Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
File: SeFL929C2k8qwAOmxp1hwjIOLNg.cer (raw, json)
Hash identifier: wbZ4U222zrb4eP+f8nQ1YMLZd7b/jmc2LeCqiEU0Ydc=
Subject key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444EADCAEC348763814455A2D5A45A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213817
IP: 5.172.180.0/24
IP: 37.72.135.0/24
IP: 46.226.125.0/24
IP: 62.68.92.0/24
IP: 62.233.36.0/24
IP: 91.246.59.0/24
IP: 94.154.116.0/24
IP: 130.255.168.0/24
IP: 146.19.67.0/24
IP: 146.19.189.0/24
IP: 176.118.34.0/24
IP: 178.211.150.0/24
IP: 185.21.131.0/24
IP: 185.25.104.0/24
IP: 185.83.231.0/24
IP: 185.149.148.0/24
IP: 185.235.227.0/24
IP: 185.248.135.0/24
IP: 193.3.169.0/24
IP: 193.108.131.0/24
IP: 194.62.104.0/24
IP: 194.104.135.0/24
IP: 195.225.98.0/24
IP: 212.23.195.0/24
IP: 212.52.29.0/24
IP: 217.114.39.0/24
IP: 2a04:ca80::/29
IP: 2a07:dd80::/29
IP: 2a09:8140::/29
IP: 2a0a:ca40::/29
IP: 2a0c:b140::/29
IP: 2a0c:b500::/29
IP: 2a11:2dc0::/29
IP: 2a11:4840::/29
IP: 2a11:4d00::/29
IP: 2a11:5a00::/29
IP: 2a11:5c00::/29
IP: 2a11:5e40::/29
IP: 2a11:76c0::/29
IP: 2a11:9f80::/29
IP: 2a11:a4c0::/29
IP: 2a11:a900::/29
IP: 2a11:bf40::/29
IP: 2a11:cf80::/29
IP: 2a11:fa00::/29
IP: 2a12:200::/29
IP: 2a12:3000::/29
IP: 2a12:4480::/29
IP: 2a12:7500::/29
IP: 2a12:a680::/29
IP: 2a12:e600::/29
IP: 2a12:f700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ea:dc:ae:c3:48:76:38:14:45:5a:2d:5a:45:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:ad:f7:1f:9d:50:7a:98:d3:25:ae:5e:17:
fc:67:b1:c3:85:e0:2e:04:99:74:17:07:c6:11:28:
3c:1c:7a:48:c4:f6:88:10:0a:24:6e:7c:d8:e4:d8:
cd:9e:95:13:97:86:56:7c:8f:c8:65:89:8c:da:77:
ea:76:4f:52:7d:0f:a1:b0:b7:c8:1e:bb:5b:0c:72:
66:fc:51:cc:d2:14:77:1b:74:98:d6:26:71:1f:25:
4d:03:12:83:22:cd:81:cb:4e:ca:b0:89:e5:79:6e:
b9:d0:8f:d2:53:9c:35:10:a6:5d:df:f6:35:31:9b:
ab:91:df:cb:7d:6d:73:e7:5b:3a:e4:10:87:ea:9d:
00:7e:08:d6:64:a4:7c:ca:64:ad:16:df:71:de:7f:
64:da:7c:c2:84:b0:c2:9f:6a:45:32:f3:88:0c:d9:
9e:ab:00:d1:b7:06:d5:99:6f:1d:f1:7b:8f:63:90:
72:87:98:17:2e:9a:7a:aa:e3:24:6d:be:dd:1d:b7:
18:95:e1:a3:3d:e1:f7:22:f9:d6:07:e6:94:87:fc:
d9:47:7d:90:a9:14:5d:9c:b3:6f:1c:fe:d4:13:c5:
22:65:61:9f:c3:b0:1b:3b:41:37:a7:28:1b:65:6b:
84:1e:e3:39:4f:9f:ec:ce:c5:a8:03:42:12:28:f6:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.180.0/24
37.72.135.0/24
46.226.125.0/24
62.68.92.0/24
62.233.36.0/24
91.246.59.0/24
94.154.116.0/24
130.255.168.0/24
146.19.67.0/24
146.19.189.0/24
176.118.34.0/24
178.211.150.0/24
185.21.131.0/24
185.25.104.0/24
185.83.231.0/24
185.149.148.0/24
185.235.227.0/24
185.248.135.0/24
193.3.169.0/24
193.108.131.0/24
194.62.104.0/24
194.104.135.0/24
195.225.98.0/24
212.23.195.0/24
212.52.29.0/24
217.114.39.0/24
IPv6:
2a04:ca80::/29
2a07:dd80::/29
2a09:8140::/29
2a0a:ca40::/29
2a0c:b140::/29
2a0c:b500::/29
2a11:2dc0::/29
2a11:4840::/29
2a11:4d00::/29
2a11:5a00::/29
2a11:5c00::/29
2a11:5e40::/29
2a11:76c0::/29
2a11:9f80::/29
2a11:a4c0::/29
2a11:a900::/29
2a11:bf40::/29
2a11:cf80::/29
2a11:fa00::/29
2a12:200::/29
2a12:3000::/29
2a12:4480::/29
2a12:7500::/29
2a12:a680::/29
2a12:e600::/29
2a12:f700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213817
Signature Algorithm: sha256WithRSAEncryption
36:66:65:99:cd:54:fa:2a:e2:1b:23:41:b0:00:ea:31:12:aa:
a3:65:cd:4a:62:90:69:6f:b5:43:0e:f6:1a:24:19:41:3e:19:
ae:ce:87:de:b1:c8:f0:f8:d0:53:a4:fd:81:8b:8f:c2:4b:2a:
f1:0c:5e:87:7d:61:b8:d2:4c:41:10:db:3a:4a:01:89:da:06:
a5:84:01:b5:07:65:61:b9:c4:0f:b8:87:43:39:bb:30:0e:c5:
aa:aa:90:a4:14:0f:dc:8c:f5:30:69:0a:6f:d7:cc:c3:40:fc:
c7:3c:d3:38:0f:19:de:3e:0f:21:27:52:ed:8a:62:fb:8e:64:
8f:60:fd:6a:ca:9d:14:90:ff:b4:32:65:29:26:e6:e6:86:a0:
3c:e9:30:f4:31:bc:f7:b6:f2:e0:da:31:b1:06:89:f0:23:6a:
fa:01:e4:eb:a2:7d:69:65:47:bb:6f:67:b7:04:db:26:9b:7c:
9e:42:e4:01:d8:ed:b8:6e:53:24:a2:0b:34:12:68:b4:a1:ee:
84:d7:ee:d1:00:01:2e:a8:43:ec:d4:ef:56:64:7c:a4:55:df:
e3:2d:d4:1c:22:ce:1e:ae:bd:ba:c8:67:26:da:cc:22:73:db:
40:50:1e:64:92:c3:3e:a6:88:c0:4f:af:50:fe:e5:94:f4:64:
38:68:80:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:00 2025 by rpki-client on console.sobornost.net