Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
File: SGbUAn3jwn6JfXKtsshth6t-WsI.cer (raw, json)
Hash identifier: cesSh/kfkmGfzQgtx+uFi6VLqQ2nxy0/xMRRNLUqmxE=
Subject key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214448E42974B913625BB374E2C7AF4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208808
IP: 31.13.210.0/24
IP: 45.140.196.0/22
IP: 78.138.18.0/23
IP: 78.138.26.0 -- 78.138.29.255
IP: 78.138.42.0/23
IP: 87.120.80.0/23
IP: 87.120.203.0/24
IP: 89.36.232.0/22
IP: 89.46.132.0/22
IP: 92.243.68.0/24
IP: 92.243.71.0/24
IP: 92.243.86.0/23
IP: 92.243.90.0/23
IP: 92.243.94.0/23
IP: 93.114.92.0/22
IP: 93.115.48.0/22
IP: 94.156.26.0/23
IP: 103.43.40.0/22
IP: 103.104.108.0/22
IP: 103.208.72.0/22
IP: 160.202.156.0/22
IP: 185.201.76.0/22
IP: 212.73.152.0/23
IP: 213.255.210.0/23
IP: 213.255.216.0/23
IP: 213.255.224.0/23
IP: 213.255.244.0/23
IP: 2a0a:bd40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:48:e4:29:74:b9:13:62:5b:b3:74:e2:c7:af:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:62:43:eb:b0:65:ee:af:7c:4f:72:52:62:
21:b0:3b:cb:a9:4a:89:a2:c1:e2:ec:f1:f4:cf:37:
dd:51:b5:31:f1:27:c6:e5:68:9c:ac:c5:a3:70:ed:
9b:6f:74:91:d3:8a:75:01:fd:b7:fd:72:4e:ce:9f:
1b:f8:e0:51:95:da:10:97:b6:80:1f:65:38:e1:55:
42:7e:87:65:8f:bd:b6:5c:1a:85:6e:6a:8a:6d:22:
cf:49:72:00:14:68:de:8c:71:d2:44:f1:6b:71:fb:
75:cf:d4:25:bf:f2:45:1d:33:15:ef:b2:f9:0d:74:
73:fc:48:f9:05:57:85:8c:bc:31:1d:6a:ef:7a:71:
04:a7:1a:b1:7c:93:dd:a8:41:1d:36:b2:1d:e7:a4:
fe:ab:28:da:e9:35:32:44:93:5c:88:1c:ab:c5:b2:
1b:cb:df:21:b0:5d:b8:5e:1a:38:80:80:f3:3f:e1:
9c:fd:b9:e3:1c:95:d1:16:e6:7e:05:71:6d:52:82:
94:71:ee:01:18:7e:61:25:7b:e2:9b:0c:6d:d0:e7:
61:d2:49:0a:94:6a:f6:f2:5f:10:2b:5a:3d:6a:03:
bf:86:fa:80:0b:21:c9:b9:21:37:ed:24:b5:93:0d:
d7:30:9a:01:5f:dd:7e:21:83:83:4d:70:d3:eb:5d:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.210.0/24
45.140.196.0/22
78.138.18.0/23
78.138.26.0-78.138.29.255
78.138.42.0/23
87.120.80.0/23
87.120.203.0/24
89.36.232.0/22
89.46.132.0/22
92.243.68.0/24
92.243.71.0/24
92.243.86.0/23
92.243.90.0/23
92.243.94.0/23
93.114.92.0/22
93.115.48.0/22
94.156.26.0/23
103.43.40.0/22
103.104.108.0/22
103.208.72.0/22
160.202.156.0/22
185.201.76.0/22
212.73.152.0/23
213.255.210.0/23
213.255.216.0/23
213.255.224.0/23
213.255.244.0/23
IPv6:
2a0a:bd40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208808
Signature Algorithm: sha256WithRSAEncryption
8e:6f:09:ae:cc:64:9d:e2:fc:4f:fd:be:16:23:b9:dd:4b:c8:
22:9d:ce:c7:06:27:93:e3:11:02:c8:c3:2c:e4:f8:a1:f9:71:
c2:c1:66:3c:9f:4e:79:e8:09:98:32:ae:f9:b4:4f:fd:9f:65:
17:e4:83:b7:d8:b9:1a:d7:a5:31:10:37:5b:3e:f0:18:fc:71:
18:be:4d:69:72:d6:a8:eb:e4:90:b8:18:88:3e:bc:02:ba:0b:
fc:86:9b:ce:23:c9:02:44:fc:c9:2a:53:d1:0b:cc:1e:a3:00:
1e:72:02:b9:58:21:09:e0:cc:be:a2:cf:0b:d6:9c:8f:45:c9:
9e:b2:7c:3c:b9:bc:58:54:ce:83:fb:df:28:6a:48:7b:09:e0:
63:6e:0d:40:e3:3a:dc:42:45:8b:f6:8f:61:c3:ab:20:81:74:
8c:93:a0:fb:18:31:3f:6b:e2:96:45:f2:cb:ca:86:f4:87:f4:
9d:78:28:5d:cc:37:48:99:d1:09:f0:f5:5a:f2:f5:aa:5c:82:
3c:fc:89:ef:da:d8:c4:20:e5:b5:14:86:50:56:a0:4b:8e:45:
b9:ee:d9:ff:bb:d9:9b:ae:81:f1:e5:8f:9e:44:20:b0:37:03:
e9:61:d0:dc:18:f6:58:70:22:10:a0:32:a1:eb:8c:33:fd:e2:
5d:04:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:24 2025 by rpki-client