Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.cer (raw, json)
Hash identifier: ZDgkbMjR1sy1vhXErSk/wunKFm+q/5r4ODhcN0bo+7I=
Subject key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424448F5BAFF5354FDF822ACD6F21D778
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213032
IP: 2001:678:dc4::/48
IP: 2001:678:dc8::/48
IP: 2001:67c:27c4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8f:5b:af:f5:35:4f:df:82:2a:cd:6f:21:d7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4121c7fb04153829d96a1c038f0df714da595404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:c3:05:c5:a3:09:39:99:88:25:f8:1f:b7:
4b:80:5e:f1:fc:33:1c:64:31:91:6d:4d:ca:90:ef:
25:25:90:2f:5c:2f:ae:37:ab:fb:d0:71:2d:39:30:
7f:9c:a9:68:59:44:7b:41:38:8e:ec:32:36:0c:2f:
f7:70:91:ec:28:ab:84:77:09:ec:06:7c:6e:17:66:
f7:98:b0:c6:c1:16:31:4f:52:a9:e1:76:69:23:e3:
5a:c0:51:62:ac:57:f1:87:d0:7b:3d:00:6f:3f:33:
42:03:fa:d4:cb:44:42:91:d3:cb:fe:30:ad:22:0d:
38:33:ee:08:0c:45:18:67:9d:be:77:0a:72:f0:d3:
bf:10:06:6f:da:92:b4:62:bd:b0:0c:3f:99:ce:e8:
38:22:81:fa:a1:49:15:65:0f:a7:f8:fa:67:1d:4b:
28:91:ff:6a:3d:4a:91:63:63:dc:11:2c:37:d8:cc:
17:44:16:e8:cb:e5:24:7d:51:21:28:49:0b:3b:ac:
62:52:ef:fd:fd:23:dc:f4:ad:49:6f:3a:1b:ea:27:
1e:4f:ac:e1:55:72:b0:b7:2d:d1:19:99:8e:d4:a7:
26:84:ba:bb:da:1f:08:b5:33:47:fa:34:03:d5:73:
27:06:64:a9:1f:09:7b:bd:6a:75:63:e9:72:7d:ff:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:dc4::/48
2001:678:dc8::/48
2001:67c:27c4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213032
Signature Algorithm: sha256WithRSAEncryption
06:10:ec:31:03:c1:18:30:55:e6:d8:f2:11:0c:68:20:5e:7f:
45:3e:3e:13:37:75:51:ca:7c:26:a8:8c:f3:21:8d:d6:bd:69:
38:93:08:fb:8a:be:04:46:0a:96:9d:76:3e:b9:58:ef:9b:a5:
8b:c7:1d:92:81:bc:06:c2:bd:43:be:96:95:7e:85:aa:e0:6b:
c2:65:2f:80:ad:f9:e5:99:e7:25:c5:5b:ec:66:cb:c6:b8:65:
17:e7:b1:40:e0:50:44:e2:05:ee:8e:95:db:ff:64:21:e5:52:
5d:23:93:0a:3c:8b:76:e8:44:ac:34:03:f2:d9:cd:00:bf:c6:
19:55:b8:59:68:2a:98:27:04:10:26:d0:a3:59:be:2d:90:bc:
ed:2a:e8:e2:d6:1b:dd:6b:c8:50:02:8a:fd:34:f0:04:fe:4e:
36:a2:f5:64:25:92:1d:70:4a:c8:a8:77:bb:e5:16:30:57:93:
67:63:3c:0e:9b:8d:9d:08:2a:73:18:44:2b:f4:a2:3a:53:80:
eb:34:e4:59:7b:aa:b3:8e:ce:a3:11:1f:06:b0:ca:0a:00:7b:
ca:f6:08:9a:58:e9:ae:b3:99:68:3a:d3:62:9d:b5:a6:ab:1c:
ba:99:ee:16:d0:47:cf:f1:1b:28:6c:ef:0d:1b:f7:71:c7:a3:
4b:eb:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:40:30 2025 by rpki-client