
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer (raw, json)
Hash identifier: Nhzel3ZL9PBU7OYgRW82/joltjESO5UzhXEQGqmGaik=
Subject key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274868C399DC7409578559A388C60066
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.26.24.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:68:c3:99:dc:74:09:57:85:59:a3:88:c6:00:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:fa:3d:d7:87:ee:98:ac:5a:3d:c8:62:3e:
8c:d2:f0:18:38:68:01:a6:41:8f:29:cc:32:9e:99:
4b:69:24:a1:c5:3c:5d:43:2c:d5:23:1b:95:65:d4:
3a:24:00:61:27:bc:6a:67:25:4c:04:1a:82:7f:0a:
18:d9:e4:bc:3b:da:ef:13:a0:5d:8b:29:bb:58:7f:
81:3c:12:19:93:56:37:8d:93:09:68:2d:98:5f:7f:
c3:6a:a8:e6:cb:99:b2:c7:7c:48:4f:d6:03:d3:02:
80:77:cb:b9:f6:42:6c:9d:d7:0c:a9:9b:d8:2b:10:
9b:c4:40:ff:5f:71:b6:da:15:4e:ba:e7:54:2f:9c:
fa:e6:86:7b:19:24:c0:ee:14:dd:37:85:10:5b:d9:
87:37:78:2f:c7:42:f5:db:05:95:8a:77:0f:c2:55:
26:0c:e5:55:75:af:ce:13:bf:8c:f7:55:44:cc:36:
f8:65:89:bb:30:2f:53:e8:a7:9a:c4:2f:3e:a7:48:
93:6b:34:49:2d:66:e1:cc:38:51:8e:1c:71:c2:c3:
74:45:65:f4:46:50:64:b4:bf:35:7f:f8:dc:ba:69:
4c:f1:90:bf:03:66:b7:24:fb:7c:0c:03:14:0d:b5:
b0:d9:8b:63:78:fa:61:8e:d1:27:07:17:51:70:09:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c8:71:1f:e6:29:8c:09:f5:0f:a8:cd:a4:03:b3:81:e1:7f:
91:ae:8a:54:30:72:d2:a1:11:d5:1f:5f:74:7e:51:b1:aa:65:
cb:56:a2:1b:b6:74:fe:25:6f:4d:bc:dc:d7:69:bd:c0:84:6b:
3b:a7:36:8a:7d:3b:7e:ce:cd:1d:d3:6b:aa:93:a5:b2:58:d6:
73:98:74:b1:a8:93:56:0a:17:6d:83:ac:11:b5:f4:79:0f:10:
a7:12:7d:36:56:33:40:61:83:40:80:7c:ac:bb:68:b0:44:a2:
e8:ba:85:75:9c:85:45:bf:5a:19:f0:61:7b:d6:cf:15:07:56:
b5:14:d4:0c:5d:f6:e9:ce:1a:16:31:86:8d:28:8d:e2:27:96:
29:dc:97:57:d5:9c:eb:2d:69:b0:c1:1d:09:99:42:f0:9e:6f:
b4:00:3b:89:bc:7d:d8:85:56:52:9a:e1:68:60:5b:00:b3:29:
63:89:c9:8f:53:7f:8c:b8:22:fd:d5:33:dc:32:bc:b3:c9:cb:
b6:9d:43:ec:96:b1:7f:d1:5b:3e:fc:86:90:3e:8d:ce:af:6b:
9f:e5:f7:ca:d5:c2:a4:1e:0c:3c:6c:9b:b7:37:2d:0f:db:a1:
38:db:50:91:e1:3c:61:92:33:8f:6f:b7:d3:d6:bf:4f:03:16:
9b:7f:9a:de
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQnSGjDmdx0CVeFWaOIxgBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWE1MzQ2NGE4MTBhYTM4YzkzNmQ5ZDk4YjZhMmQxMzJmY2JmZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlD6PdeH7pisWj3IYj6M0vAYOGgB
pkGPKcwynplLaSShxTxdQyzVIxuVZdQ6JABhJ7xqZyVMBBqCfwoY2eS8O9rvE6Bd
iym7WH+BPBIZk1Y3jZMJaC2YX3/Daqjmy5myx3xIT9YD0wKAd8u59kJsndcMqZvY
KxCbxED/X3G22hVOuudUL5z65oZ7GSTA7hTdN4UQW9mHN3gvx0L12wWVincPwlUm
DOVVda/OE7+M91VEzDb4ZYm7MC9T6KeaxC8+p0iTazRJLWbhzDhRjhxxwsN0RWX0
RlBktL81f/jcumlM8ZC/A2a3JPt8DAMUDbWw2YtjePphjtEnBxdRcAkidQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKqlNGSoEKo4yTbZ2YtqLRMvy/9YMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzY0ZGUy
Zi01ZjM1LTRmNzctYTg0NC00M2Q3NGMwMDA3ZTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNjRkZTJm
LTVmMzUtNGY3Ny1hODQ0LTQzZDc0YzAwMDdlNi8xL3FxVTBaS2dRcWpqSk50blpp
Mm90RXlfTF8xZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwRoYMA0GCSqGSIb3DQEBCwUAA4IBAQA9yHEf
5imMCfUPqM2kA7OB4X+RropUMHLSoRHVH190flGxqmXLVqIbtnT+JW9NvNzXab3A
hGs7pzaKfTt+zs0d02uqk6WyWNZzmHSxqJNWChdtg6wRtfR5DxCnEn02VjNAYYNA
gHysu2iwRKLouoV1nIVFv1oZ8GF71s8VB1a1FNQMXfbpzhoWMYaNKI3iJ5Yp3JdX
1ZzrLWmwwR0JmULwnm+0ADuJvH3YhVZSmuFoYFsAsyljicmPU3+MuCL91TPcMryz
ycu2nUPslrF/0Vs+/IaQPo3Or2uf5ffK1cKkHgw8bJu3Ny0P26E421CR4TxhkjOP
b7fT1r9PAxabf5re
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:26:29 2025 by rpki-client