Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
File: qh3FCktSbfGOiwplZde51Yp10xU.cer (raw, json)
Hash identifier: QzALIhYgjW/A4+ueLxUwu7C81+81f6C8SiBEtsVXozw=
Subject key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E2C559A5CD33D3EAB9A71264E2981
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25484
AS: 31400
AS: 44066
AS: 60211
AS: 203833
IP: 31.172.80.0/20
IP: 37.114.96.0/19
IP: 79.133.32.0/19
IP: 82.211.0.0/18
IP: 84.200.0.0 -- 84.201.63.255
IP: 159.100.0.0/19
IP: 185.26.96.0/22
IP: 185.171.204.0/22
IP: 194.143.134.0/23
IP: 194.187.164.0/22
IP: 212.224.64.0/18
IP: 2001:1608::/29
IP: 2001:1638::/29
IP: 2a01:7e0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2c:55:9a:5c:d3:3d:3e:ab:9a:71:26:4e:29:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:91:a4:3c:01:e0:d1:b7:97:58:13:60:36:
5b:86:4d:7f:99:ab:37:d3:0b:23:09:21:bc:d5:47:
e2:53:92:f1:63:da:5a:92:9e:1c:5e:2b:7f:0a:85:
ca:4e:5d:13:cf:84:2e:a1:f7:31:fb:90:90:6d:87:
4f:25:fb:c7:1d:6c:00:af:4e:f6:c3:01:8a:76:6e:
e4:82:91:02:76:4d:d0:6d:a1:36:54:55:35:98:07:
e2:95:54:3f:c7:13:5b:b3:5c:7b:28:94:ce:0b:e1:
47:0b:44:70:04:7d:6f:05:62:a6:99:a1:01:1f:a3:
f9:ea:6c:55:d4:8f:61:8b:fb:58:30:b8:1d:ed:3b:
be:8c:2d:db:0f:2d:6b:81:ce:b2:1b:b1:aa:62:da:
d5:be:27:dc:c4:dc:96:a4:ef:bd:3c:25:51:74:43:
13:d7:aa:c3:77:93:30:d3:1e:b5:27:37:7b:e2:57:
07:e7:ba:6e:79:2d:3f:54:35:39:60:c4:72:5e:7f:
18:96:2d:07:dd:fb:c1:be:e2:f6:58:b5:a9:72:0e:
78:3f:9b:fc:f9:ae:fc:61:3e:c7:70:2a:62:c1:d7:
f8:7a:b3:a7:bd:b3:b2:31:fb:1b:f3:77:f6:28:11:
de:53:b5:6b:d1:d8:30:f2:83:6d:2b:c0:1a:43:b5:
a2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.80.0/20
37.114.96.0/19
79.133.32.0/19
82.211.0.0/18
84.200.0.0-84.201.63.255
159.100.0.0/19
185.26.96.0/22
185.171.204.0/22
194.143.134.0/23
194.187.164.0/22
212.224.64.0/18
IPv6:
2001:1608::/29
2001:1638::/29
2a01:7e0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25484
31400
44066
60211
203833
Signature Algorithm: sha256WithRSAEncryption
0e:d9:65:88:19:22:f6:c6:78:82:a9:08:ba:c0:94:e5:5c:25:
72:14:cf:b3:77:fb:ba:a1:1d:83:93:6f:fe:a3:61:f1:a7:92:
4b:f7:30:d3:d1:27:90:25:54:d3:10:de:5d:1d:ef:cb:e8:a2:
04:ee:e4:16:5d:fe:2b:dd:37:c0:b7:3b:4e:2d:80:dd:c2:34:
f8:5e:20:a2:b5:be:ac:80:4e:3e:3c:cf:a0:f2:d5:d9:e8:77:
ee:96:b2:f6:ee:99:ee:72:63:f4:2d:b8:55:7d:9c:56:1d:ab:
43:de:68:a1:71:d4:27:e5:1c:76:d6:a1:11:60:f6:28:71:45:
ae:88:d8:61:1a:d2:5f:57:ca:26:7f:d0:92:b7:5a:df:75:75:
c4:2e:2d:3a:30:66:c0:ae:5b:6a:2e:ab:c8:31:7b:b3:03:91:
b8:86:61:fd:37:bb:ca:65:ba:e5:6e:34:ca:49:ea:63:f2:56:
ee:c9:82:a8:9c:a2:69:17:da:ab:09:f3:8e:13:e1:24:1e:35:
ed:ab:ed:e9:f7:88:9a:8c:c8:9d:ff:6a:0b:bd:ae:16:c7:39:
c1:2a:11:e1:00:b4:08:22:19:b5:bc:3f:66:ce:1c:35:4c:91:
d4:9f:41:5e:7c:86:04:3c:20:49:51:ee:33:a7:4b:99:38:d4:
29:56:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:28:44 2025 by rpki-client