Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
File: qd_ImBI0BQeiouHnTRGCTe-BPzk.cer (raw, json)
Hash identifier: WFQhDhoAsUVhswFclNessp658oHN29KCmn0C4CC4jzQ=
Subject key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6A156B53C1C85BCE206172D4D9AC3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.234.203.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a1:56:b5:3c:1c:85:bc:e2:06:17:2d:4d:9a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:eb:f4:c9:76:54:00:2e:e8:ea:73:d5:2f:
7b:80:b1:9d:8d:02:82:98:ba:d4:fe:06:50:84:fc:
21:1c:b6:95:e9:a4:d4:fc:56:83:55:1d:9a:6b:c3:
eb:21:41:1d:de:c5:89:40:36:c2:89:42:a5:20:ca:
ea:c1:70:40:e8:22:66:62:3e:6f:d3:eb:0f:0a:24:
f7:72:9f:04:7a:10:84:db:26:7d:1e:50:cb:2a:48:
e1:64:6c:91:3a:7c:a9:8d:09:22:1f:c5:7f:9d:8a:
f9:35:e2:17:43:27:1e:8a:c7:06:0f:2a:8f:61:11:
28:52:0b:bb:9c:cd:6b:ea:0a:1d:12:5d:c0:1c:25:
63:66:44:a4:86:6e:20:86:57:24:5d:06:e3:42:26:
2d:04:ac:dc:cf:ab:ac:b1:e5:d9:e5:9a:5c:8c:00:
55:67:27:60:2e:95:f1:78:bb:b4:d1:1c:65:75:ab:
3a:d5:60:90:15:42:51:69:a8:b1:8b:bc:26:3d:82:
70:f6:95:76:f1:33:fb:03:a0:06:69:6b:85:98:1c:
31:ab:38:8f:13:40:0b:70:a2:0f:78:2a:fc:36:4d:
af:da:f3:bb:01:a7:4a:e3:8e:3f:1e:b2:ef:3a:a6:
96:22:ff:a4:63:f8:de:5a:16:85:7d:b4:5c:6d:0b:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.203.0/24
Signature Algorithm: sha256WithRSAEncryption
56:43:1d:4b:fa:f4:b1:57:05:51:68:45:e2:81:85:cc:26:9d:
5f:a9:dd:a6:a4:cf:c0:e7:52:06:e0:5c:99:14:7d:90:c6:e2:
0b:f2:02:85:71:1a:23:f1:74:a1:8e:cf:2a:4e:2f:24:31:e6:
c5:b8:dc:65:ee:88:a4:c3:00:c0:0a:23:cc:3e:a2:56:f0:60:
94:e9:ef:94:c7:3a:08:7e:8c:d7:48:87:a1:c8:df:15:5d:25:
e9:6b:57:a5:d7:69:89:f1:b9:10:9f:8e:22:46:fc:ba:e3:19:
68:e8:ce:9e:07:15:83:ac:59:27:23:a3:8f:b5:b9:64:81:98:
c0:60:ae:e8:aa:d9:ed:ca:e3:5c:c7:40:8b:3d:7c:b9:e6:99:
8c:fa:18:04:b4:81:22:ca:94:b5:95:ff:18:0f:3b:b8:d0:9a:
70:2c:ea:6a:99:26:c0:9f:e6:31:60:8d:03:7a:83:83:8d:b7:
b7:e7:da:ac:a0:f1:dc:50:7c:91:5d:96:48:17:81:6e:56:cd:
4d:ef:89:09:b2:0c:ba:b9:85:7a:c9:ce:6c:b0:bb:86:d9:ea:
19:b7:8f:0f:3c:22:38:05:1e:57:67:36:17:bd:c3:bb:51:3a:
2d:3b:63:95:93:66:e8:23:31:c2:61:73:e5:d1:e7:e8:79:ac:
f8:21:4f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:57 2025 by rpki-client on console.sobornost.net