Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
File: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer (raw, json)
Hash identifier: joKfVvY9/b6Mv2ykI5uQ0u1IWiGfSAANDEI9IgV96Ic=
Subject key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019483EC1BDAF5E0D8B18C0CBA607D2CBD92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jan 2025 13:34:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2.59.8.0/23
IP: 2.59.14.0/24
IP: 5.42.198.0/24
IP: 31.14.219.0/24
IP: 31.14.236.0/23
IP: 31.42.112.0/22
IP: 31.210.18.0/24
IP: 43.240.140.0/22
IP: 45.78.80.0/22
IP: 45.94.244.0/22
IP: 45.95.48.0/22
IP: 45.116.168.0/22
IP: 45.138.232.0/22
IP: 45.142.92.0 -- 45.142.99.255
IP: 45.149.148.0/22
IP: 58.97.128.0/21
IP: 58.97.232.0 -- 58.97.255.255
IP: 62.3.29.0/24
IP: 62.68.91.0/24
IP: 62.106.92.0/24
IP: 62.112.12.0/23
IP: 77.81.104.0/21
IP: 77.95.116.0/22
IP: 78.24.206.0/24
IP: 78.138.1.0 -- 78.138.2.255
IP: 78.138.16.0/24
IP: 78.138.25.0/24
IP: 78.138.30.0/24
IP: 78.138.40.0/24
IP: 78.138.47.0 -- 78.138.48.255
IP: 78.138.50.0/24
IP: 80.240.103.0/24
IP: 80.240.111.0/24
IP: 82.97.196.0/23
IP: 82.97.199.0 -- 82.97.200.255
IP: 83.229.76.0/22
IP: 83.229.104.0/22
IP: 84.39.224.0/21
IP: 85.89.192.0/19
IP: 86.106.120.0/24
IP: 89.19.40.0/22
IP: 89.32.129.0/24
IP: 89.32.184.0/24
IP: 89.32.203.0/24
IP: 89.34.7.0/24
IP: 89.34.78.0/23
IP: 89.37.28.0/24
IP: 89.37.216.0/23
IP: 89.38.106.0/23
IP: 89.38.132.0/23
IP: 89.39.150.0/24
IP: 89.40.108.0/23
IP: 89.41.62.0/24
IP: 89.42.48.0/23
IP: 89.43.51.0/24
IP: 89.43.68.0/23
IP: 89.44.115.0/24
IP: 89.44.213.0/24
IP: 89.44.245.0/24
IP: 89.46.152.0/21
IP: 89.47.63.0/24
IP: 89.249.51.0/24
IP: 89.249.56.0/22
IP: 91.132.184.0/22
IP: 91.197.252.0/22
IP: 91.238.148.0/23
IP: 91.245.235.0/24
IP: 92.43.84.0/22
IP: 93.113.124.0/23
IP: 93.114.0.0/20
IP: 93.115.12.0/23
IP: 93.180.192.0/20
IP: 93.180.224.0/20
IP: 94.176.112.0/20
IP: 94.176.163.0/24
IP: 94.176.216.0/22
IP: 94.177.52.0 -- 94.177.57.255
IP: 95.215.36.0/22
IP: 103.204.124.0/22
IP: 103.204.212.0/22
IP: 104.167.22.0/23
IP: 119.13.192.0/19
IP: 121.91.80.0/21
IP: 138.124.144.0/22
IP: 150.129.92.0/22
IP: 176.117.84.0/22
IP: 176.118.195.0/24
IP: 176.119.8.0/21
IP: 185.38.102.0/24
IP: 185.77.250.0/23
IP: 185.90.243.0/24
IP: 185.125.192.0/22
IP: 185.131.220.0/23
IP: 185.221.221.0/24
IP: 185.223.56.0/24
IP: 185.223.58.0/23
IP: 185.225.104.0/22
IP: 185.229.250.0/24
IP: 185.240.252.0/24
IP: 185.240.254.0/23
IP: 185.243.108.0/22
IP: 188.95.152.0/21
IP: 188.119.116.0/22
IP: 188.210.94.0/23
IP: 188.211.250.0/23
IP: 188.212.120.0/24
IP: 188.214.89.0/24
IP: 188.214.93.0/24
IP: 188.241.59.0/24
IP: 188.241.146.0/24
IP: 193.169.8.0/23
IP: 193.192.52.0/23
IP: 193.203.36.0/24
IP: 193.203.39.0/24
IP: 193.239.172.0/23
IP: 193.239.246.0/23
IP: 194.24.234.0/23
IP: 194.88.134.0/23
IP: 194.135.26.0/23
IP: 194.135.132.0/23
IP: 194.145.118.0/24
IP: 194.145.220.0/23
IP: 194.187.50.0/23
IP: 194.246.106.0/23
IP: 195.2.196.0/23
IP: 195.13.48.0/23
IP: 195.34.80.0/23
IP: 195.93.140.0/23
IP: 195.128.188.0/23
IP: 195.133.208.0/23
IP: 195.135.192.0/23
IP: 195.189.132.0/23
IP: 195.189.250.0/23
IP: 195.210.44.0/23
IP: 195.254.140.0/23
IP: 202.81.208.0/20
IP: 202.181.20.0/22
IP: 203.109.52.0/22
IP: 203.109.60.0/22
IP: 203.166.144.0 -- 203.166.157.255
IP: 209.20.160.0/19
IP: 213.159.10.0 -- 213.159.13.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:ec:1b:da:f5:e0:d8:b1:8c:0c:ba:60:7d:2c:bd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 20 13:34:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:9e:89:e0:ed:49:ef:6f:5d:1e:1e:28:cf:
e1:2b:d0:77:48:7f:c5:96:be:66:1e:c8:2b:44:71:
97:97:73:90:ad:ca:4b:3a:14:d7:1c:8e:e0:f9:0f:
3b:6f:40:8b:83:37:96:32:6b:86:05:ce:c5:fa:a5:
b2:5a:c1:fb:2d:c5:91:f1:2f:3b:87:69:d7:d4:2f:
4e:fe:91:06:ec:32:9a:4b:42:05:bf:24:6b:eb:6e:
37:29:e1:5f:0a:d7:7a:8f:72:77:24:96:18:2e:68:
9f:7c:84:e5:37:74:68:6d:b0:1d:3f:3a:a2:8e:c4:
1e:63:25:52:85:41:80:69:0a:8b:d5:56:f6:f5:d3:
ed:63:2a:16:8b:e2:3a:36:3b:d9:7c:9b:3e:75:63:
f7:6b:4f:27:10:24:3a:d7:aa:07:e0:b9:71:74:6d:
69:57:ec:8f:4a:73:5c:89:96:a8:c2:5e:7c:82:cc:
58:78:0f:b0:d0:49:de:46:1b:ec:34:13:5e:20:cd:
8d:a3:35:61:51:53:e5:05:9d:96:14:51:5d:6f:e4:
ed:3a:9f:7b:76:22:f5:a6:0f:6d:59:2c:ac:d9:c6:
37:1a:cb:58:a4:7e:77:fa:ba:d7:27:62:0a:a2:e1:
36:a5:08:2f:5e:f4:ba:20:0c:81:b1:18:8e:3c:38:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.8.0/23
2.59.14.0/24
5.42.198.0/24
31.14.219.0/24
31.14.236.0/23
31.42.112.0/22
31.210.18.0/24
43.240.140.0/22
45.78.80.0/22
45.94.244.0/22
45.95.48.0/22
45.116.168.0/22
45.138.232.0/22
45.142.92.0-45.142.99.255
45.149.148.0/22
58.97.128.0/21
58.97.232.0-58.97.255.255
62.3.29.0/24
62.68.91.0/24
62.106.92.0/24
62.112.12.0/23
77.81.104.0/21
77.95.116.0/22
78.24.206.0/24
78.138.1.0-78.138.2.255
78.138.16.0/24
78.138.25.0/24
78.138.30.0/24
78.138.40.0/24
78.138.47.0-78.138.48.255
78.138.50.0/24
80.240.103.0/24
80.240.111.0/24
82.97.196.0/23
82.97.199.0-82.97.200.255
83.229.76.0/22
83.229.104.0/22
84.39.224.0/21
85.89.192.0/19
86.106.120.0/24
89.19.40.0/22
89.32.129.0/24
89.32.184.0/24
89.32.203.0/24
89.34.7.0/24
89.34.78.0/23
89.37.28.0/24
89.37.216.0/23
89.38.106.0/23
89.38.132.0/23
89.39.150.0/24
89.40.108.0/23
89.41.62.0/24
89.42.48.0/23
89.43.51.0/24
89.43.68.0/23
89.44.115.0/24
89.44.213.0/24
89.44.245.0/24
89.46.152.0/21
89.47.63.0/24
89.249.51.0/24
89.249.56.0/22
91.132.184.0/22
91.197.252.0/22
91.238.148.0/23
91.245.235.0/24
92.43.84.0/22
93.113.124.0/23
93.114.0.0/20
93.115.12.0/23
93.180.192.0/20
93.180.224.0/20
94.176.112.0/20
94.176.163.0/24
94.176.216.0/22
94.177.52.0-94.177.57.255
95.215.36.0/22
103.204.124.0/22
103.204.212.0/22
104.167.22.0/23
119.13.192.0/19
121.91.80.0/21
138.124.144.0/22
150.129.92.0/22
176.117.84.0/22
176.118.195.0/24
176.119.8.0/21
185.38.102.0/24
185.77.250.0/23
185.90.243.0/24
185.125.192.0/22
185.131.220.0/23
185.221.221.0/24
185.223.56.0/24
185.223.58.0/23
185.225.104.0/22
185.229.250.0/24
185.240.252.0/24
185.240.254.0/23
185.243.108.0/22
188.95.152.0/21
188.119.116.0/22
188.210.94.0/23
188.211.250.0/23
188.212.120.0/24
188.214.89.0/24
188.214.93.0/24
188.241.59.0/24
188.241.146.0/24
193.169.8.0/23
193.192.52.0/23
193.203.36.0/24
193.203.39.0/24
193.239.172.0/23
193.239.246.0/23
194.24.234.0/23
194.88.134.0/23
194.135.26.0/23
194.135.132.0/23
194.145.118.0/24
194.145.220.0/23
194.187.50.0/23
194.246.106.0/23
195.2.196.0/23
195.13.48.0/23
195.34.80.0/23
195.93.140.0/23
195.128.188.0/23
195.133.208.0/23
195.135.192.0/23
195.189.132.0/23
195.189.250.0/23
195.210.44.0/23
195.254.140.0/23
202.81.208.0/20
202.181.20.0/22
203.109.52.0/22
203.109.60.0/22
203.166.144.0-203.166.157.255
209.20.160.0/19
213.159.10.0-213.159.13.255
Signature Algorithm: sha256WithRSAEncryption
55:43:c9:a6:96:d5:4a:f3:f3:7e:f8:ff:95:1c:1a:3b:bb:f6:
57:23:f9:90:08:79:47:04:6c:f6:47:03:2b:69:cf:46:90:9b:
e8:5c:5e:89:3f:9f:83:a0:f7:c0:d9:00:83:6b:d0:41:5e:41:
c8:bf:b4:72:91:db:ea:2a:41:a3:bb:e5:f4:dc:86:61:4d:51:
fe:d2:d6:c3:1c:3b:16:41:f8:13:4c:04:be:31:d8:da:18:47:
2f:a8:3c:f3:74:95:f5:3f:9c:85:35:3b:be:9a:f0:73:2b:a3:
30:05:3f:b9:3f:ab:2d:9d:40:ea:68:09:1d:27:cc:e5:f5:e1:
ae:b8:0d:b1:cd:80:9a:21:c6:57:d2:da:d7:85:33:a4:f7:15:
1a:1c:fe:39:41:4e:41:25:1b:a1:25:33:b0:5d:2f:63:93:41:
64:f8:0d:3f:af:f7:1c:ff:be:97:c6:e5:d1:d0:dd:83:79:38:
87:08:54:b9:80:bb:08:0c:f7:c3:d0:9e:cf:1f:45:ef:7e:f9:
b1:3d:bf:06:03:96:55:81:21:13:e3:33:f2:e8:43:a3:88:bc:
d1:bb:fd:96:0d:7a:75:1a:a6:44:66:1e:a5:1b:0e:db:2a:bf:
a7:03:ff:89:e3:82:a1:6e:b5:9c:30:1e:ee:e3:d5:a0:57:53:
71:1d:c5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:12 2025 by rpki-client