Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer
File: HQJgQG6DeuODgPzI2ZK5PQ3hqDs.cer (raw, json)
Hash identifier: qrkCfj17aURhJ2LUPjSq2byPqUtrNj0gzzoBOED0dMk=
Subject key identifier: 1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC4D97CCE6E902E052BEFB7B060542
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.231.175.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4d:97:cc:e6:e9:02:e0:52:be:fb:7b:06:05:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d0260406e837ae38380fcc8d992b93d0de1a83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:c8:f8:ac:8c:2f:9f:55:56:30:4b:7e:3a:
23:be:e4:39:81:21:fa:5e:3b:34:19:4e:ad:5b:ab:
22:da:50:10:46:ef:af:01:de:7f:d2:18:fb:3c:26:
2b:c0:99:8b:02:2c:a5:7a:db:0b:09:35:77:76:b4:
e7:fc:2b:d4:10:18:fc:dd:ce:ae:74:7f:3d:41:82:
3c:70:31:e8:80:8e:75:d8:80:6e:83:19:47:20:36:
cd:80:38:9a:fd:a0:fb:b0:31:7f:6c:83:8a:9e:39:
09:fe:80:37:98:06:52:d3:c4:5e:c9:7d:76:17:e2:
64:dd:3b:13:e3:8e:f8:2b:86:c7:5a:5e:e8:27:f5:
6d:a9:d3:d1:ca:16:e1:28:c5:e0:72:f7:b8:51:95:
1f:d8:08:e2:ef:a1:c6:13:21:93:53:16:14:a3:18:
ae:3b:83:0e:c3:0f:25:97:54:f5:b7:aa:be:04:af:
a2:2e:66:7f:4c:11:41:b8:c0:b7:e8:14:4b:40:be:
29:6c:76:d8:56:b0:34:b8:d1:10:52:36:8f:91:0c:
97:11:13:74:93:8e:48:41:cd:b8:f9:38:76:c5:6b:
0f:cf:2a:46:ca:69:12:eb:8c:06:e0:b5:a5:1e:cb:
be:d7:b8:d4:bd:8d:0b:91:79:eb:ea:7c:29:e8:1d:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:02:60:40:6E:83:7A:E3:83:80:FC:C8:D9:92:B9:3D:0D:E1:A8:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/340031-365b-4fd2-8732-8c0faca3cbd8/1/HQJgQG6DeuODgPzI2ZK5PQ3hqDs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:94:75:84:07:64:b5:57:05:1a:6f:66:58:09:1f:03:21:6f:
b6:bc:ad:e9:1a:d7:3f:b7:37:b6:c3:e4:a3:41:79:de:b9:0c:
da:2d:f7:02:91:0f:82:1d:00:82:6b:65:a8:94:4a:ee:b4:56:
90:78:03:a3:56:90:2c:4a:77:66:72:ed:8d:9b:0c:20:1c:25:
de:43:57:20:03:74:76:2f:af:09:38:b3:cf:4a:0a:52:bf:12:
52:aa:cf:a2:2d:00:eb:a5:99:1a:5a:ba:1c:fb:dd:ad:fd:4f:
d5:2a:3e:3c:87:90:09:a3:c0:a9:31:3c:25:0b:f5:e7:be:20:
4b:56:fa:61:08:2e:23:e6:c9:d3:f9:62:99:60:7a:82:e4:f4:
ec:c6:06:e0:77:1c:7e:15:ad:be:f2:1e:cb:b7:dd:05:3e:7c:
bb:d0:80:88:7e:1d:36:24:f1:c2:e3:02:ac:8d:81:77:d3:87:
a5:18:9c:c7:44:ea:eb:a5:18:b8:7a:a7:a3:ce:65:98:0f:48:
92:20:1c:fd:91:3b:81:14:c2:bc:34:4c:2c:34:ef:f3:22:1c:
58:96:3c:88:a3:f6:8d:4d:9d:cf:e1:08:83:bb:05:6e:11:7d:
e5:a7:ca:6a:4c:09:8a:6d:27:c0:40:b6:6e:58:dd:e7:35:03:
b6:1a:23:92
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQi/E2XzObpAuBSvvt7BgVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDAyNjA0MDZlODM3YWUzODM4MGZjYzhkOTkyYjkzZDBkZTFhODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GLI+KyML59VVjBLfjojvuQ5gSH6
Xjs0GU6tW6si2lAQRu+vAd5/0hj7PCYrwJmLAiyletsLCTV3drTn/CvUEBj83c6u
dH89QYI8cDHogI512IBugxlHIDbNgDia/aD7sDF/bIOKnjkJ/oA3mAZS08ReyX12
F+Jk3TsT4474K4bHWl7oJ/VtqdPRyhbhKMXgcve4UZUf2Aji76HGEyGTUxYUoxiu
O4MOww8ll1T1t6q+BK+iLmZ/TBFBuMC36BRLQL4pbHbYVrA0uNEQUjaPkQyXERN0
k45IQc24+Th2xWsPzypGymkS64wG4LWlHsu+17jUvY0LkXnr6nwp6B0KdwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFB0CYEBug3rjg4D8yNmSuT0N4ag7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3LzM0MDAz
MS0zNjViLTRmZDItODczMi04YzBmYWNhM2NiZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvMzQwMDMx
LTM2NWItNGZkMi04NzMyLThjMGZhY2EzY2JkOC8xL0hRSmdRRzZEZXVPRGdQekky
Wks1UFEzaHFEcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+evMA0GCSqGSIb3DQEBCwUAA4IBAQB8lHWE
B2S1VwUab2ZYCR8DIW+2vK3pGtc/tze2w+SjQXneuQzaLfcCkQ+CHQCCa2WolEru
tFaQeAOjVpAsSndmcu2NmwwgHCXeQ1cgA3R2L68JOLPPSgpSvxJSqs+iLQDrpZka
Wroc+92t/U/VKj48h5AJo8CpMTwlC/XnviBLVvphCC4j5snT+WKZYHqC5PTsxgbg
dxx+Fa2+8h7Lt90FPny70ICIfh02JPHC4wKsjYF304elGJzHROrrpRi4eqejzmWY
D0iSIBz9kTuBFMK8NEwsNO/zIhxYljyIo/aNTZ3P4QiDuwVuEX3lp8pqTAmKbSfA
QLZuWN3nNQO2GiOS
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:12 2025 by rpki-client on console.sobornost.net