
LTQ4NjEtNDE2ZC1hNzJhLTI4YWRlZDhkZGZhYi8xL2FRdmJHSW1hLXlmLUhfZUFV
V19NQzVQSXVBMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwgSZMA0GCSqGSIb3DQEBCwUAA4IBAQADddQj
PxnnQV0BpxfnywaFL3xIG/ghHhOSRtIYRWRjz5a2yoi2Dlew04/y0htS3WhhRI0Q
7TFlGgpL46oKYqnJ2jMQDi4caR2YQI2wEVUflteZ+0rBVEIAZBp1nX1jes3YpJVK
MXOYmsIR10ypoYdiusPjdDm99lj7WcJ+fqwD294SbKpu11ax5FrFoG3YjwnT81bi
jeXsMP1z9+NHdxrw9YcekrJif4T2GUz3IMnSKUI2SUTv3iV8sJNvVubWjpQKiR0K
wqGq5kH+1ojRAA82WBmV4TF2EcpA+ouzf21BZ3hUvbRnxSY3O26jZkIbXNjkT7qB
CQyISn7LGCnXZbkx
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:00:33 2025 by rpki-client