Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.cer (raw, json)
Hash identifier: vzHjQCh0e1nYT8+hd4PeYjOcS6nhu7+IZXaP6HpYGFg=
Subject key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252155688ADFFA44FE959A4B3B64FBA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.125.252.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:55:68:8a:df:fa:44:fe:95:9a:4b:3b:64:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:30:05:93:00:80:83:85:65:cb:16:ad:d1:
9b:38:e8:78:9e:fe:5d:f7:e5:aa:7b:9d:f4:40:48:
d3:4d:82:21:4c:21:e6:19:08:de:db:0b:d8:cc:fb:
6b:30:88:c8:14:60:36:a7:5e:49:53:10:3a:17:cd:
c0:ee:6f:1b:1f:97:f0:f7:08:51:05:d4:69:9e:2a:
c7:66:68:b2:46:90:f0:fc:25:26:2c:ab:5d:95:4b:
63:1c:73:6e:24:63:c0:a1:2f:78:a2:16:14:c9:fc:
a3:57:d5:ac:15:76:5a:73:6d:b5:d1:3d:ca:f9:a9:
f8:5d:4f:aa:f6:01:15:d3:7d:9d:06:a3:81:05:04:
6c:22:b5:ab:5f:ec:33:d8:bf:ea:5f:c5:c8:2f:ce:
75:66:ea:6e:48:69:12:4b:a8:91:35:b8:a1:66:61:
19:a8:06:98:03:16:58:ff:3d:fc:ac:1a:6d:b3:21:
1a:85:54:5d:26:c8:b8:15:14:e7:90:33:e2:16:fe:
80:04:6e:7a:92:5b:96:c6:77:e6:33:ba:3e:52:cd:
ee:c8:58:10:e8:00:95:a3:7f:be:3f:26:15:80:9e:
22:60:aa:14:ba:ef:e8:5e:4e:0d:69:c8:b3:4d:08:
33:2c:d5:2d:28:44:a1:14:c5:2c:b0:a8:48:a3:cd:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.252.0/23
Signature Algorithm: sha256WithRSAEncryption
48:8c:fd:fa:13:f9:08:41:42:a0:10:ad:48:b3:33:5a:89:45:
15:a4:4b:77:cb:f5:c0:3e:68:f1:f0:77:9f:03:b4:2d:00:c2:
d6:88:d8:23:bc:d5:a9:10:d0:1a:dc:fc:54:ac:a2:ef:93:b0:
ec:e1:f0:2f:33:17:1b:c8:ac:77:5d:fb:cc:4a:b3:84:10:fd:
58:75:6c:55:49:ee:d5:c2:d3:89:7c:4c:bf:94:34:e5:8e:a3:
05:cf:42:97:6e:b3:b4:a0:6b:e6:fd:90:b8:ed:e6:e1:69:75:
bf:aa:75:a1:6e:a1:1e:d3:18:c2:bf:73:0b:fa:07:2d:7c:a3:
1f:82:20:24:9d:d2:aa:40:19:c9:c8:b2:06:7b:ba:b4:da:e4:
4e:1c:c0:34:70:dd:9a:d8:de:36:d2:20:0f:a2:94:92:2c:c8:
8c:67:ec:59:40:57:ff:a8:3c:d6:ff:61:2a:b4:d3:1c:d7:a1:
2c:d5:5c:76:77:04:92:0e:f4:61:c8:82:da:27:cd:82:e9:70:
60:f6:9d:61:1e:e2:0f:74:b5:d1:59:9b:e1:62:16:05:96:a1:
5a:3a:5d:7e:63:75:39:a2:95:1a:eb:92:6a:c0:fd:7d:a4:4c:
f4:c4:0f:c4:1a:06:59:bf:51:e9:19:1e:2d:6b:1b:0f:45:8d:
ce:5b:d1:25
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQlIVVoit/6RP6Vmks7ZPugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjljZmQxNTc0NDFmNjk0MjhkZDFmNjM2MWNhNGY0YWU0MmNiMzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0EwBZMAgIOFZcsWrdGbOOh4nv5d
9+Wqe530QEjTTYIhTCHmGQje2wvYzPtrMIjIFGA2p15JUxA6F83A7m8bH5fw9whR
BdRpnirHZmiyRpDw/CUmLKtdlUtjHHNuJGPAoS94ohYUyfyjV9WsFXZac2210T3K
+an4XU+q9gEV032dBqOBBQRsIrWrX+wz2L/qX8XIL851ZupuSGkSS6iRNbihZmEZ
qAaYAxZY/z38rBptsyEahVRdJsi4FRTnkDPiFv6ABG56kluWxnfmM7o+Us3uyFgQ
6ACVo3++PyYVgJ4iYKoUuu/oXk4NacizTQgzLNUtKEShFMUssKhIo82ndwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKuc/RV0QfaUKN0fY2HKT0rkLLOKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2LzdkMzE0
ZS00MmNkLTQyY2UtOTg1ZS05NTRmMjY5MTNmNDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvN2QzMTRl
LTQyY2QtNDJjZS05ODVlLTk1NGYyNjkxM2Y0My8xL3E1ejlGWFJCOXBRbzNSOWpZ
Y3BQU3VRc3M0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwn38MA0GCSqGSIb3DQEBCwUAA4IBAQBIjP36
E/kIQUKgEK1IszNaiUUVpEt3y/XAPmjx8HefA7QtAMLWiNgjvNWpENAa3PxUrKLv
k7Ds4fAvMxcbyKx3XfvMSrOEEP1YdWxVSe7VwtOJfEy/lDTljqMFz0KXbrO0oGvm
/ZC47ebhaXW/qnWhbqEe0xjCv3ML+gctfKMfgiAkndKqQBnJyLIGe7q02uROHMA0
cN2a2N420iAPopSSLMiMZ+xZQFf/qDzW/2EqtNMc16Es1Vx2dwSSDvRhyILaJ82C
6XBg9p1hHuIPdLXRWZvhYhYFlqFaOl1+Y3U5opUa65JqwP19pEz0xA/EGgZZv1Hp
GR4taxsPRY3OW9El
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:55 2025 by rpki-client on console.sobornost.net