Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
File: QA4H15n7NVyVICXz0nsA6bTuNO0.cer (raw, json)
Hash identifier: tBxySOpyriKSWxyiupO+s6FKt5iR6GRx/yCreZPaAoM=
Subject key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6D048EEFB652AA85EBDAB91D39D11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61102
IP: 89.33.28.0/23
IP: 107.150.178.0/23
IP: 176.223.65.0/24
IP: 185.18.204.0/22
IP: 185.37.148.0/22
IP: 185.217.96.0/22
IP: 188.210.255.0/24
IP: 2a03:ff40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d0:48:ee:fb:65:2a:a8:5e:bd:ab:91:d3:9d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:21:c1:91:bb:58:a1:48:4e:05:04:cf:d5:07:
1f:cf:c1:14:59:15:9c:ae:88:77:ee:03:8c:83:e6:
13:ff:37:bc:e2:e5:f5:a2:7e:3c:93:31:11:36:2e:
22:54:6a:08:28:17:ee:7e:de:71:6c:07:87:c2:1a:
a0:77:45:35:c8:cf:8c:e8:61:0a:02:fc:e7:ae:b4:
89:4e:2f:64:72:fc:0a:a8:7b:67:d0:2b:59:1c:7e:
bf:11:f1:07:fd:20:86:4f:7f:c4:b9:99:5b:df:ee:
42:00:a2:2e:1c:6b:0f:7d:98:ad:c1:a9:b0:37:9d:
cc:48:76:a6:c0:82:7f:8b:b2:61:09:2d:14:34:7c:
c2:1c:5f:22:3c:2a:b3:7e:19:3a:60:16:a7:ad:3e:
6b:f1:35:03:be:69:e8:94:38:ee:58:16:32:63:18:
17:b8:c7:98:68:17:40:66:01:76:41:58:a5:5e:1c:
7f:4c:6c:d5:c9:0d:71:70:f5:fd:60:ac:af:2b:75:
97:58:01:c4:95:e8:54:b5:1e:14:62:c1:fb:30:e7:
6f:4c:67:c2:df:c1:c2:d0:94:e6:41:77:64:af:a2:
f9:fc:ff:e4:a9:20:8c:67:93:68:cd:d8:b3:a0:d4:
bd:c4:79:55:41:10:dd:bb:3c:c0:5b:99:b4:89:84:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.28.0/23
107.150.178.0/23
176.223.65.0/24
185.18.204.0/22
185.37.148.0/22
185.217.96.0/22
188.210.255.0/24
IPv6:
2a03:ff40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61102
Signature Algorithm: sha256WithRSAEncryption
73:d4:22:eb:4f:b3:fa:f6:a0:36:ee:e2:e8:38:5a:a7:c1:07:
f5:46:47:7e:93:65:99:15:cb:30:cc:74:d7:5e:86:7f:51:73:
f3:fe:60:4b:65:d8:20:b0:67:79:6b:cd:25:10:1d:e3:7a:92:
28:5b:15:a9:b2:20:a2:77:78:76:d7:4e:7a:23:38:bd:40:7d:
45:5b:c2:6b:9c:97:38:10:c9:3c:ec:61:40:49:08:60:8e:19:
f0:f1:f5:dc:09:69:bd:21:d2:36:9f:83:a1:8b:52:78:8d:6d:
da:ac:20:64:58:64:0b:d6:fb:14:cc:ad:17:56:3f:01:0c:6c:
33:eb:33:86:10:60:45:66:7e:84:b8:f5:b6:01:23:c2:9e:ac:
c7:29:b3:c9:02:41:97:43:be:f5:99:14:8b:b7:04:e3:b8:8e:
56:7e:1d:f0:0e:a9:0b:ac:61:cd:d3:57:d7:55:7a:55:d7:1b:
43:09:52:ba:27:e9:b0:40:4e:9d:aa:dc:e9:fc:4e:8d:4f:18:
1f:9c:57:69:f5:b4:a7:c4:db:b1:b4:54:04:8c:10:e5:fc:b4:
5d:53:68:85:d6:14:5b:1b:1d:d3:a9:41:19:b3:37:5c:ae:5e:
c0:e0:f9:e6:9b:6f:09:c1:3e:7e:3a:2b:c4:bd:38:28:06:eb:
b4:56:c0:d4
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgISAZQj1tBI7vtlKqhevauR050RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDBlMDdkNzk5ZmIzNTVjOTUyMDI1ZjNkMjdiMDBlOWI0ZWUzNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSHBkbtYoUhOBQTP1Qcfz8EUWRWc
roh37gOMg+YT/ze84uX1on48kzERNi4iVGoIKBfuft5xbAeHwhqgd0U1yM+M6GEK
AvznrrSJTi9kcvwKqHtn0CtZHH6/EfEH/SCGT3/EuZlb3+5CAKIuHGsPfZitwamw
N53MSHamwIJ/i7JhCS0UNHzCHF8iPCqzfhk6YBanrT5r8TUDvmnolDjuWBYyYxgX
uMeYaBdAZgF2QVilXhx/TGzVyQ1xcPX9YKyvK3WXWAHElehUtR4UYsH7MOdvTGfC
38HC0JTmQXdkr6L5/P/kqSCMZ5NozdizoNS9xHlVQRDduzzAW5m0iYS4HwIDAQAB
o4IC0zCCAs8wHQYDVR0OBBYEFEAOB9eZ+zVclSAl89J7AOm07jTtMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0LzJmMzZi
Ni1kNzAxLTQzMzUtYWYzMC00OGZlNjMzYjFiM2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvMmYzNmI2
LWQ3MDEtNDMzNS1hZjMwLTQ4ZmU2MzNiMWIzZi8xL1FBNEgxNW43TlZ5VklDWHow
bnNBNmJUdU5PMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF
BwEHAQH/BEMwQTAwBAIAATAqAwQBWSEcAwQBa5ayAwQAsN9BAwQCuRLMAwQCuSWU
AwQCudlgAwQAvNL/MA0EAgACMAcDBQAqA/9AMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwDurjANBgkqhkiG9w0BAQsFAAOCAQEAc9Qi60+z+vagNu7i6Dhap8EH9UZH
fpNlmRXLMMx0116Gf1Fz8/5gS2XYILBneWvNJRAd43qSKFsVqbIgond4dtdOeiM4
vUB9RVvCa5yXOBDJPOxhQEkIYI4Z8PH13AlpvSHSNp+DoYtSeI1t2qwgZFhkC9b7
FMytF1Y/AQxsM+szhhBgRWZ+hLj1tgEjwp6sxymzyQJBl0O+9ZkUi7cE47iOVn4d
8A6pC6xhzdNX11V6VdcbQwlSuifpsEBOnarc6fxOjU8YH5xXafW0p8TbsbRUBIwQ
5fy0XVNohdYUWxsd06lBGbM3XK5ewOD55ptvCcE+fjorxL04KAbrtFbA1A==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:54 2025 by rpki-client on console.sobornost.net