Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
File: 5_iBQBq6zIjJQf33QPGrFTbwXbo.cer (raw, json)
Hash identifier: itQG6XGynEF7N9Xs/eUrBMYoRBZmhblpS6defBGL7+E=
Subject key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A23C124B7CD35E51CA723B069294A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5578
AS: 6726
AS: 6803
AS: 8288
AS: 16160
AS: 16295
AS: 20579
AS: 48133
IP: 45.146.244.0/22
IP: 62.65.160.0/19
IP: 62.152.224.0/19
IP: 62.168.64.0/18
IP: 62.197.192.0/18
IP: 80.250.240.0/20
IP: 81.88.128.0/20
IP: 82.119.224.0/20
IP: 83.168.128.0/18
IP: 84.245.64.0/18
IP: 85.248.0.0/16
IP: 92.60.56.0/21
IP: 94.124.144.0/21
IP: 94.228.80.0/20
IP: 185.121.64.0/22
IP: 185.130.220.0/22
IP: 185.220.120.0/22
IP: 188.123.96.0/20
IP: 188.123.116.0/22
IP: 193.58.192.0 -- 193.58.197.255
IP: 193.110.186.0/23
IP: 194.1.172.0/22
IP: 194.1.224.0/21
IP: 195.12.128.0/19
IP: 195.46.64.0/19
IP: 195.72.0.0/19
IP: 195.98.0.0/19
IP: 195.168.0.0/16
IP: 212.26.160.0/19
IP: 212.81.0.0/19
IP: 213.215.64.0/18
IP: 217.67.16.0/20
IP: 217.75.64.0/19
IP: 217.118.96.0/20
IP: 217.172.144.0/20
IP: 2001:1ba0::/32
IP: 2a00:1298::/32
IP: 2a02:770::/32
IP: 2a03:f040::/32
IP: 2a06:dbc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:23:c1:24:b7:cd:35:e5:1c:a7:23:b0:69:29:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:b4:75:97:ec:e0:da:c7:8e:38:ad:49:db:
e0:a7:ff:5d:ed:17:71:be:94:a7:4e:04:dc:14:31:
a0:0b:47:f0:fe:cd:f8:b3:d9:32:46:21:92:d1:8d:
e5:c4:74:0e:ea:dd:b6:b5:16:01:85:56:ef:82:dd:
e9:18:7d:9c:4d:9f:1b:80:e1:05:24:1e:d3:dd:89:
f9:33:fe:bc:53:ae:95:26:4a:20:3a:d9:4e:f0:9c:
0f:aa:a3:91:0c:60:11:0d:a3:e8:c7:3c:5a:2a:68:
99:c7:79:48:94:45:72:68:8f:09:39:b8:4b:1f:82:
90:1c:af:dc:da:cd:5f:d8:4f:f6:93:fe:01:e2:40:
cf:03:e6:af:73:9c:49:1e:e1:5b:d5:a4:69:33:30:
3e:32:f4:0a:fb:af:e7:07:2e:1e:b4:7e:9b:18:50:
5c:af:37:64:4b:ec:61:8e:cf:21:bc:18:13:b2:e5:
d8:26:a0:87:2a:63:0b:88:06:7d:22:eb:54:e7:02:
97:61:7d:d6:e7:d5:5f:d3:a0:0d:e4:bc:6e:5b:15:
92:7d:f8:f8:17:a3:38:2e:4f:d5:43:68:51:29:86:
cd:4b:96:35:a6:a5:e8:0a:93:98:8b:a2:6f:38:07:
3c:de:62:1e:c9:d8:aa:e1:8f:02:af:44:68:1d:01:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.244.0/22
62.65.160.0/19
62.152.224.0/19
62.168.64.0/18
62.197.192.0/18
80.250.240.0/20
81.88.128.0/20
82.119.224.0/20
83.168.128.0/18
84.245.64.0/18
85.248.0.0/16
92.60.56.0/21
94.124.144.0/21
94.228.80.0/20
185.121.64.0/22
185.130.220.0/22
185.220.120.0/22
188.123.96.0/20
188.123.116.0/22
193.58.192.0-193.58.197.255
193.110.186.0/23
194.1.172.0/22
194.1.224.0/21
195.12.128.0/19
195.46.64.0/19
195.72.0.0/19
195.98.0.0/19
195.168.0.0/16
212.26.160.0/19
212.81.0.0/19
213.215.64.0/18
217.67.16.0/20
217.75.64.0/19
217.118.96.0/20
217.172.144.0/20
IPv6:
2001:1ba0::/32
2a00:1298::/32
2a02:770::/32
2a03:f040::/32
2a06:dbc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5578
6726
6803
8288
16160
16295
20579
48133
Signature Algorithm: sha256WithRSAEncryption
9b:5a:dd:7d:8e:30:89:01:80:81:cc:49:80:f8:27:e9:4e:1f:
5b:65:82:99:eb:07:c8:e3:03:ef:f1:01:ff:41:23:a2:51:24:
54:b3:20:17:af:06:f0:44:30:ed:12:b4:c6:89:6d:af:f0:a3:
87:12:12:85:4e:1b:10:36:b3:7d:c5:85:86:53:d2:02:2f:4a:
03:a9:27:18:04:d5:e8:06:a8:df:a3:3b:c8:fd:13:ec:5b:95:
ce:e4:1d:ae:99:67:d2:dc:17:c2:aa:79:39:a7:2e:a6:f8:0e:
23:36:54:d8:b0:09:19:e2:83:1a:03:08:19:f9:c2:d2:ac:58:
24:36:45:9f:82:ff:44:b3:a4:f1:17:b6:12:e5:23:7e:df:c2:
2b:1b:35:c6:db:1c:a1:b0:6e:6b:32:8f:38:f8:18:e5:4e:6f:
02:28:b5:58:8c:b6:58:d3:26:cb:2e:cf:33:20:f2:e7:f0:fe:
f1:e8:38:a0:2a:00:a9:7c:21:27:95:f3:44:48:08:21:f1:88:
10:d9:bc:09:73:b7:8f:78:90:19:a8:a5:d8:e6:2a:28:17:73:
72:22:77:59:b6:19:3c:48:3e:4f:ac:d1:12:d3:dc:af:26:fd:
ba:a5:a7:6c:e0:38:81:11:bc:61:db:6a:97:5c:ad:41:e7:12:
43:57:01:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:21 2025 by rpki-client