Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
File: qTThBr5Thu0QZ17g3jNtx34gDVk.cer (raw, json)
Hash identifier: Ng6hAE+KnLiE3JndCZSoRuNRXrBqlFhJIRiGrqyhovM=
Subject key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C98E64871E375516C981FC38780E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15672
IP: 85.31.112.0/21
IP: 85.90.96.0/19
IP: 89.21.128.0/19
IP: 94.228.240.0/20
IP: 194.149.234.0/23
IP: 2a00:1700::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c9:8e:64:87:1e:37:55:16:c9:81:fc:38:78:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a934e106be5386ed10675ee0de336dc77e200d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:4a:bf:13:af:9d:51:0a:ba:d6:61:0b:fe:
a8:9f:8d:5b:78:40:be:7b:49:d8:e6:97:ed:aa:ce:
84:f8:94:ff:b1:b7:f1:68:c6:38:0e:c8:3d:64:82:
ee:83:e4:0f:02:c8:ed:49:af:a6:93:67:73:b0:96:
36:ab:81:fe:92:1a:10:57:c1:44:4c:c5:d8:4b:73:
3e:45:a1:56:43:c0:76:8c:52:05:fb:3d:e6:a1:9f:
ec:88:13:fe:e1:3c:ad:66:13:94:4e:56:01:18:7e:
7f:71:5e:55:0d:c6:11:2f:a2:26:63:5b:c4:f4:4a:
ef:0a:b3:09:01:3a:2e:ea:42:54:77:6f:45:f6:74:
fe:2a:29:4c:53:53:d3:1f:f5:7a:25:56:fd:6a:9b:
72:a7:79:01:17:e1:97:74:0b:76:46:fc:ac:c5:db:
8d:84:13:3b:1c:91:b1:a3:fa:32:a9:0a:d2:1f:4a:
44:1b:0a:8c:a9:91:06:07:c6:7c:bc:70:70:8d:05:
fa:5f:db:c1:a0:63:59:2e:6f:ed:a2:04:1c:a2:9e:
3d:db:f8:bb:80:f7:b5:6b:18:bb:db:7a:99:4f:21:
e6:17:9e:46:22:29:61:a4:9d:59:30:ce:44:98:9a:
93:70:54:33:f7:04:63:a8:19:87:ce:c8:7e:67:c7:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.112.0/21
85.90.96.0/19
89.21.128.0/19
94.228.240.0/20
194.149.234.0/23
IPv6:
2a00:1700::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15672
Signature Algorithm: sha256WithRSAEncryption
7f:99:ad:7c:ec:38:16:a2:2f:b9:4c:ca:73:e4:12:d7:60:ff:
b2:c2:28:26:0f:94:32:b9:a9:5e:61:62:d9:8e:74:dd:f7:e0:
51:55:3e:4a:3a:dd:01:1d:80:5a:ea:66:44:a6:dd:cd:67:10:
d7:46:55:08:ad:c1:7e:34:df:5f:4b:2b:3a:90:2e:f2:9d:bb:
4d:67:c6:1f:52:c4:df:c0:b3:ae:1f:7e:34:8d:32:c6:d5:e0:
66:19:76:d1:28:b8:f9:2d:24:90:42:5a:a2:27:29:07:e4:bf:
36:cf:62:e3:80:59:cd:b3:02:b9:77:e6:47:d3:83:ae:b9:93:
d4:d2:3a:c4:ae:ec:01:48:7b:5a:f0:5b:c7:6a:b8:7b:d8:6b:
98:24:54:a5:4f:83:96:55:88:b0:d7:54:7e:a7:92:9f:18:44:
b1:73:90:a0:e8:4d:5d:83:79:61:27:39:8d:cb:b4:c1:03:29:
36:24:96:51:7d:7d:3f:3e:ab:78:ce:44:36:c0:ac:39:87:21:
44:b2:a5:34:01:0f:2b:88:aa:6d:d9:e6:c2:a8:eb:12:4d:95:
5b:2a:50:8f:08:94:8a:e2:ff:4c:43:db:87:49:be:41:73:7c:
f1:38:c1:2b:33:07:45:f8:15:ce:1b:30:d3:a5:fd:43:2b:d5:
96:a1:a0:46
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAZQhQ8mOZIceN1UWyYH8OHgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTM0ZTEwNmJlNTM4NmVkMTA2NzVlZTBkZTMzNmRjNzdlMjAwZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQJKvxOvnVEKutZhC/6on41beEC+
e0nY5pftqs6E+JT/sbfxaMY4Dsg9ZILug+QPAsjtSa+mk2dzsJY2q4H+khoQV8FE
TMXYS3M+RaFWQ8B2jFIF+z3moZ/siBP+4TytZhOUTlYBGH5/cV5VDcYRL6ImY1vE
9ErvCrMJATou6kJUd29F9nT+KilMU1PTH/V6JVb9aptyp3kBF+GXdAt2RvysxduN
hBM7HJGxo/oyqQrSH0pEGwqMqZEGB8Z8vHBwjQX6X9vBoGNZLm/togQcop492/i7
gPe1axi723qZTyHmF55GIilhpJ1ZMM5EmJqTcFQz9wRjqBmHzsh+Z8cdrQIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFKk04Qa+U4btEGde4N4zbcd+IA1ZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzE0ZGZk
OS01OTE0LTRkMjAtYTE3Ni0wYTZiZjJkZjlkNjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMTRkZmQ5
LTU5MTQtNGQyMC1hMTc2LTBhNmJmMmRmOWQ2Mi8xL3FUVGhCcjVUaHUwUVoxN2cz
ak50eDM0Z0RWay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQDVR9wAwQFVVpgAwQFWRWAAwQEXuTwAwQBwpXq
MA0EAgACMAcDBQAqABcAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj04MA0GCSqG
SIb3DQEBCwUAA4IBAQB/ma187DgWoi+5TMpz5BLXYP+ywigmD5QyualeYWLZjnTd
9+BRVT5KOt0BHYBa6mZEpt3NZxDXRlUIrcF+NN9fSys6kC7ynbtNZ8YfUsTfwLOu
H340jTLG1eBmGXbRKLj5LSSQQlqiJykH5L82z2LjgFnNswK5d+ZH04OuuZPU0jrE
ruwBSHta8FvHarh72GuYJFSlT4OWVYiw11R+p5KfGESxc5Cg6E1dg3lhJzmNy7TB
Ayk2JJZRfX0/Pqt4zkQ2wKw5hyFEsqU0AQ8riKpt2ebCqOsSTZVbKlCPCJSK4v9M
Q9uHSb5Bc3zxOMErMwdF+BXOGzDTpf1DK9WWoaBG
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:02:53 2025 by rpki-client