Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
File: quE1bmQEwLcC1bOBOpNENarsDJg.cer (raw, json)
Hash identifier: ir/QW6dg+fCKB8ilVmI/lauiCMBnkGvJASIrNQK0KIU=
Subject key identifier: AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274890BF039A98F18ED30ECD2263250E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43611
IP: 78.24.80.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:90:bf:03:9a:98:f1:8e:d3:0e:cd:22:63:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2b:04:fc:27:d8:10:8f:22:89:f1:37:4f:5a:
42:6a:f7:e4:3f:65:f9:b4:ca:bc:e1:30:f5:08:e4:
7a:02:e1:b3:15:b9:39:5a:51:fd:7a:ec:38:fd:c7:
0f:7d:e7:00:9f:fd:f5:70:85:37:1d:d1:bc:e3:d4:
91:5f:de:50:24:3d:e5:39:75:84:fe:cf:8f:3b:d8:
b9:95:07:e2:c9:98:7b:de:31:ce:69:3a:01:e5:cb:
29:db:f0:d0:e3:ca:0f:a2:43:e6:a6:c3:50:b6:94:
00:1b:d6:fa:f6:fc:5a:86:38:fd:1c:22:83:e8:6a:
27:a4:05:67:6a:3e:e0:d2:32:7b:64:b2:65:5f:fa:
60:a4:32:8a:4d:46:7d:ec:b3:45:ba:93:7e:f3:86:
ad:bd:8a:af:c3:ff:6f:6a:c2:7e:28:ae:ad:8b:eb:
3e:b3:1f:86:b1:15:e4:2a:30:29:67:24:4d:2a:68:
7b:6f:cd:3d:ca:ad:92:02:fe:4c:4c:a3:48:03:ec:
e3:02:36:f1:ad:f1:76:b0:a7:35:4f:26:4c:00:f4:
bd:87:67:6c:95:48:24:af:ad:a9:52:a4:42:a7:d6:
f9:fb:42:66:5f:8b:f3:d0:97:5a:7e:37:89:16:3f:
68:6e:0d:4a:70:ea:54:45:92:66:23:74:4e:61:2d:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.80.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43611
Signature Algorithm: sha256WithRSAEncryption
63:4a:a4:ff:69:be:23:7f:65:60:ca:7b:63:87:3b:42:96:55:
8a:8a:07:7b:11:91:36:3e:4e:2d:16:57:da:c9:b6:24:e4:cc:
b6:ee:65:cd:67:e1:96:5e:cb:a1:51:70:db:dd:a6:86:ab:e5:
c2:4b:71:8d:11:bd:6d:bc:0b:9f:92:7f:4d:19:cb:6d:5b:64:
c9:f5:f3:19:c5:cf:f3:4b:2f:c8:55:26:51:a4:d3:54:f2:cb:
91:be:89:e9:a5:b4:ac:f6:6a:40:f5:59:d5:26:87:b9:ba:e2:
1f:b7:54:c6:3d:23:09:04:b3:82:7e:5a:03:2b:ae:4d:93:e2:
83:22:c1:7f:72:6f:b1:f8:76:6e:24:2f:0a:10:39:27:d5:47:
f3:6b:76:9b:9f:f3:04:6e:05:51:1c:07:ac:c1:5d:d9:01:ed:
23:cf:e6:9e:20:40:08:db:ee:97:4f:9e:bc:5b:07:62:75:f5:
b8:76:88:d9:a7:37:cc:cf:9d:15:ac:4f:18:fa:be:3e:4c:f0:
a4:01:45:8e:4e:03:d6:52:73:2a:1d:9d:14:94:5f:48:24:b9:
46:22:9c:76:b4:df:5a:a4:c2:84:2b:02:4f:39:b9:ff:49:85:
d3:aa:be:56:fd:3c:9e:10:f0:95:0c:3a:f7:34:84:c1:22:e7:
07:64:be:c4
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQnSJC/A5qY8Y7TDs0iYyUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWUxMzU2ZTY0MDRjMGI3MDJkNWIzODEzYTkzNDQzNWFhZWMwYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ysE/CfYEI8iifE3T1pCavfkP2X5
tMq84TD1COR6AuGzFbk5WlH9euw4/ccPfecAn/31cIU3HdG849SRX95QJD3lOXWE
/s+PO9i5lQfiyZh73jHOaToB5csp2/DQ48oPokPmpsNQtpQAG9b69vxahjj9HCKD
6GonpAVnaj7g0jJ7ZLJlX/pgpDKKTUZ97LNFupN+84atvYqvw/9vasJ+KK6ti+s+
sx+GsRXkKjApZyRNKmh7b809yq2SAv5MTKNIA+zjAjbxrfF2sKc1TyZMAPS9h2ds
lUgkr62pUqRCp9b5+0JmX4vz0JdafjeJFj9obg1KcOpURZJmI3ROYS07KQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFKrhNW5kBMC3AtWzgTqTRDWq7AyYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ViLzgxMTFm
NC0xOGVjLTRmMzktODU0MS0wNzc1ZmJiOGU4MWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvODExMWY0
LTE4ZWMtNGYzOS04NTQxLTA3NzVmYmI4ZTgxYS8xL3F1RTFibVFFd0xjQzFiT0JP
cE5FTmFyc0RKZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDThhQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCqWzANBgkqhkiG9w0BAQsFAAOCAQEAY0qk/2m+I39lYMp7Y4c7QpZViooHexGR
Nj5OLRZX2sm2JOTMtu5lzWfhll7LoVFw292mhqvlwktxjRG9bbwLn5J/TRnLbVtk
yfXzGcXP80svyFUmUaTTVPLLkb6J6aW0rPZqQPVZ1SaHubriH7dUxj0jCQSzgn5a
AyuuTZPigyLBf3Jvsfh2biQvChA5J9VH82t2m5/zBG4FURwHrMFd2QHtI8/mniBA
CNvul0+evFsHYnX1uHaI2ac3zM+dFaxPGPq+PkzwpAFFjk4D1lJzKh2dFJRfSCS5
RiKcdrTfWqTChCsCTzm5/0mF06q+Vv08nhDwlQw69zSEwSLnB2S+xA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:55 2025 by rpki-client