Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
File: QoNpZxbbzDYLmmLvfYS00o-Vi90.cer (raw, json)
Hash identifier: GZs6nIsPBtgo1SMMfuoGU3DTpCrNPWm/YEAO1PsqbzY=
Subject key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521B3799D9840634EB2938E07D7E953
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29256
AS: 29386
AS: 201550
IP: 5.0.0.0/16
IP: 5.155.0.0/16
IP: 31.9.0.0/16
IP: 46.40.128.0/18
IP: 62.16.80.0/20
IP: 80.70.120.0/21
IP: 82.100.128.0/19
IP: 82.137.192.0/18
IP: 91.144.0.0/18
IP: 94.47.0.0/16
IP: 178.253.64.0/18
IP: 185.41.84.0/22
IP: 185.92.88.0/22
IP: 185.99.100.0/22
IP: 185.109.212.0/22
IP: 188.133.0.0/17
IP: 193.124.10.0 -- 193.124.13.255
IP: 193.124.26.0 -- 193.124.29.255
IP: 193.124.38.0/23
IP: 193.124.52.0/23
IP: 193.124.62.0/23
IP: 193.124.68.0/23
IP: 193.124.72.0/22
IP: 193.124.82.0/23
IP: 193.124.86.0/23
IP: 193.124.96.0/20
IP: 193.124.122.0/23
IP: 193.124.126.0/23
IP: 193.124.152.0 -- 193.124.157.255
IP: 193.124.160.0/20
IP: 193.124.192.0/21
IP: 193.124.208.0/20
IP: 193.124.228.0 -- 193.124.239.255
IP: 193.124.252.0/23
IP: 194.58.0.0 -- 194.58.23.255
IP: 194.58.48.0/21
IP: 194.58.128.0 -- 194.58.151.255
IP: 194.58.156.0/22
IP: 194.58.208.0/21
IP: 194.58.224.0/20
IP: 194.58.248.0/21
IP: 194.135.106.0/23
IP: 194.135.116.0/23
IP: 194.135.248.0/21
IP: 2a03:8b60::/32
IP: 2a04:8180::/31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b3:79:9d:98:40:63:4e:b2:93:8e:07:d7:e9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:5d:94:3f:31:ad:e2:7f:b2:c5:e5:8f:ab:
4c:f2:6c:20:6d:9f:11:79:e8:c3:78:ba:5d:f3:82:
6c:24:aa:96:62:6e:4f:45:61:20:bb:60:6e:d6:7d:
4e:89:43:0d:6a:28:9f:9b:6e:28:06:8d:ed:77:ee:
81:c2:ea:21:87:19:d7:e0:50:28:d9:62:a6:7e:74:
2e:5c:a6:b6:dc:6d:73:3d:2c:37:c3:94:47:10:86:
b0:d5:c6:7f:b2:1a:96:e9:94:4a:d6:2e:ec:e5:ed:
c9:21:e1:dc:28:98:49:37:f1:f9:d5:e8:fb:67:f4:
bd:15:56:07:d1:26:63:b0:44:f4:67:81:86:b4:a7:
69:f8:ba:ed:44:bf:da:7e:a6:a4:d5:de:c8:44:5a:
51:de:52:76:03:38:95:76:f5:e3:5a:c5:33:9b:a1:
90:06:a9:37:68:32:61:21:73:5c:85:3d:5d:5f:3f:
3b:87:bf:a4:c5:65:da:1f:ab:c5:e2:ba:29:9f:b7:
6b:04:40:7c:8f:b0:ed:b2:10:f5:3e:db:28:41:de:
63:d3:0a:02:f0:11:ac:0d:e8:a2:0f:8a:47:d1:ef:
4c:85:95:55:b9:c8:1e:96:fe:26:12:9f:d6:b2:f5:
1d:2f:5b:74:3b:1b:49:76:7a:b8:b5:0c:d0:ba:31:
64:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.0.0/16
5.155.0.0/16
31.9.0.0/16
46.40.128.0/18
62.16.80.0/20
80.70.120.0/21
82.100.128.0/19
82.137.192.0/18
91.144.0.0/18
94.47.0.0/16
178.253.64.0/18
185.41.84.0/22
185.92.88.0/22
185.99.100.0/22
185.109.212.0/22
188.133.0.0/17
193.124.10.0-193.124.13.255
193.124.26.0-193.124.29.255
193.124.38.0/23
193.124.52.0/23
193.124.62.0/23
193.124.68.0/23
193.124.72.0/22
193.124.82.0/23
193.124.86.0/23
193.124.96.0/20
193.124.122.0/23
193.124.126.0/23
193.124.152.0-193.124.157.255
193.124.160.0/20
193.124.192.0/21
193.124.208.0/20
193.124.228.0-193.124.239.255
193.124.252.0/23
194.58.0.0-194.58.23.255
194.58.48.0/21
194.58.128.0-194.58.151.255
194.58.156.0/22
194.58.208.0/21
194.58.224.0/20
194.58.248.0/21
194.135.106.0/23
194.135.116.0/23
194.135.248.0/21
IPv6:
2a03:8b60::/32
2a04:8180::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29256
29386
201550
Signature Algorithm: sha256WithRSAEncryption
6b:f8:fa:4e:1a:3d:ac:1a:57:ab:1f:f5:fe:13:72:22:11:6a:
e6:a1:4a:18:3a:03:e1:50:e2:e1:67:2e:f4:a2:06:a0:55:71:
68:e8:66:89:da:82:0e:21:69:0d:67:95:82:e0:f8:b6:15:62:
c1:3e:d0:10:b0:61:98:a8:ec:a3:da:3c:53:ad:45:5c:7e:60:
2d:ea:a6:ea:38:29:74:fa:6e:34:fd:8d:86:48:b6:ea:83:81:
15:14:56:b5:d9:0d:ac:c0:e2:96:94:93:31:56:e3:cf:11:a9:
3b:ac:87:a5:17:3a:1c:f8:92:39:5e:4b:eb:90:86:60:a5:1a:
cf:7c:8c:ba:03:71:cb:97:07:57:74:a6:a4:6a:de:08:c7:2b:
a3:1a:e3:77:4c:cd:74:71:68:bb:09:bb:39:8f:a6:f2:62:b5:
85:fe:8e:59:3c:44:27:53:3b:80:69:ef:9a:f9:1c:56:5a:79:
09:86:c7:0f:0a:b5:88:0f:c2:59:58:74:8b:5b:dd:3c:ca:45:
51:22:9f:22:b2:11:a6:7f:c0:56:c7:a6:31:d6:bf:bb:ca:8a:
db:ea:0c:bb:24:03:3a:9c:1e:12:56:f8:6f:f8:29:3f:11:91:
91:04:c8:ea:71:6b:fb:b3:d2:c0:9f:c9:31:62:81:25:d1:90:
9a:e5:fc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:33 2025 by rpki-client