Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
File: A6QSK0og8cymB4qR2ai7HAP7n80.cer (raw, json)
Hash identifier: MVGTTgYD3VrM34CmWaqalqWQAOcMRQQ1h+uQWmTA8HM=
Subject key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDED655CB7AD7C99AC543585F2C7A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25509
IP: 213.190.96.0/19
IP: 2a00:5380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ed:65:5c:b7:ad:7c:99:ac:54:35:85:f2:c7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:f5:b2:d5:8b:7d:6b:0e:e3:73:3c:be:f0:
55:a6:dc:a7:51:0e:3d:3a:f8:52:a5:51:76:ea:d7:
d3:cd:9f:80:85:f1:1b:92:c8:bb:0b:c3:cc:d2:51:
b8:09:ca:f9:4a:b9:44:1b:72:b9:0a:64:2d:d2:79:
3a:59:46:40:64:11:1e:02:e0:c4:55:f6:0b:5c:c6:
8f:a3:b7:1d:53:54:d5:f3:bb:43:24:d3:2f:56:c7:
ae:6b:b7:17:e5:d2:b5:bb:a4:61:09:57:84:c7:28:
29:f8:2a:b7:39:d8:7b:0b:ff:ca:27:6f:31:5f:fc:
2f:0b:fe:29:21:56:1b:a4:04:c7:a1:e2:6a:24:1d:
cb:b5:b1:b8:63:3d:8b:e4:c8:f0:3c:9b:59:98:3a:
e4:8e:0a:d1:b0:a2:7c:12:39:2b:ff:8b:37:0c:ca:
43:b3:f3:b3:22:69:c5:cc:3c:be:50:6a:77:1e:09:
39:f2:03:63:a8:1a:c0:27:6d:af:9e:cd:9a:1c:59:
09:2b:30:a5:8c:ae:6d:35:5b:6f:7e:76:88:95:7c:
d8:7f:df:19:50:59:bf:7a:11:3e:fd:45:58:dc:3c:
54:3c:89:46:5d:71:40:ba:b7:4f:5e:b9:6e:5d:86:
7d:ee:d0:b7:3c:59:88:9b:52:7f:51:ff:14:b1:58:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.96.0/19
IPv6:
2a00:5380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25509
Signature Algorithm: sha256WithRSAEncryption
ae:65:22:c0:1f:54:bc:79:a4:6d:4d:dc:04:77:27:22:1c:25:
53:a4:0b:4c:6b:f9:36:d9:67:7a:7c:73:17:85:77:74:f7:f0:
2b:91:cc:d5:96:88:be:8d:9a:1d:0f:37:a1:85:5c:fd:cd:66:
a5:f2:e0:e5:f0:64:d4:f6:00:b0:6f:16:52:01:6b:8b:62:ae:
23:1a:8d:ec:8d:52:d0:ae:58:ef:11:a2:88:94:69:63:72:7d:
70:0f:9c:d2:63:2e:9b:1c:e7:5c:33:e1:36:7d:fc:b7:99:13:
50:88:9a:51:00:c2:25:ae:c3:40:98:aa:78:fd:3a:42:dd:0d:
7a:e0:e5:96:bb:9c:3b:52:c0:60:03:78:dd:5d:63:ca:84:9e:
49:c0:41:94:bc:8b:0d:e9:f1:fc:35:c2:f1:d5:52:8b:13:31:
a4:6c:6a:dd:82:5d:00:69:b8:2a:cd:f0:d0:d7:90:ac:e3:8b:
7e:d6:fb:31:eb:a3:98:9f:d4:69:17:10:8c:bc:db:18:d3:ee:
fc:58:45:e8:2e:25:7e:41:08:15:a7:57:07:9d:ca:53:6d:ec:
ea:e7:56:b1:f7:2f:3a:a5:04:9d:2f:b6:32:ab:d3:49:ff:48:
62:da:2c:35:c9:33:4b:53:ab:01:ae:6a:90:36:4d:2b:30:d0:
ef:ae:49:18
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZQl/e1lXLetfJmsVDWF8segMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2E0MTIyYjRhMjBmMWNjYTYwNzhhOTFkOWE4YmIxYzAzZmI5ZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNf1stWLfWsO43M8vvBVptynUQ49
OvhSpVF26tfTzZ+AhfEbksi7C8PM0lG4Ccr5SrlEG3K5CmQt0nk6WUZAZBEeAuDE
VfYLXMaPo7cdU1TV87tDJNMvVseua7cX5dK1u6RhCVeExygp+Cq3Odh7C//KJ28x
X/wvC/4pIVYbpATHoeJqJB3LtbG4Yz2L5MjwPJtZmDrkjgrRsKJ8Ejkr/4s3DMpD
s/OzImnFzDy+UGp3Hgk58gNjqBrAJ22vns2aHFkJKzCljK5tNVtvfnaIlXzYf98Z
UFm/ehE+/UVY3DxUPIlGXXFAurdPXrluXYZ97tC3PFmIm1J/Uf8UsVikzwIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFAOkEitKIPHMpgeKkdmouxwD+5/NMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2RiYzA2
Yy1hNjEyLTRkYjAtYTg1Ni03ODcyMzg0MTViMDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZGJjMDZj
LWE2MTItNGRiMC1hODU2LTc4NzIzODQxNWIwOC8xL0E2UVNLMG9nOGN5bUI0cVIy
YWk3SEFQN244MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQF1b5gMA0EAgACMAcDBQMqAFOAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAmOlMA0GCSqGSIb3DQEBCwUAA4IBAQCuZSLAH1S8eaRt
TdwEdyciHCVTpAtMa/k22Wd6fHMXhXd09/ArkczVloi+jZodDzehhVz9zWal8uDl
8GTU9gCwbxZSAWuLYq4jGo3sjVLQrljvEaKIlGljcn1wD5zSYy6bHOdcM+E2ffy3
mRNQiJpRAMIlrsNAmKp4/TpC3Q164OWWu5w7UsBgA3jdXWPKhJ5JwEGUvIsN6fH8
NcLx1VKLEzGkbGrdgl0AabgqzfDQ15Cs44t+1vsx66OYn9RpFxCMvNsY0+78WEXo
LiV+QQgVp1cHncpTbezq51ax9y86pQSdL7Yyq9NJ/0hi2iw1yTNLU6sBrmqQNk0r
MNDvrkkY
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:23 2025 by rpki-client