Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer (raw, json)
Hash identifier: v+ZTMDZW2OfdlZ8ONkqD12Pvmgd2oM3vttA9GCPu15U=
Subject key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C461B2FBB04A85FF4730148C65305
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 1267 -- 1269
IP: 151.81.0.0 -- 151.84.255.255
IP: 151.93.0.0/16
IP: 151.95.0.0/16
IP: 185.215.172.0/22
IP: 192.5.97.0/24
IP: 192.92.126.0/24
IP: 192.94.212.0/24
IP: 192.106.0.0/16
IP: 193.70.128.0/17
IP: 193.76.0.0/16
IP: 195.45.0.0/16
IP: 2a02:b000::/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:46:1b:2f:bb:04:a8:5f:f4:73:01:48:c6:53:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:eb:0f:86:90:3f:93:61:02:2b:03:da:75:
3f:8b:97:e7:ea:a1:e5:3d:c2:ed:63:ce:a5:30:60:
1e:19:9c:43:30:6d:ef:5f:05:84:24:ab:79:0c:e9:
2e:17:57:90:9b:2b:e0:df:5f:26:69:70:e2:f4:52:
3d:1b:bb:6b:cc:54:3e:13:98:c1:fb:86:44:bb:77:
16:21:f3:2c:a5:89:be:ec:56:65:81:ba:e8:d2:1c:
ab:f2:de:75:88:bf:04:04:4c:3a:50:4f:ef:7c:c7:
2d:40:aa:52:e2:57:f5:ca:91:72:b9:0e:3d:d0:fd:
6b:01:0f:c8:d6:f0:7f:23:1b:dc:f2:45:83:0e:fb:
59:77:5d:c3:1b:11:2b:b3:45:ac:f2:21:05:2d:d4:
f4:e5:7f:46:6f:ea:07:b6:d0:10:05:d7:77:93:0e:
2e:03:4b:7d:99:76:51:ad:67:67:09:83:18:26:8f:
27:ef:cb:29:9f:c3:2c:81:23:8f:ba:e1:08:23:26:
26:13:20:b2:2c:2a:94:7a:80:96:6a:ce:16:cb:5c:
f2:b3:f0:20:06:78:1f:20:93:18:7c:6f:42:e1:ea:
16:a4:0e:66:94:39:ac:2d:05:a1:9b:0b:6c:02:27:
b6:78:a8:a7:af:10:b8:e2:4e:80:a0:04:64:c0:5b:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.81.0.0-151.84.255.255
151.93.0.0/16
151.95.0.0/16
185.215.172.0/22
192.5.97.0/24
192.92.126.0/24
192.94.212.0/24
192.106.0.0/16
193.70.128.0/17
193.76.0.0/16
195.45.0.0/16
IPv6:
2a02:b000::/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1267-1269
Signature Algorithm: sha256WithRSAEncryption
86:d1:83:09:0a:61:27:eb:95:37:80:38:a5:75:fe:74:5f:8c:
62:b7:4a:46:ad:14:48:6e:67:9c:86:cc:f8:ac:61:b1:cc:cd:
5f:b1:3a:3a:cd:4a:0c:fe:42:06:27:66:92:d2:40:5d:44:08:
ab:61:d8:d0:47:6c:1a:3a:e1:64:80:7c:9a:f9:eb:c3:4c:7f:
51:bc:12:e0:35:4c:3e:00:af:d4:bb:65:9d:b6:7e:6e:15:cc:
c2:be:c9:5f:7b:97:2d:10:f8:13:c7:7b:50:c5:b1:1d:bc:ce:
ab:35:17:d8:61:37:68:a2:63:45:0a:18:2b:9a:63:72:50:c8:
91:57:94:3c:0e:a2:1c:30:3b:4c:2e:56:d5:c0:8f:5e:c5:ee:
8b:39:8a:c7:2b:8b:9a:6d:48:dc:d0:36:f4:30:aa:bf:6e:84:
ff:6b:aa:bc:8d:f8:64:88:01:df:21:51:97:eb:f5:3b:fa:f6:
4e:bd:3e:a6:76:43:07:e5:bf:c5:dc:2e:04:7a:d8:b2:68:79:
a1:74:1d:05:de:83:75:36:0b:88:9e:af:3c:df:b5:11:aa:f1:
70:f8:e7:45:8b:f6:22:80:2f:c4:8f:fb:54:3b:7b:35:1d:29:
eb:83:68:38:fa:b2:31:e5:5a:68:8a:75:b6:bf:5b:a4:3e:fc:
7f:77:c5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:00:49 2025 by rpki-client