Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
File: hPLOccb_zodWDVZe5czaMeAbnBU.cer (raw, json)
Hash identifier: 8FruC6YnvUfwMTJgddOkNjAoWzoDQBDAJPAHG7UBCi8=
Subject key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068311EC8A23283255B62946B3B4443
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2819
AS: 5588
AS: 12767
AS: 13036
AS: 15485
AS: 21142
AS: 48574
AS: 50491
IP: 37.48.0.0/18
IP: 46.13.0.0/16
IP: 62.77.64.0/18
IP: 62.84.128.0/19
IP: 62.141.0.0/19
IP: 62.168.0.0/18
IP: 62.209.192.0/18
IP: 78.80.0.0/16
IP: 80.95.240.0/20
IP: 89.24.0.0/16
IP: 89.233.128.0/18
IP: 91.139.0.0/17
IP: 93.153.0.0/17
IP: 109.75.144.0/20
IP: 109.183.0.0/16
IP: 109.238.208.0/20
IP: 185.14.188.0/22
IP: 185.248.176.0/22
IP: 193.33.14.0/23
IP: 193.85.0.0 -- 193.86.255.255
IP: 193.179.0.0/16
IP: 194.108.0.0/16
IP: 194.149.96.0/19
IP: 194.212.0.0/16
IP: 194.213.32.0/19
IP: 194.213.192.0/19
IP: 195.22.32.0/19
IP: 195.39.0.0/17
IP: 195.39.208.0/23
IP: 195.47.0.0/17
IP: 195.70.128.0/19
IP: 195.144.96.0/19
IP: 212.47.0.0/19
IP: 212.65.192.0/18
IP: 212.67.64.0/19
IP: 213.29.0.0/16
IP: 213.210.128.0/18
IP: 217.30.64.0/20
IP: 2001:af0::/32
IP: 2001:b80::/29
IP: 2001:1ae8::/29
IP: 2a00:9fc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:31:1e:c8:a2:32:83:25:5b:62:94:6b:3b:44:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:2b:8b:22:4c:40:f8:97:e3:1c:3b:c7:37:
7a:5f:3c:3b:c1:e1:2d:89:a7:6e:49:bd:eb:ce:67:
1f:64:7d:65:0e:39:ec:23:7c:4b:a9:62:d0:cd:c2:
54:fb:6e:5e:97:4a:5b:4e:c2:3f:a4:15:b1:2d:1a:
ed:d6:db:1b:57:0c:49:07:63:b7:9f:28:56:14:a3:
9c:cf:60:88:5b:c7:a7:01:c8:da:fc:1e:3f:54:9e:
be:00:67:54:11:c8:ed:f9:35:1a:7f:de:31:a5:fb:
af:3f:19:5f:c8:66:1b:ad:1e:fa:6e:c8:db:1a:28:
60:9c:74:b5:28:77:d9:33:de:e5:24:c7:a6:1b:2e:
10:27:46:87:05:4d:c6:2c:98:4f:c2:5d:70:f9:3f:
a7:ee:82:f1:46:6c:95:ef:66:c7:33:cf:d6:06:a1:
79:5a:f4:e6:12:04:77:30:5b:62:d9:41:61:be:c9:
f2:33:cb:6f:5d:86:b2:a6:ee:d6:ad:53:9c:69:98:
26:87:14:cd:0d:06:68:0c:99:de:1f:0b:91:29:03:
f5:5f:c4:5b:42:5a:30:21:53:72:19:3f:dc:64:2c:
25:d7:f9:92:d3:b3:12:38:be:a5:e0:ae:5d:0f:32:
5f:96:ac:70:7a:39:5b:eb:5c:35:9f:a3:40:f0:6a:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.0.0/18
46.13.0.0/16
62.77.64.0/18
62.84.128.0/19
62.141.0.0/19
62.168.0.0/18
62.209.192.0/18
78.80.0.0/16
80.95.240.0/20
89.24.0.0/16
89.233.128.0/18
91.139.0.0/17
93.153.0.0/17
109.75.144.0/20
109.183.0.0/16
109.238.208.0/20
185.14.188.0/22
185.248.176.0/22
193.33.14.0/23
193.85.0.0-193.86.255.255
193.179.0.0/16
194.108.0.0/16
194.149.96.0/19
194.212.0.0/16
194.213.32.0/19
194.213.192.0/19
195.22.32.0/19
195.39.0.0/17
195.39.208.0/23
195.47.0.0/17
195.70.128.0/19
195.144.96.0/19
212.47.0.0/19
212.65.192.0/18
212.67.64.0/19
213.29.0.0/16
213.210.128.0/18
217.30.64.0/20
IPv6:
2001:af0::/32
2001:b80::/29
2001:1ae8::/29
2a00:9fc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2819
5588
12767
13036
15485
21142
48574
50491
Signature Algorithm: sha256WithRSAEncryption
6c:84:21:27:e7:87:29:b8:47:10:7e:e8:b1:f9:d3:70:11:c6:
92:06:65:c4:dd:a4:f5:68:32:3b:3e:04:e4:18:75:10:c9:36:
7a:bf:ce:a1:4e:4b:b7:04:d2:85:c6:c4:71:3e:f0:78:fd:f5:
bf:b7:49:26:1e:ae:50:73:75:88:48:49:19:16:6d:5a:30:1c:
84:cc:0b:f4:e0:88:88:f9:5f:9b:37:eb:42:02:68:ec:2d:12:
05:f5:66:1c:93:0a:9d:ec:8e:39:35:a2:f3:0c:04:dd:e9:0d:
9f:87:96:40:74:1f:97:45:19:1d:0b:c0:1f:2f:16:f7:69:da:
b1:90:00:06:90:c7:83:46:54:4a:13:0c:0a:1a:7d:b3:a9:46:
87:a4:4f:16:be:5d:88:82:d1:8d:29:a2:2f:6a:ac:63:2a:a0:
74:6c:1d:4e:3f:90:1a:10:99:9e:7e:af:7f:3e:be:bb:4c:38:
a7:5a:d2:3c:91:93:09:3e:1a:5a:3d:b3:cb:73:4a:17:0d:15:
22:4d:83:77:0c:f2:7c:4b:57:20:86:3c:90:42:e9:54:8b:ac:
dd:92:76:45:62:8b:03:a6:0b:6d:0d:74:f1:2d:25:06:80:c5:
ac:45:a3:19:95:6c:1a:c5:bd:9d:6e:13:9d:66:07:d1:c2:64:
a0:7b:81:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:40 2025 by rpki-client