Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer (raw, json)
Hash identifier: UIjvgjP89XwyibI3GHNrIXmXazWchXjkmTTLU54c+Rg=
Subject key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214464E221B45C18FC47EB8E6D5656B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6908
AS: 20547
AS: 20629
AS: 24673
AS: 25588
AS: 28673
AS: 31220
AS: 42129
AS: 44305
AS: 58124
AS: 60228
AS: 60477
IP: 5.102.184.0/21
IP: 31.210.240.0/21
IP: 46.252.64.0/20
IP: 62.149.32.0/19
IP: 77.75.232.0/21
IP: 78.41.152.0/21
IP: 80.79.128.0/20
IP: 82.147.0.0/19
IP: 85.92.192.0/19
IP: 91.135.224.0/20
IP: 91.151.208.0/20
IP: 91.199.24.0/24
IP: 94.247.96.0/21
IP: 95.131.216.0/21
IP: 109.71.120.0/21
IP: 109.239.80.0/20
IP: 158.58.160.0/21
IP: 185.13.204.0/22
IP: 185.28.112.0/22
IP: 185.64.160.0/22
IP: 185.109.92.0/22
IP: 185.119.68.0/22
IP: 185.120.152.0/22
IP: 185.121.248.0/22
IP: 185.122.232.0/22
IP: 185.157.224.0/22
IP: 195.3.184.0/22
IP: 195.72.128.0/22
IP: 195.225.216.0/22
IP: 195.230.122.0/24
IP: 213.133.128.0/19
IP: 217.10.128.0/19
IP: 217.20.16.0/20
IP: 217.61.176.0/20
IP: 217.169.32.0/19
IP: 2001:67c:42c::/48
IP: 2001:1b90::/32
IP: 2001:41e8::/32
IP: 2a00:9de0::/32
IP: 2a01:450::/32
IP: 2a02:298::/32
IP: 2a02:2458::/32
IP: 2a03:14e0::/32
IP: 2a03:6a00::/29
IP: 2a03:a0c0::/32
IP: 2a06:4f80::/29
IP: 2a06:9e80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:64:e2:21:b4:5c:18:fc:47:eb:8e:6d:56:56:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:54:c6:5d:2e:06:1c:75:4b:1b:d7:af:31:
34:08:4e:ca:9a:61:eb:19:46:1f:66:16:5b:53:7d:
f3:6e:3f:78:c2:33:39:55:d6:a3:f1:07:c2:5c:2d:
da:f5:48:4f:8f:67:6b:25:f8:39:15:20:26:5e:17:
c3:41:e5:04:75:3a:7a:73:22:f8:43:60:0b:6e:d4:
07:3b:fb:f7:9a:fc:47:ba:54:36:c8:e3:f2:69:54:
8f:83:0b:9a:c3:73:85:dc:d6:85:ab:81:ac:cc:75:
f8:b7:4a:85:40:c6:67:98:1f:8c:56:0a:f6:04:13:
52:14:fe:49:e8:71:eb:82:6e:43:e4:5b:8f:2c:e8:
e6:57:9c:48:c1:46:91:e7:55:92:24:be:6e:59:1d:
09:8f:e6:fa:57:76:09:3f:c7:f3:12:46:99:cb:68:
e9:df:98:1c:0a:f0:d9:1c:ff:a1:13:e9:c7:90:0c:
3d:4e:34:1c:66:f5:7d:fb:ec:79:db:9f:d2:1e:8f:
69:05:6e:eb:eb:cb:66:db:33:d8:3e:65:44:7a:5b:
ed:85:e7:77:1c:c8:03:b8:47:d3:e3:a9:32:41:70:
73:2b:22:d2:81:08:34:68:cb:2e:b5:4c:7a:49:73:
ee:6d:d4:44:a5:a5:3c:a0:42:73:e9:b9:5d:52:91:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.184.0/21
31.210.240.0/21
46.252.64.0/20
62.149.32.0/19
77.75.232.0/21
78.41.152.0/21
80.79.128.0/20
82.147.0.0/19
85.92.192.0/19
91.135.224.0/20
91.151.208.0/20
91.199.24.0/24
94.247.96.0/21
95.131.216.0/21
109.71.120.0/21
109.239.80.0/20
158.58.160.0/21
185.13.204.0/22
185.28.112.0/22
185.64.160.0/22
185.109.92.0/22
185.119.68.0/22
185.120.152.0/22
185.121.248.0/22
185.122.232.0/22
185.157.224.0/22
195.3.184.0/22
195.72.128.0/22
195.225.216.0/22
195.230.122.0/24
213.133.128.0/19
217.10.128.0/19
217.20.16.0/20
217.61.176.0/20
217.169.32.0/19
IPv6:
2001:67c:42c::/48
2001:1b90::/32
2001:41e8::/32
2a00:9de0::/32
2a01:450::/32
2a02:298::/32
2a02:2458::/32
2a03:14e0::/32
2a03:6a00::/29
2a03:a0c0::/32
2a06:4f80::/29
2a06:9e80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6908
20547
20629
24673
25588
28673
31220
42129
44305
58124
60228
60477
Signature Algorithm: sha256WithRSAEncryption
8e:f8:10:6c:d9:35:35:df:95:2d:b0:4f:c6:eb:53:7f:2d:f0:
5c:cf:47:84:80:1e:38:91:d3:1f:b4:37:6b:00:7d:22:b4:27:
82:21:50:a1:62:44:a1:03:d9:bd:68:64:e7:ca:f1:d7:b2:92:
3b:ac:8b:4f:32:9b:91:5f:a4:07:16:bb:42:00:fc:50:84:60:
d0:72:86:88:20:27:b7:dc:75:d9:4e:6b:fa:b7:b1:9f:f3:6a:
da:50:c5:73:9e:50:8f:76:fb:b8:a6:3f:44:8b:3d:05:85:9e:
4e:a4:5d:ed:e8:37:26:da:f7:35:be:65:bb:0f:57:53:9b:52:
9a:05:ea:d8:f0:2c:e1:a7:38:ee:06:b2:0c:ac:cc:15:9b:14:
7b:10:40:a6:e5:f2:ed:47:5b:52:39:9f:30:d9:dc:4e:7c:c0:
8f:96:c4:a1:a3:ea:22:40:c8:e1:f3:1a:6c:60:7a:64:99:9a:
58:ad:2e:58:ab:ac:92:25:c1:26:d9:2c:f1:a8:d1:0f:0e:30:
40:52:16:b2:4b:a4:22:9a:a9:40:82:5f:2e:27:37:56:43:4d:
47:b7:d8:62:19:8a:99:c7:d7:cc:36:bd:a0:51:1d:0d:d7:37:
68:7b:0b:1e:50:46:d4:de:a1:3c:ae:9b:d4:d4:16:3b:57:c2:
78:eb:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:55 2025 by rpki-client