Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer (raw, json)
Hash identifier: xguu+T62+tXyGBzPcBkHEPCBjSzKFLmrPKn7SCsfPvM=
Subject key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5A7B032F56DE50274B570ADD354FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35805
AS: 42082
IP: 5.152.0.0/17
IP: 31.146.0.0/16
IP: 37.110.160.0/19
IP: 37.232.0.0/17
IP: 77.92.224.0/19
IP: 79.99.248.0/21
IP: 87.253.32.0/19
IP: 91.151.128.0/20
IP: 92.54.192.0/18
IP: 94.43.0.0/16
IP: 146.255.224.0/19
IP: 149.3.0.0/17
IP: 176.221.128.0/17
IP: 178.134.0.0/16
IP: 185.146.176.0/22
IP: 188.123.128.0/19
IP: 188.169.0.0/16
IP: 213.217.16.0/22
IP: 2a01:9c80::/29
IP: 2a03:3580::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a7:b0:32:f5:6d:e5:02:74:b5:70:ad:d3:54:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:30:e5:8a:79:7a:8d:c5:ba:5d:d3:2d:bf:
2b:21:ce:75:17:2d:cb:0b:cf:4c:47:32:40:b5:f0:
c9:44:64:52:3a:f7:6f:eb:82:ee:79:f9:be:4b:eb:
cf:28:ed:93:2e:93:69:1c:9d:b8:36:3a:3e:d1:dc:
0f:08:44:b7:74:7a:5a:87:f6:5c:7d:74:72:9e:6f:
8d:5e:5a:10:0d:bf:b2:08:56:af:91:93:84:b1:d1:
09:d2:6c:e7:9b:de:63:8c:db:ff:92:1d:8b:a2:e0:
5f:39:38:33:ad:db:75:38:2a:a2:5d:4d:37:b4:ec:
fc:14:f6:6e:42:a9:d7:45:1f:74:ca:f1:cc:03:15:
e6:43:af:bf:ab:6a:cd:27:47:8e:1c:ed:29:92:61:
3c:72:66:31:82:25:e8:f5:a9:eb:9c:56:3e:48:ae:
fd:7a:b3:37:a8:34:fe:55:c4:71:fc:0f:44:e9:2a:
6a:91:95:9f:a9:06:d9:95:25:71:52:4d:eb:b6:0e:
c8:0e:d0:0a:45:58:53:41:01:e4:9a:97:8e:1a:07:
af:05:7b:54:de:04:52:fe:3b:6c:39:d3:be:32:eb:
c8:cf:b9:2c:e5:58:f1:dd:9a:e3:f8:83:c2:ed:0c:
da:c7:ee:b2:d8:0c:27:12:2a:3b:b3:60:90:87:41:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.152.0.0/17
31.146.0.0/16
37.110.160.0/19
37.232.0.0/17
77.92.224.0/19
79.99.248.0/21
87.253.32.0/19
91.151.128.0/20
92.54.192.0/18
94.43.0.0/16
146.255.224.0/19
149.3.0.0/17
176.221.128.0/17
178.134.0.0/16
185.146.176.0/22
188.123.128.0/19
188.169.0.0/16
213.217.16.0/22
IPv6:
2a01:9c80::/29
2a03:3580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35805
42082
Signature Algorithm: sha256WithRSAEncryption
65:d0:ff:49:d3:b4:28:a8:b8:f3:5d:80:59:4a:b6:05:6c:d2:
06:94:cc:61:46:6f:14:f5:a5:24:a5:88:6e:9c:a2:96:f1:78:
34:f7:f6:a2:a0:5a:2a:96:0c:33:45:0c:b9:6f:82:27:9c:7e:
ab:4d:8e:4c:4e:9a:89:7c:39:0a:5b:08:08:74:f3:9c:68:6c:
9c:f4:3a:7e:c8:fb:99:cb:b7:7d:29:6f:ae:87:f9:35:6c:e5:
51:a0:30:61:a8:78:52:b2:dd:90:d8:6f:0d:5c:34:3c:24:ee:
66:4c:b5:eb:2e:35:95:c2:95:c9:83:d2:04:10:39:64:69:8f:
d8:ed:cd:e5:ef:8f:42:ba:c3:c5:20:58:7a:a2:3b:8e:63:c3:
36:ef:a5:b1:fa:76:c7:4d:16:94:26:d4:d8:b2:a4:47:8a:f5:
16:96:0c:0e:de:21:7c:aa:f4:8c:31:74:5c:db:12:ee:7a:10:
56:42:0c:e3:ac:17:64:77:82:b5:cb:74:c3:8f:ce:a1:08:dd:
0f:d5:42:83:dd:95:f5:23:d0:cb:ee:7b:5e:b9:8e:91:bc:7d:
2d:8a:ea:40:91:e4:22:42:a2:b7:3f:a1:42:cd:81:28:04:1d:
a5:09:73:70:ee:1c:13:1a:58:23:ee:97:aa:88:46:af:8e:22:
17:6b:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:00 2025 by rpki-client on console.sobornost.net