Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
File: B6alie6EioBSI4GRuYA153USJyU.cer (raw, json)
Hash identifier: LD0tKQJS35jAw/oiCeJYl9XEASM1vTyKhahoypthFXc=
Subject key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5B423B047785370522E789BBEA100
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210218
IP: 2.58.93.0 -- 2.58.94.255
IP: 2.58.136.0/22
IP: 2.59.248.0/22
IP: 31.13.194.0/24
IP: 31.13.249.0 -- 31.13.255.255
IP: 37.139.129.0/24
IP: 37.221.120.0/22
IP: 45.8.74.0/23
IP: 45.12.248.0/22
IP: 45.66.229.0/24
IP: 45.81.241.0 -- 45.81.242.255
IP: 45.139.100.0/22
IP: 45.143.100.0/22
IP: 45.144.152.0/23
IP: 45.149.232.0/23
IP: 45.151.88.0/24
IP: 77.75.56.0/22
IP: 78.40.160.0/21
IP: 80.249.124.0/22
IP: 82.115.208.0/24
IP: 87.120.32.0/24
IP: 87.120.34.0/23
IP: 87.120.46.0/23
IP: 87.120.63.0 -- 87.120.66.255
IP: 87.120.85.0 -- 87.120.86.255
IP: 87.120.96.0/23
IP: 87.120.111.0/24
IP: 87.120.177.0/24
IP: 87.120.218.0/24
IP: 87.120.220.0/23
IP: 87.120.224.0/24
IP: 87.120.226.0/24
IP: 87.120.232.0/22
IP: 87.121.19.0/24
IP: 87.121.36.0/23
IP: 87.121.56.0/23
IP: 87.121.59.0/24
IP: 87.121.66.0 -- 87.121.68.255
IP: 87.121.100.0/23
IP: 87.121.116.0/24
IP: 87.121.148.0/23
IP: 91.92.3.0/24
IP: 91.92.24.0/23
IP: 91.197.196.0/22
IP: 91.243.184.0/22
IP: 92.249.51.0/24
IP: 93.123.68.0/22
IP: 93.123.86.0/23
IP: 93.123.108.0/24
IP: 94.33.0.0/16
IP: 94.103.126.0/24
IP: 94.154.174.0/23
IP: 94.156.16.0/22
IP: 94.156.32.0/24
IP: 94.156.48.0/21
IP: 94.156.95.0/24
IP: 94.156.108.0/22
IP: 94.156.124.0/22
IP: 94.156.168.0/23
IP: 94.156.182.0 -- 94.156.184.255
IP: 94.156.187.0/24
IP: 94.156.192.0/23
IP: 94.156.234.0/23
IP: 94.156.240.0/22
IP: 94.156.246.0/23
IP: 94.240.56.0/22
IP: 95.214.124.0/22
IP: 109.206.238.0/24
IP: 141.98.0.0/24
IP: 164.40.184.0/24
IP: 164.40.186.0/23
IP: 171.22.17.0/24
IP: 171.22.29.0/24
IP: 176.125.252.0/23
IP: 178.175.184.0/21
IP: 178.215.225.0 -- 178.215.226.255
IP: 185.171.148.0/22
IP: 185.219.125.0 -- 185.219.126.255
IP: 185.221.66.0/24
IP: 185.225.72.0/23
IP: 185.252.178.0/24
IP: 185.254.38.0/23
IP: 193.19.200.0/22
IP: 193.36.232.0/22
IP: 193.37.43.0/24
IP: 193.37.46.0/24
IP: 193.43.3.0/24
IP: 193.46.172.0/22
IP: 193.56.16.0/22
IP: 193.56.248.0/22
IP: 193.58.184.0/22
IP: 193.149.2.0/23
IP: 193.207.0.0 -- 193.207.23.255
IP: 194.48.249.0/24
IP: 194.76.204.0/22
IP: 194.147.8.0/22
IP: 194.169.174.0/24
IP: 194.180.50.0/24
IP: 195.178.120.0/24
IP: 195.225.120.0/22
IP: 212.22.128.0/19
IP: 212.24.0.0/19
IP: 212.73.135.0/24
IP: 2a09:e6c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b4:23:b0:47:78:53:70:52:2e:78:9b:be:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07a6a589ee848a8052238191b98035e775122725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:82:a8:d2:1d:2e:a3:b1:a3:4f:aa:5d:2a:
e7:08:9b:2b:eb:9d:03:37:0f:ec:72:20:73:25:98:
1c:2b:79:8b:6f:f5:cb:ab:2e:0e:ae:0c:24:29:d6:
26:fa:23:23:89:7c:fb:5c:9b:ea:ec:a3:1a:d4:6f:
74:0b:cf:d2:0f:52:30:d8:e5:9e:79:c3:c4:47:85:
04:e5:f0:25:dc:55:29:a0:1b:b2:df:d3:d6:e7:89:
be:65:4a:48:5c:15:72:4a:95:f1:6c:6d:67:4c:cc:
ec:e3:f3:07:16:c1:25:f0:0b:3d:a1:1b:c6:b1:fa:
ca:73:83:a0:de:f5:de:8d:ab:1a:9c:30:c7:7d:af:
86:0a:0e:d8:23:fd:15:71:8d:a8:a4:1c:4d:01:94:
16:f1:65:36:9b:10:a5:23:a7:e5:eb:da:0a:cd:a1:
22:58:7a:9b:14:3e:8f:8c:35:35:f3:75:59:3f:2e:
b2:4a:0f:ac:43:2d:da:42:61:e6:7a:fc:e1:bb:18:
52:29:09:85:36:40:6f:53:cb:e9:bf:68:8b:75:f3:
d5:94:93:80:e1:81:4c:c7:fe:ff:a7:c3:73:cc:c8:
23:05:b4:f0:c9:db:ca:ef:7b:07:3b:42:aa:ec:22:
c3:9e:ce:b5:b2:52:42:64:a7:dd:ff:ee:d2:bb:ba:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0-2.58.94.255
2.58.136.0/22
2.59.248.0/22
31.13.194.0/24
31.13.249.0-31.13.255.255
37.139.129.0/24
37.221.120.0/22
45.8.74.0/23
45.12.248.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.139.100.0/22
45.143.100.0/22
45.144.152.0/23
45.149.232.0/23
45.151.88.0/24
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
82.115.208.0/24
87.120.32.0/24
87.120.34.0/23
87.120.46.0/23
87.120.63.0-87.120.66.255
87.120.85.0-87.120.86.255
87.120.96.0/23
87.120.111.0/24
87.120.177.0/24
87.120.218.0/24
87.120.220.0/23
87.120.224.0/24
87.120.226.0/24
87.120.232.0/22
87.121.19.0/24
87.121.36.0/23
87.121.56.0/23
87.121.59.0/24
87.121.66.0-87.121.68.255
87.121.100.0/23
87.121.116.0/24
87.121.148.0/23
91.92.3.0/24
91.92.24.0/23
91.197.196.0/22
91.243.184.0/22
92.249.51.0/24
93.123.68.0/22
93.123.86.0/23
93.123.108.0/24
94.33.0.0/16
94.103.126.0/24
94.154.174.0/23
94.156.16.0/22
94.156.32.0/24
94.156.48.0/21
94.156.95.0/24
94.156.108.0/22
94.156.124.0/22
94.156.168.0/23
94.156.182.0-94.156.184.255
94.156.187.0/24
94.156.192.0/23
94.156.234.0/23
94.156.240.0/22
94.156.246.0/23
94.240.56.0/22
95.214.124.0/22
109.206.238.0/24
141.98.0.0/24
164.40.184.0/24
164.40.186.0/23
171.22.17.0/24
171.22.29.0/24
176.125.252.0/23
178.175.184.0/21
178.215.225.0-178.215.226.255
185.171.148.0/22
185.219.125.0-185.219.126.255
185.221.66.0/24
185.225.72.0/23
185.252.178.0/24
185.254.38.0/23
193.19.200.0/22
193.36.232.0/22
193.37.43.0/24
193.37.46.0/24
193.43.3.0/24
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.149.2.0/23
193.207.0.0-193.207.23.255
194.48.249.0/24
194.76.204.0/22
194.147.8.0/22
194.169.174.0/24
194.180.50.0/24
195.178.120.0/24
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
212.73.135.0/24
IPv6:
2a09:e6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210218
Signature Algorithm: sha256WithRSAEncryption
5d:6a:f5:2e:dd:fa:0f:9d:75:f6:7c:51:1d:d7:9a:e5:d9:a4:
d3:9d:61:db:22:a2:7d:ef:94:58:3e:e6:be:a5:c2:fe:e0:14:
32:66:b5:9c:4f:2b:e8:1c:85:21:9c:c1:12:72:4a:fc:cb:86:
e7:a6:41:ee:35:0d:1a:f8:ea:54:85:34:23:c8:c4:27:8f:b1:
9c:26:66:86:ac:56:54:c8:72:ac:06:af:7f:3b:5c:17:cf:91:
91:7b:df:89:19:e7:e6:14:0e:1e:20:00:78:24:b9:ed:f1:67:
13:da:8b:1e:ac:3a:a5:e4:7a:49:78:6c:49:89:a6:34:ce:8a:
eb:70:15:11:93:75:e4:84:4b:d8:e3:d4:17:45:86:00:9b:66:
d9:96:01:28:9a:c1:99:4d:ad:08:79:fa:6f:73:20:7e:11:61:
80:84:92:fa:22:2a:af:ad:fb:68:74:af:b4:74:4d:bf:6a:ed:
90:47:2d:dd:14:46:4d:b3:e5:9d:29:6c:2f:d0:07:5c:68:82:
9b:6d:a1:ba:6b:0f:b5:fe:5c:cc:4d:16:5e:e7:e6:df:52:cf:
79:e6:05:3a:27:e5:43:b0:c6:8d:7e:cb:51:5e:90:6c:10:e1:
e6:01:c8:1c:8e:48:8e:cc:98:6f:52:bd:1b:b8:e4:16:78:f2:
28:e6:af:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:02 2025 by rpki-client