Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
File: i0eqCfLGEPb0S051wc2dzTiE5V0.cer (raw, json)
Hash identifier: /7qo2Eo3A1r/QF0MDbkkmDdY2gYwhDWKG/d3bfd2ALw=
Subject key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D95018FD716648776D9BD9AAA182CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39454
AS: 48551
AS: 49676
IP: 5.253.225.0/24
IP: 31.193.186.0/24
IP: 45.94.252.0/22
IP: 45.150.150.0/24
IP: 45.159.196.0/22
IP: 91.217.177.0/24
IP: 91.234.52.0/24
IP: 103.216.60.0/22
IP: 146.19.104.0/24
IP: 157.119.188.0/22
IP: 185.63.114.0/24
IP: 185.74.221.0/24
IP: 185.86.180.0/22
IP: 185.128.40.0/24
IP: 185.149.192.0/24
IP: 185.236.36.0/22
IP: 185.238.143.0/24
IP: 194.147.212.0/24
IP: 194.147.222.0/24
IP: 195.114.4.0/23
IP: 195.114.8.0/23
IP: 2a05:ba40::/29
IP: 2a0d:9500::/29
IP: 2a0f:5040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:50:18:fd:71:66:48:77:6d:9b:d9:aa:a1:82:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:38:7c:61:de:f8:a2:d3:e5:a6:72:0b:ea:
a6:9f:a7:8c:5f:37:d9:a3:d8:0f:83:41:4f:29:25:
54:40:fc:56:2f:96:a3:cb:26:c1:f2:44:32:87:34:
ca:5c:5e:99:da:5b:b2:18:1e:b0:dc:52:9b:c4:d4:
3a:09:8f:1f:f9:72:ad:3e:bf:ae:d9:9d:db:5b:9e:
23:72:52:a7:5b:a9:2b:ea:7c:04:40:8e:b5:ed:9d:
ad:28:e4:4f:a0:8b:4e:57:74:7c:c3:2e:fa:28:76:
5e:63:54:a0:c0:d4:ae:d6:73:26:90:b1:80:6e:fc:
d5:7a:e6:cf:44:fc:86:9b:9b:73:e7:41:a6:50:80:
3b:34:59:17:06:96:32:49:ae:42:24:a8:52:ed:4c:
76:4b:59:3e:2d:76:d8:5c:d6:0c:ab:ed:30:dd:3d:
4c:1e:05:53:be:33:81:78:f0:31:bc:29:16:99:c3:
4e:2a:65:59:f9:54:f2:a7:a3:c8:ef:e5:b4:de:1b:
bd:4f:b3:9b:38:5a:a0:dd:65:2f:84:23:7f:2e:09:
d2:75:0b:42:e7:b0:10:35:70:e6:82:67:81:fd:29:
cb:b5:dc:b5:4b:22:1b:b7:75:7f:71:70:ad:a5:cc:
17:cb:27:a9:4a:8e:12:96:8d:08:17:70:01:b6:73:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.225.0/24
31.193.186.0/24
45.94.252.0/22
45.150.150.0/24
45.159.196.0/22
91.217.177.0/24
91.234.52.0/24
103.216.60.0/22
146.19.104.0/24
157.119.188.0/22
185.63.114.0/24
185.74.221.0/24
185.86.180.0/22
185.128.40.0/24
185.149.192.0/24
185.236.36.0/22
185.238.143.0/24
194.147.212.0/24
194.147.222.0/24
195.114.4.0/23
195.114.8.0/23
IPv6:
2a05:ba40::/29
2a0d:9500::/29
2a0f:5040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39454
48551
49676
Signature Algorithm: sha256WithRSAEncryption
04:46:74:7b:d2:4e:57:83:92:5a:58:a2:2c:ab:46:7e:30:55:
05:70:91:ac:cf:df:51:02:18:70:f3:5f:a4:47:25:be:fe:d2:
40:51:e6:1f:48:98:02:f8:68:19:e1:f4:a3:21:4f:92:82:1d:
1b:fd:11:3f:31:6f:7f:8c:15:e4:44:d0:0c:11:c4:d6:22:54:
df:0b:a9:d2:48:2a:10:79:5f:9e:c8:cb:ed:8a:97:fa:97:5a:
0c:4c:58:25:0b:3d:cd:8f:09:c7:80:54:b7:5d:03:ba:cd:87:
69:7c:42:c9:3b:a8:8a:0d:c6:e5:f1:94:38:5b:ed:cd:0b:89:
92:68:8b:0e:4d:f2:78:2f:c9:92:29:99:57:a4:bc:d3:52:ad:
d5:7c:24:aa:75:a3:f2:a0:e5:21:af:12:8a:af:95:34:e0:f2:
26:7c:59:ec:b8:54:76:f0:64:2e:46:09:0e:9a:ef:3c:80:ce:
e6:85:e4:53:c4:63:e5:a1:1c:d5:69:63:36:de:c6:48:09:a4:
4a:21:84:35:f1:43:25:c7:64:1c:4e:6f:88:d4:94:6f:07:a5:
7b:d2:8f:b2:4c:55:f0:2c:0f:a7:c5:13:55:4f:37:12:a4:16:
18:b0:0b:b1:ef:43:81:10:f3:27:82:38:05:26:21:1a:27:74:
51:b8:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:02 2025 by rpki-client