Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer (raw, json)
Hash identifier: xKjDIl38QwBrBrFVMyYcOsBfJNeAsoyf1r1+1Oy8EcU=
Subject key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425220A574DAF84533346927392C5B15E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57597
AS: 200588
IP: 176.221.80.0/21
IP: 2a03:63a0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0a:57:4d:af:84:53:33:46:92:73:92:c5:b1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa8551e851e69db165c6c632af45f21715512939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:21:e6:e2:5a:98:88:54:b1:05:2c:c1:72:
42:99:db:91:0d:46:6f:e9:ce:0b:8a:d6:bc:66:e3:
26:77:f6:5b:72:7a:d6:c4:7e:72:fa:fa:f7:c3:bd:
b4:64:aa:8a:6f:96:6c:0e:b5:be:b3:18:94:b0:44:
64:0e:1e:06:84:f4:82:5d:61:2b:69:bd:50:91:ca:
66:e9:ce:e3:1c:bd:cd:eb:7d:79:a3:79:16:2a:4c:
41:89:bc:f2:ab:32:d1:5a:f1:5a:c3:15:79:2d:bf:
76:7a:7e:5c:b0:33:68:80:f9:ea:d9:18:1e:e7:05:
2f:c4:0e:9c:95:e2:5d:06:8c:43:a3:c5:e8:a7:a8:
ea:f8:e2:00:ca:a2:fd:75:18:04:71:1f:28:4b:8c:
51:60:f6:f9:f2:3b:4b:47:f5:17:d3:51:62:b0:de:
bb:4e:ab:24:37:9f:7a:3f:0e:c0:ed:02:69:ed:70:
89:f8:4a:ad:c7:9a:a7:b9:c3:a5:5d:c5:3d:36:2e:
de:f4:e4:7d:02:e9:99:e9:c1:23:1c:c1:b0:79:48:
b8:de:72:65:e4:f1:17:fb:08:9a:bf:8c:e6:4f:a0:
b1:7c:72:43:db:7a:85:09:c7:b3:fb:1f:76:39:80:
75:db:8a:8f:85:4b:17:7b:df:0f:cb:74:32:bd:be:
71:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.221.80.0/21
IPv6:
2a03:63a0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57597
200588
Signature Algorithm: sha256WithRSAEncryption
63:36:46:f4:a0:e2:8a:9f:94:42:40:a3:18:61:0c:3e:c1:b5:
08:ba:f9:b8:f3:02:a3:5a:dc:63:51:c1:d7:2d:d6:df:db:6a:
38:e3:16:9c:1f:21:c7:f5:ac:37:7e:a4:22:fd:87:75:8f:86:
fa:28:43:da:1c:6b:42:a5:8e:b7:e9:e4:22:9e:cd:0a:ce:69:
e3:4f:06:fb:7b:e5:4f:17:5c:92:48:2d:4e:a1:ea:ee:11:ce:
c5:47:30:9c:9f:bb:32:ab:f5:b0:77:52:f8:48:4c:8f:5e:77:
3c:8c:a9:55:e4:66:bc:0a:c1:b8:bf:9e:7e:b6:02:72:36:f8:
ea:f9:03:9b:53:90:93:90:75:ee:92:da:11:b7:ab:f3:e3:c1:
55:0e:a5:c1:3d:f4:30:92:91:57:b9:de:79:4f:bd:9b:5b:c1:
c3:8d:99:bd:7e:fe:e4:59:c2:b4:42:34:20:f9:ae:15:65:52:
87:6d:a2:71:87:39:1b:75:5d:85:78:61:45:0a:48:c5:85:6f:
eb:4b:f6:14:33:2c:35:57:ac:31:d7:a7:53:ff:6d:ab:7a:3f:
c0:3b:ce:9b:3f:4e:ff:a5:d0:df:18:40:4b:25:ca:98:81:4e:
73:d3:92:3f:f5:c1:e5:16:68:37:70:24:74:40:c9:e9:f0:99:
41:3b:ca:df
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAZQlIgpXTa+EUzNGknOSxbFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTg1NTFlODUxZTY5ZGIxNjVjNmM2MzJhZjQ1ZjIxNzE1NTEyOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNQh5uJamIhUsQUswXJCmduRDUZv
6c4Lita8ZuMmd/ZbcnrWxH5y+vr3w720ZKqKb5ZsDrW+sxiUsERkDh4GhPSCXWEr
ab1Qkcpm6c7jHL3N6315o3kWKkxBibzyqzLRWvFawxV5Lb92en5csDNogPnq2Rge
5wUvxA6cleJdBoxDo8Xop6jq+OIAyqL9dRgEcR8oS4xRYPb58jtLR/UX01FisN67
TqskN596Pw7A7QJp7XCJ+Eqtx5qnucOlXcU9Ni7e9OR9AumZ6cEjHMGweUi43nJl
5PEX+wiav4zmT6CxfHJD23qFCcez+x92OYB124qPhUsXe98Py3Qyvb5x/wIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFKqFUehR5p2xZcbGMq9F8hcVUSk5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2RlOTYx
NS0wYmMwLTRlNWUtODMxOC1mYjFkOTkyZGUwMDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvZGU5NjE1
LTBiYzAtNGU1ZS04MzE4LWZiMWQ5OTJkZTAwMS8xL3FvVlI2RkhtbmJGbHhzWXly
MFh5RnhWUktUay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDsN1QMA0EAgACMAcDBQMqA2OgMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwDg/QIDAw+MMA0GCSqGSIb3DQEBCwUAA4IBAQBjNkb0
oOKKn5RCQKMYYQw+wbUIuvm48wKjWtxjUcHXLdbf22o44xacHyHH9aw3fqQi/Yd1
j4b6KEPaHGtCpY636eQins0KzmnjTwb7e+VPF1ySSC1OoeruEc7FRzCcn7syq/Ww
d1L4SEyPXnc8jKlV5Ga8CsG4v55+tgJyNvjq+QObU5CTkHXuktoRt6vz48FVDqXB
PfQwkpFXud55T72bW8HDjZm9fv7kWcK0QjQg+a4VZVKHbaJxhzkbdV2FeGFFCkjF
hW/rS/YUMyw1V6wx16dT/22rej/AO86bP07/pdDfGEBLJcqYgU5z05I/9cHlFmg3
cCR0QMnp8JlBO8rf
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:11:39 2025 by rpki-client