Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
File: eouukjMFpxxSam_PV8KdbBakJp4.cer (raw, json)
Hash identifier: IYh7QoUn+rA/6gOCCU9W8dYqgCmFF0psiO+YBXFnOVc=
Subject key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FA55DED299519E8F6286F5057A0A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34907
AS: 51359
AS: 214328
IP: 193.3.162.0/24
IP: 194.31.232.0/24
IP: 195.245.200.0/24
IP: 2001:67c:178c::/48
IP: 2a00:7320::/29
IP: 2a04:4f80::/29
IP: 2a07:f6c0::/29
IP: 2a09:b080::/29
IP: 2a0c:1f40::/29
IP: 2a0d:6640::/29
IP: 2a0d:6c40::/29
IP: 2a0d:6cc0::/29
IP: 2a0d:71c0::/29
IP: 2a0d:75c0::/29
IP: 2a0d:78c0::/29
IP: 2a0d:7bc0::/29
IP: 2a0d:8900::/29
IP: 2a0d:8e40::/29
IP: 2a0d:91c0::/29
IP: 2a0d:99c0::/29
IP: 2a0d:9dc0::/29
IP: 2a0e:5000::/29
IP: 2a0e:6500::/29
IP: 2a10:9fc0::/29
IP: 2a10:a040::/29
IP: 2a10:d940::/29
IP: 2a10:d9c0::/29
IP: 2a10:da40::/29
IP: 2a10:dbc0::/29
IP: 2a10:dc40::/29
IP: 2a10:dcc0::/29
IP: 2a10:dd40::/29
IP: 2a10:ddc0::/29
IP: 2a10:de40::/29
IP: 2a10:dec0::/29
IP: 2a10:f900::/29
IP: 2a11:7cc0::/29
IP: 2a12:4d80::/29
IP: 2a12:b280::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a5:5d:ed:29:95:19:e8:f6:28:6f:50:57:a0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:10:ea:89:d6:6d:bd:88:58:1b:84:41:75:
8a:50:3d:07:11:d3:9f:16:e4:7c:d9:48:da:f4:a3:
db:0a:6d:9c:d4:15:40:cf:91:12:25:1a:85:ef:5c:
20:b7:4d:14:cd:cc:81:9d:c0:17:c1:88:ad:87:55:
58:fc:2f:3d:a0:5f:86:ce:aa:d1:6f:9d:a4:4c:ce:
9d:c5:a7:9d:d5:97:fd:3e:96:d8:d8:b5:ec:f9:19:
f3:b4:33:ac:c2:04:a4:dd:d6:fc:32:57:17:08:1d:
29:9d:35:c4:70:1c:b7:d9:16:62:0d:82:ed:c1:16:
55:ae:b4:6f:c8:8f:49:da:46:c9:03:80:e6:4d:c7:
b9:44:2c:8f:f5:ec:be:d2:ac:4c:d6:6a:04:66:f9:
4a:37:05:2f:26:40:ce:82:25:88:b9:9d:46:94:b4:
3c:2b:64:0d:6e:ba:ee:00:f6:e6:4f:af:23:4b:47:
41:c6:74:79:e6:c1:5d:78:68:9a:4b:f2:e8:81:7a:
e0:c4:6b:10:48:09:ad:54:38:4c:cb:4f:b0:1f:4a:
e6:a3:ea:ba:fc:7b:3a:23:1d:0d:bf:68:00:ac:6b:
92:f5:a2:c0:7a:90:7f:47:32:7e:7b:96:8c:e0:fb:
39:cb:60:38:d8:b5:7c:50:9e:f2:ed:6f:c5:0c:a3:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.162.0/24
194.31.232.0/24
195.245.200.0/24
IPv6:
2001:67c:178c::/48
2a00:7320::/29
2a04:4f80::/29
2a07:f6c0::/29
2a09:b080::/29
2a0c:1f40::/29
2a0d:6640::/29
2a0d:6c40::/29
2a0d:6cc0::/29
2a0d:71c0::/29
2a0d:75c0::/29
2a0d:78c0::/29
2a0d:7bc0::/29
2a0d:8900::/29
2a0d:8e40::/29
2a0d:91c0::/29
2a0d:99c0::/29
2a0d:9dc0::/29
2a0e:5000::/29
2a0e:6500::/29
2a10:9fc0::/29
2a10:a040::/29
2a10:d940::/29
2a10:d9c0::/29
2a10:da40::/29
2a10:dbc0::/29
2a10:dc40::/29
2a10:dcc0::/29
2a10:dd40::/29
2a10:ddc0::/29
2a10:de40::/29
2a10:dec0::/29
2a10:f900::/29
2a11:7cc0::/29
2a12:4d80::/29
2a12:b280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34907
51359
214328
Signature Algorithm: sha256WithRSAEncryption
9e:3a:5b:02:4c:96:eb:3c:5c:90:42:8e:80:4e:35:38:af:15:
9e:8e:d6:a8:a5:34:27:fe:ca:de:fe:a7:4c:5b:e2:d0:57:24:
96:62:ae:9a:5a:d7:ab:2f:52:79:6c:8c:d4:e2:0b:fc:38:3c:
98:d8:cc:ce:73:61:63:03:a4:be:90:66:b4:4a:02:bc:86:e2:
af:c9:d6:3f:4b:8b:75:58:ae:f8:41:55:2b:0a:8f:0c:81:5c:
8e:85:93:0d:79:9f:1c:dc:8c:80:30:08:fd:9e:f6:f4:3b:ec:
be:f1:ca:cb:bf:df:52:ba:9b:e1:26:4e:81:3e:1d:1a:a2:1f:
0b:3e:99:ac:a0:7c:32:66:e2:2c:49:2e:92:38:48:ba:ac:86:
b6:4c:7b:51:e1:f1:ef:47:f4:91:6d:15:8c:2e:cc:27:d2:b5:
a3:29:83:4f:00:a0:a4:d0:bc:f4:da:4e:17:36:b3:9b:a1:35:
77:2e:d8:78:a9:d6:a3:b4:88:67:79:47:9e:90:99:7a:a0:0f:
5e:42:8f:b6:58:43:87:78:35:a6:c8:2a:58:02:a4:a6:bf:c4:
92:46:6e:46:c3:2b:ad:2b:65:fa:c9:ba:7f:9b:8f:b3:f2:41:
ae:0e:66:a7:89:8c:67:f9:79:ea:d4:66:db:2a:78:e9:19:5e:
aa:7f:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:44 2025 by rpki-client on console.sobornost.net