Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
File: p0xnBuP769_xRqihTsKjKEqSumI.cer (raw, json)
Hash identifier: qxupv35F3cmajptPdK26S9NG4lyJoTP51diQ1aDzvA4=
Subject key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420681ED6BF522C113074E9589FD833B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 1836
IP: 80.86.192.0/20
IP: 80.253.80.0/21
IP: 80.254.160.0/19
IP: 81.6.0.0/19
IP: 81.6.48.0/20
IP: 81.221.0.0/16
IP: 82.195.224.0/19
IP: 146.228.0.0/16
IP: 193.72.0.0 -- 193.72.78.255
IP: 193.72.81.0 -- 193.72.143.255
IP: 193.72.148.0 -- 193.72.165.255
IP: 193.72.167.0 -- 193.72.185.255
IP: 193.72.187.0 -- 193.72.215.255
IP: 193.72.217.0 -- 193.73.105.255
IP: 193.73.108.0 -- 193.73.112.255
IP: 193.73.115.0 -- 193.73.121.255
IP: 193.73.123.0 -- 193.73.124.255
IP: 193.73.126.0 -- 193.73.207.255
IP: 193.73.209.0 -- 193.73.210.255
IP: 193.73.212.0 -- 193.73.237.255
IP: 193.73.239.0 -- 193.73.241.255
IP: 193.73.244.0 -- 193.73.249.255
IP: 193.73.252.0/22
IP: 193.193.128.0/19
IP: 194.191.0.0/16
IP: 195.48.0.0 -- 195.49.127.255
IP: 195.130.160.0/19
IP: 212.59.128.0/18
IP: 2001:1b50::/29
IP: 2a01:2a8::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:1e:d6:bf:52:2c:11:30:74:e9:58:9f:d8:33:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:ba:6a:bc:bf:98:d4:52:7b:56:d2:83:e2:
91:64:78:40:18:19:aa:d4:57:16:4e:6d:5e:f4:3f:
24:21:9a:d1:98:87:30:91:8b:4b:ba:0a:6d:4a:96:
3a:a9:ac:11:4e:0a:d9:c8:4a:d5:31:f9:bd:b2:02:
1a:f1:f2:d3:d9:5e:7f:07:9c:e9:ed:75:0e:c8:be:
bd:3b:ca:f5:4e:f3:97:a8:20:ea:fb:bc:6b:1c:42:
d8:51:a6:23:c3:b6:64:d0:22:27:4e:02:c2:85:88:
fc:c7:de:8e:f7:c0:30:0a:d0:00:6a:96:37:97:ab:
63:70:f8:03:00:00:3f:bd:bc:25:a5:3b:e6:20:6a:
ea:37:3d:68:4b:0b:53:e3:3d:5b:bf:ce:19:8b:e2:
36:7f:59:b6:ed:e9:17:5a:49:b4:02:d6:9c:7e:df:
16:f2:2d:c6:b6:11:a0:25:21:87:d7:59:b0:60:bc:
2f:33:53:30:fa:a6:e7:00:67:2c:cc:05:33:8b:3c:
33:50:59:14:20:b2:9c:4c:45:ed:7b:c7:3c:1a:7e:
a2:96:53:45:b2:98:3d:df:6d:41:70:f2:0e:14:3f:
c1:0b:ed:bb:34:cf:31:04:e6:36:07:8a:03:81:65:
08:1b:96:95:79:fd:33:17:13:21:31:bb:92:76:8c:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/20
80.253.80.0/21
80.254.160.0/19
81.6.0.0/19
81.6.48.0/20
81.221.0.0/16
82.195.224.0/19
146.228.0.0/16
193.72.0.0-193.72.78.255
193.72.81.0-193.72.143.255
193.72.148.0-193.72.165.255
193.72.167.0-193.72.185.255
193.72.187.0-193.72.215.255
193.72.217.0-193.73.105.255
193.73.108.0-193.73.112.255
193.73.115.0-193.73.121.255
193.73.123.0-193.73.124.255
193.73.126.0-193.73.207.255
193.73.209.0-193.73.210.255
193.73.212.0-193.73.237.255
193.73.239.0-193.73.241.255
193.73.244.0-193.73.249.255
193.73.252.0/22
193.193.128.0/19
194.191.0.0/16
195.48.0.0-195.49.127.255
195.130.160.0/19
212.59.128.0/18
IPv6:
2001:1b50::/29
2a01:2a8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1836
Signature Algorithm: sha256WithRSAEncryption
54:a9:5f:2a:44:1d:b6:5e:21:05:bf:f9:db:f5:18:7a:78:98:
67:54:5b:b7:13:72:e2:99:2d:e2:5f:7d:81:be:5a:11:34:28:
eb:78:3c:ee:30:5b:4c:60:3d:1a:55:73:83:f2:1a:95:91:52:
96:ae:34:03:a2:c5:76:94:bf:bb:0a:35:92:6f:29:0b:d8:f8:
24:8e:b3:85:9f:89:ad:f7:4f:66:90:78:b0:4e:f0:49:a4:b7:
ef:b4:34:e1:da:4a:36:ae:24:43:98:9b:5d:28:99:92:9c:e1:
c3:ec:30:a1:bf:27:0f:6b:95:1b:50:ed:96:e7:98:1b:a9:d7:
bb:ec:08:27:a8:87:e1:16:a5:8a:ed:d1:5a:87:3a:c4:b2:29:
90:8a:62:57:4e:54:4f:19:e6:cd:03:c9:99:aa:0b:4b:b0:cd:
0d:85:98:86:44:7a:43:1e:f7:97:54:da:61:01:52:ea:fb:bd:
b8:b5:1a:77:f9:bc:30:6f:29:24:29:d6:95:16:85:7f:a5:29:
dc:2f:41:6f:a6:d6:cc:c0:aa:18:ad:0e:af:56:e4:ea:b3:34:
d5:d8:90:95:57:38:79:96:9e:20:35:27:8c:9a:41:5f:8f:5d:
5e:1d:48:d6:d9:b9:1e:1b:0f:cb:21:0a:eb:bb:a6:3d:98:42:
70:61:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:02 2025 by rpki-client