Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
File: ThXfaIw66uP2he1Es5bCGYOVhh0.cer (raw, json)
Hash identifier: 5B6OJwTeXfyVPVrkv1/g6AqWyYHa5RnztIUkr6NaTcs=
Subject key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195F07733E3F3DB4CF0FD9DC59BC8BA66BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 01 Apr 2025 08:28:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16340
AS: 20781
AS: 20961
AS: 21021
AS: 30824
AS: 39349
AS: 39439
AS: 44643
AS: 50312
IP: 31.6.128.0/17
IP: 31.42.16.0/20
IP: 37.131.128.0/19
IP: 37.190.128.0/17
IP: 46.186.0.0/17
IP: 46.231.56.0/21
IP: 62.61.32.0/19
IP: 62.141.192.0/18
IP: 80.244.128.0/19
IP: 80.245.176.0/20
IP: 81.190.0.0/16
IP: 82.115.64.0/19
IP: 83.68.64.0/19
IP: 84.38.80.0/20
IP: 85.117.0.0/19
IP: 87.116.192.0/18
IP: 89.17.224.0/19
IP: 89.228.0.0/14
IP: 92.42.112.0/21
IP: 93.94.184.0/21
IP: 94.78.128.0/18
IP: 94.251.128.0/17
IP: 95.129.224.0/21
IP: 95.174.32.0/19
IP: 176.107.112.0/21
IP: 176.221.96.0/19
IP: 185.31.184.0/22
IP: 193.43.240.0/22
IP: 193.106.76.0/22
IP: 193.200.118.0/23
IP: 194.116.132.0/23
IP: 194.149.240.0/24
IP: 195.93.134.0/23
IP: 195.93.222.0/23
IP: 213.136.224.0/19
IP: 217.70.48.0/20
IP: 217.75.48.0/20
IP: 217.144.192.0/19
IP: 217.172.224.0/19
IP: 2a00:1c00::/32
IP: 2a00:bde0::/32
IP: 2a02:2a40::/32
IP: 2a03:e800::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:77:33:e3:f3:db:4c:f0:fd:9d:c5:9b:c8:ba:66:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 1 08:28:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:21:ee:88:04:aa:a2:1f:a2:35:c9:85:88:
52:78:3a:80:5a:a7:80:e6:65:c0:62:1f:61:26:63:
2d:66:e5:19:aa:33:37:7d:e8:3d:3f:15:47:28:cf:
9c:9f:b9:79:3e:c6:40:f6:12:af:3b:15:47:03:06:
65:a6:1e:27:0b:e8:4a:05:97:e5:ce:4c:91:1f:08:
44:cc:ed:32:5b:a4:81:3b:03:b2:74:82:2c:6b:28:
2a:a5:f1:26:bd:48:ff:76:d1:ab:05:08:63:dc:c6:
41:b6:9d:69:c8:e2:ee:93:0d:d9:78:53:cc:f7:3d:
89:01:72:7b:c5:57:1b:c7:b8:f8:7a:bf:2b:1e:b9:
5b:35:de:41:62:f0:8f:cd:f5:e1:20:a4:b1:30:32:
69:6a:6e:a2:17:83:71:b1:1f:b6:6c:13:a3:03:97:
e4:72:12:3b:6e:65:82:f2:a6:59:81:95:a8:cb:e8:
5f:35:ac:09:77:20:cf:b9:a3:79:3f:6b:eb:f1:44:
39:da:35:d3:33:95:c5:d6:41:4b:18:04:a3:cc:0d:
a8:87:f4:0e:06:cc:59:57:8f:82:e3:a7:32:b1:bb:
e6:3c:d1:9f:32:40:74:22:41:66:c1:97:e5:ca:98:
a4:67:b4:d1:28:f3:3f:12:ab:7f:1f:19:f9:85:87:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0/17
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
IPv6:
2a00:1c00::/32
2a00:bde0::/32
2a02:2a40::/32
2a03:e800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16340
20781
20961
21021
30824
39349
39439
44643
50312
Signature Algorithm: sha256WithRSAEncryption
8c:a7:39:0d:e4:c4:bd:8c:85:e9:98:05:12:7e:8c:42:54:e4:
0b:6f:e0:cf:a1:b9:7b:dd:76:11:43:75:3d:6f:56:c4:52:0a:
5b:26:c6:27:d3:74:74:e2:b4:0e:a2:0d:e9:94:3b:aa:43:09:
14:be:cd:f4:8d:27:e3:09:ed:18:32:3b:e0:4b:3b:ea:e7:69:
9e:60:ac:a2:8e:7f:d4:39:c8:99:65:9b:a6:29:f7:28:04:0f:
61:aa:aa:ab:ec:30:9f:a4:1e:49:c4:27:64:51:6a:a8:7e:d3:
34:25:28:ff:92:68:b9:d2:62:cd:11:22:75:4d:53:40:ce:43:
fd:65:74:b3:86:79:a3:7e:26:be:be:7b:57:b5:5c:45:ab:80:
9e:d5:4d:c1:80:59:92:5d:4f:94:89:9e:60:7c:d9:10:90:de:
8d:8c:04:72:99:f8:8c:74:7b:fc:26:00:17:2e:45:9d:82:e0:
bd:01:f3:de:e3:2f:a8:52:33:07:0e:3d:d0:91:78:09:d0:a6:
5b:9d:94:47:f2:70:a4:d4:2d:b5:08:e2:57:be:f2:46:b1:e7:
f0:1a:62:5e:d7:89:2c:3d:30:bc:a0:31:9a:b0:77:ed:bb:5c:
12:ed:ae:0a:cc:c2:72:01:b4:d8:b7:c4:1d:13:46:66:0e:8f:
9a:e6:4c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:02 2025 by rpki-client on console.sobornost.net