Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
File: THhEq-9xHCMshPg8gHpCCvOARyg.cer (raw, json)
Hash identifier: PbE+FZfXZkIZ9oSAXCnEhpuBR2atb7ngbgZls0WqMO8=
Subject key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266D448FE165702E98E8C4B64ED64D78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:51:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16312
AS: 50650
AS: 50678
AS: 51747
AS: 51913
AS: 62395
AS: 202910
AS: 202922
AS: 203191 -- 203194
AS: 203213
AS: 203240 -- 203241
AS: 203295
AS: 203297 -- 203298
AS: 203300
AS: 203552
AS: 203610
AS: 203625
AS: 203800
AS: 203814
AS: 203839
IP: 5.133.192.0/19
IP: 5.198.248.0/21
IP: 31.204.64.0/21
IP: 45.142.64.0/22
IP: 45.146.48.0/22
IP: 45.150.72.0/22
IP: 80.248.224.0/20
IP: 95.215.168.0/22
IP: 130.255.160.0/21
IP: 141.138.208.0/21
IP: 151.248.0.0/21
IP: 151.252.24.0/21
IP: 159.253.216.0/21
IP: 176.74.192.0/21
IP: 185.6.8.0/22
IP: 185.12.148.0/22
IP: 185.12.248.0/22
IP: 185.13.40.0/22
IP: 185.13.96.0/22
IP: 185.116.240.0/22
IP: 185.122.112.0/22
IP: 185.123.32.0/22
IP: 185.123.92.0/22
IP: 185.129.24.0/22
IP: 185.129.64.0/22
IP: 185.130.244.0/22
IP: 185.139.152.0/22
IP: 185.139.160.0/21
IP: 185.139.172.0/22
IP: 185.141.72.0/22
IP: 185.141.88.0/22
IP: 185.142.80.0/22
IP: 185.142.228.0/22
IP: 185.143.4.0 -- 185.143.15.255
IP: 185.150.112.0/22
IP: 185.151.8.0/22
IP: 185.151.16.0/22
IP: 185.157.88.0/22
IP: 185.159.184.0/22
IP: 185.159.192.0/22
IP: 185.236.40.0/22
IP: 193.19.80.0/23
IP: 193.247.74.0/23
IP: 193.247.126.0/23
IP: 195.88.110.0/23
IP: 195.95.184.0/24
IP: 195.189.112.0/22
IP: 2a02:cf00::/29
IP: 2a02:d040::/29
IP: 2a02:d440::/29
IP: 2a02:eec0::/29
IP: 2a04:b300::/29
IP: 2a04:d800::/29
IP: 2a06:81c0::/29
IP: 2a06:a580::/29
IP: 2a06:ad00::/29
IP: 2a06:d2c0::/29
IP: 2a06:d3c0::/29
IP: 2a06:dcc0::/29
IP: 2a07:1540::/29
IP: 2a07:1600::/29
IP: 2a07:1640::/29
IP: 2a07:1680::/29
IP: 2a07:2240::/29
IP: 2a07:2300::/29
IP: 2a07:2b40::/29
IP: 2a07:3180::/29
IP: 2a07:3240::/29
IP: 2a07:3280::/29
IP: 2a07:32c0::/29
IP: 2a07:70c0::/29
IP: 2a07:74c0::/29
IP: 2a07:7500::/29
IP: 2a07:a480::/29
IP: 2a07:b600::/29
IP: 2a07:b680::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6d:44:8f:e1:65:70:2e:98:e8:c4:b6:4e:d6:4d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:51:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c7844abef711c232c84f83c807a420af3804728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:5d:ee:b0:6b:43:1c:c9:2e:27:75:93:4f:
bc:18:37:99:cb:e5:de:4c:a7:ed:c5:ad:47:46:f0:
4f:eb:48:1d:46:40:b6:3b:83:e0:26:cb:08:50:02:
f5:b6:e0:bf:8d:20:96:9c:77:5b:db:09:39:06:b5:
72:3d:3c:19:82:b4:7a:df:05:ad:7c:47:01:73:c1:
83:99:8e:ab:67:99:f1:f9:0d:89:b9:15:98:67:3c:
8c:c1:94:df:c2:34:59:71:11:5b:3d:c5:dd:f3:f8:
b6:a8:de:97:1d:9c:08:69:d4:93:c2:e8:fa:08:31:
cb:4a:da:2c:d9:d4:f7:5a:03:8e:6d:7a:11:25:bd:
ab:02:e8:c0:5b:71:c2:7e:86:e9:9d:2b:a9:8a:43:
37:24:f0:ee:2b:67:02:90:15:11:2d:30:8c:6c:61:
3e:85:95:8d:a9:41:81:ff:66:6f:7d:cd:f3:01:ba:
43:40:8d:90:61:e5:6f:9f:3a:e8:b2:b4:92:47:a4:
3c:3c:ed:ef:03:9c:69:fe:86:77:51:33:6a:44:a0:
37:70:39:15:b2:ed:09:41:c3:6d:ef:33:3c:ce:57:
f1:0f:4a:bf:be:d8:cb:78:bf:0a:be:52:de:59:7b:
26:da:cb:0a:7d:be:9c:73:08:21:77:51:4a:33:68:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.192.0/19
5.198.248.0/21
31.204.64.0/21
45.142.64.0/22
45.146.48.0/22
45.150.72.0/22
80.248.224.0/20
95.215.168.0/22
130.255.160.0/21
141.138.208.0/21
151.248.0.0/21
151.252.24.0/21
159.253.216.0/21
176.74.192.0/21
185.6.8.0/22
185.12.148.0/22
185.12.248.0/22
185.13.40.0/22
185.13.96.0/22
185.116.240.0/22
185.122.112.0/22
185.123.32.0/22
185.123.92.0/22
185.129.24.0/22
185.129.64.0/22
185.130.244.0/22
185.139.152.0/22
185.139.160.0/21
185.139.172.0/22
185.141.72.0/22
185.141.88.0/22
185.142.80.0/22
185.142.228.0/22
185.143.4.0-185.143.15.255
185.150.112.0/22
185.151.8.0/22
185.151.16.0/22
185.157.88.0/22
185.159.184.0/22
185.159.192.0/22
185.236.40.0/22
193.19.80.0/23
193.247.74.0/23
193.247.126.0/23
195.88.110.0/23
195.95.184.0/24
195.189.112.0/22
IPv6:
2a02:cf00::/29
2a02:d040::/29
2a02:d440::/29
2a02:eec0::/29
2a04:b300::/29
2a04:d800::/29
2a06:81c0::/29
2a06:a580::/29
2a06:ad00::/29
2a06:d2c0::/29
2a06:d3c0::/29
2a06:dcc0::/29
2a07:1540::/29
2a07:1600::/29
2a07:1640::/29
2a07:1680::/29
2a07:2240::/29
2a07:2300::/29
2a07:2b40::/29
2a07:3180::/29
2a07:3240::/29
2a07:3280::/29
2a07:32c0::/29
2a07:70c0::/29
2a07:74c0::/29
2a07:7500::/29
2a07:a480::/29
2a07:b600::/29
2a07:b680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16312
50650
50678
51747
51913
62395
202910
202922
203191-203194
203213
203240-203241
203295
203297-203298
203300
203552
203610
203625
203800
203814
203839
Signature Algorithm: sha256WithRSAEncryption
a7:fb:45:3c:20:6f:a1:fc:b3:f3:23:31:ce:8e:cd:3f:ac:93:
1d:2f:e8:49:dc:27:1a:89:ea:0d:a7:6e:ff:ae:58:75:73:8a:
f4:58:2a:b4:6d:bf:0f:cb:67:e9:22:b3:93:b5:2f:3f:40:2b:
d5:db:52:99:c0:72:a5:62:92:b6:38:7a:9b:8e:8e:68:9a:ed:
fa:8e:21:89:da:40:a4:0f:b8:f2:76:c2:d2:88:a9:42:e7:7a:
7a:a0:12:0d:67:17:d6:85:73:a4:5a:d7:9b:a7:87:d0:9e:76:
77:14:7f:85:a4:93:9e:98:ea:4f:25:46:07:3a:84:c7:8e:af:
e3:44:37:8a:5f:98:43:44:68:06:b3:a0:07:98:a6:7b:a5:1c:
e9:c9:0c:0e:5a:b4:11:34:88:7d:0e:c1:03:2a:33:6e:69:4d:
df:07:39:0d:97:dc:75:97:01:3e:e4:85:c6:35:fa:3f:24:2f:
90:5b:c5:f9:fe:9d:b7:f2:c6:03:1b:6a:d6:30:1e:5c:f8:c9:
51:05:84:b7:94:22:8a:55:57:97:e1:95:59:21:07:9c:f0:6c:
4b:a4:f4:c1:26:48:c3:02:5e:e4:d8:a5:99:f6:a9:27:83:d8:
a8:91:bf:7c:b3:e7:dd:3d:05:f7:41:78:88:99:fb:da:8f:1f:
1e:58:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:40:31 2025 by rpki-client