Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer (raw, json)
Hash identifier: t0qkBS8qT4uYDOsNtcKlwY7+OmufXiiKcqnPuChtqno=
Subject key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5D981CA447A147A66DA9F2186CB09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15943
IP: 2.57.116.0/22
IP: 31.29.32.0/19
IP: 31.172.104.0/21
IP: 37.122.136.0/21
IP: 45.82.192.0/22
IP: 45.131.16.0/22
IP: 45.157.100.0/22
IP: 45.159.176.0/22
IP: 46.22.0.0/20
IP: 46.59.128.0/17
IP: 77.223.8.0 -- 77.223.31.255
IP: 80.245.104.0/22
IP: 81.25.160.0/20
IP: 84.46.0.0/17
IP: 84.242.16.0/20
IP: 94.72.128.0/21
IP: 94.72.168.0/21
IP: 94.72.184.0/21
IP: 95.81.0.0/19
IP: 95.129.0.0/21
IP: 95.163.160.0/20
IP: 109.230.96.0/20
IP: 134.101.128.0/17
IP: 149.224.0.0/16
IP: 149.233.128.0/17
IP: 149.249.16.0/20
IP: 149.249.248.0/22
IP: 176.109.192.0/19
IP: 185.23.224.0/22
IP: 185.29.240.0/22
IP: 185.82.16.0/22
IP: 185.207.4.0/22
IP: 185.215.236.0/22
IP: 185.220.216.0/22
IP: 185.232.32.0/22
IP: 188.136.224.0/19
IP: 192.119.48.0/20
IP: 192.196.192.0/20
IP: 193.178.56.0/22
IP: 193.218.16.0/20
IP: 195.123.96.0/20
IP: 195.250.0.0/20
IP: 212.127.32.0/19
IP: 212.146.136.0 -- 212.146.159.255
IP: 213.21.32.0/20
IP: 213.195.24.0/21
IP: 213.209.64.0/18
IP: 216.83.208.0/20
IP: 2a02:2028::/32
IP: 2a04:4540::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d9:81:ca:44:7a:14:7a:66:da:9f:21:86:cb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5503498ff185d0c607353f43f55e911f62a6802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:c3:e1:0a:80:73:76:c4:f0:3b:1c:00:f8:
b7:66:f8:d7:70:61:a1:57:20:a8:63:8d:34:c9:56:
7f:2c:b6:d8:99:5f:24:9b:0c:c1:d6:97:62:f9:7a:
af:ff:81:6c:51:e8:3b:32:3c:e0:f9:8d:c0:52:b3:
c5:00:a9:f7:3f:f2:d4:db:fc:6c:c9:d1:e8:f5:32:
92:86:58:a9:c9:86:a0:62:91:e7:e7:c9:71:14:2f:
72:5d:f8:35:b3:ce:65:ac:66:89:3f:d6:b1:df:af:
9c:1d:43:a3:b6:a6:b4:9d:d9:5f:07:7d:64:49:40:
87:02:20:e8:21:86:e0:b2:d1:d0:c1:db:52:49:9b:
f9:68:30:6c:90:f9:9a:b3:3f:7a:29:27:68:9c:04:
75:a0:0c:e3:f7:49:18:c3:14:81:6f:5c:19:ff:88:
f2:d9:40:97:52:fa:c6:d5:bb:fd:9b:53:42:70:97:
22:6f:ca:66:18:9e:29:44:98:56:56:83:be:bb:73:
a1:90:ab:54:01:28:28:c5:10:08:bb:9e:64:fa:f3:
32:f6:81:0e:34:2e:e3:06:9e:6e:34:5a:c4:84:00:
ca:02:f3:85:c9:eb:d3:73:41:94:ee:43:bc:fe:7c:
ce:2f:17:7e:df:41:f8:77:0c:90:64:68:0c:db:39:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.116.0/22
31.29.32.0/19
31.172.104.0/21
37.122.136.0/21
45.82.192.0/22
45.131.16.0/22
45.157.100.0/22
45.159.176.0/22
46.22.0.0/20
46.59.128.0/17
77.223.8.0-77.223.31.255
80.245.104.0/22
81.25.160.0/20
84.46.0.0/17
84.242.16.0/20
94.72.128.0/21
94.72.168.0/21
94.72.184.0/21
95.81.0.0/19
95.129.0.0/21
95.163.160.0/20
109.230.96.0/20
134.101.128.0/17
149.224.0.0/16
149.233.128.0/17
149.249.16.0/20
149.249.248.0/22
176.109.192.0/19
185.23.224.0/22
185.29.240.0/22
185.82.16.0/22
185.207.4.0/22
185.215.236.0/22
185.220.216.0/22
185.232.32.0/22
188.136.224.0/19
192.119.48.0/20
192.196.192.0/20
193.178.56.0/22
193.218.16.0/20
195.123.96.0/20
195.250.0.0/20
212.127.32.0/19
212.146.136.0-212.146.159.255
213.21.32.0/20
213.195.24.0/21
213.209.64.0/18
216.83.208.0/20
IPv6:
2a02:2028::/32
2a04:4540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15943
Signature Algorithm: sha256WithRSAEncryption
1d:cf:46:66:2a:1c:c3:c1:e0:3c:51:26:52:b1:e4:4d:7d:1f:
59:3c:54:ec:a4:cf:e3:e7:e6:b5:66:76:f6:8b:6e:68:57:11:
cd:e6:d3:94:e8:40:a2:27:12:fa:58:3e:23:67:83:03:4c:e2:
c4:04:38:f9:b8:1c:fc:7b:de:70:8a:07:ec:88:f8:6c:62:5c:
0d:31:b3:d8:45:4d:cf:77:83:78:c1:c2:39:9c:d4:70:80:e7:
d4:dd:42:71:cb:47:b2:b8:b9:2a:1c:75:dc:01:7e:ef:d5:60:
33:1c:51:50:7f:2a:b6:af:25:3d:55:b1:fb:b3:ba:8c:21:03:
61:cd:4a:93:7f:11:20:10:f0:6d:3b:ed:82:c7:58:75:17:bd:
27:9a:e7:d3:e8:d4:9c:67:7b:b7:35:f6:1b:45:b3:91:ac:71:
18:36:fe:c5:fe:41:f0:e1:5d:3e:f8:e7:04:2c:8e:18:7e:6e:
8c:a7:b0:cd:e4:c1:bf:90:0e:36:7b:26:ef:7c:96:23:00:b4:
d7:7d:be:fd:1d:8f:2e:d6:bc:c4:18:95:33:0d:6e:ce:77:0d:
69:3d:f5:38:44:66:e1:e0:d8:60:e6:b6:0a:e9:ab:a0:ea:13:
09:18:f6:94:a7:da:0e:d2:24:67:d1:9e:2a:f8:89:c3:7a:b0:
90:40:ff:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:27 2025 by rpki-client