Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
File: F7UEL8INm6sWduCa9_8bpb-trnU.cer (raw, json)
Hash identifier: HC9+SqFl0qXu44Dy9Zd+TKlmbiJOJIu+DUOWNy/vlzc=
Subject key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A0974270C23ED3C479972EEBF8F78
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213823
IP: 5.180.179.0/24
IP: 31.217.248.0/24
IP: 46.254.108.0/24
IP: 62.68.66.0/24
IP: 84.54.35.0/24
IP: 87.236.148.0/24
IP: 91.198.200.0/24
IP: 91.205.223.0/24
IP: 91.242.242.0/24
IP: 94.247.138.0/24
IP: 146.19.7.0/24
IP: 146.19.155.0/24
IP: 178.212.142.0/24
IP: 178.212.224.0/24
IP: 185.65.70.0/24
IP: 185.137.164.0/24
IP: 185.184.219.0/24
IP: 185.249.53.0/24
IP: 193.3.175.0/24
IP: 193.35.228.0/24
IP: 193.163.200.0/24
IP: 194.9.181.0/24
IP: 194.62.162.0/24
IP: 212.23.198.0/24
IP: 217.119.143.0/24
IP: 2a03:cc40::/29
IP: 2a0c:e500::/29
IP: 2a10:1d80::/29
IP: 2a11:1300::/29
IP: 2a11:1ac0::/29
IP: 2a11:3140::/29
IP: 2a11:3c80::/29
IP: 2a11:5340::/29
IP: 2a11:53c0::/29
IP: 2a11:5440::/29
IP: 2a11:5500::/29
IP: 2a11:7a00::/29
IP: 2a11:7dc0::/29
IP: 2a11:8380::/29
IP: 2a11:ac00::/29
IP: 2a11:b040::/29
IP: 2a11:b300::/29
IP: 2a11:c000::/29
IP: 2a11:ec80::/29
IP: 2a12:600::/29
IP: 2a12:2580::/29
IP: 2a12:2900::/29
IP: 2a12:5000::/29
IP: 2a12:b880::/29
IP: 2a12:d300::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:09:74:27:0c:23:ed:3c:47:99:72:ee:bf:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:b6:a7:95:3b:8d:2b:70:6d:30:bc:b3:c7:
93:c2:ef:be:ad:8b:da:63:eb:f8:fe:d7:bd:fe:a0:
ca:97:e0:61:bd:cd:04:a9:f8:6b:0a:85:e6:ff:2d:
4b:4b:9f:5d:ce:47:37:38:91:88:b3:d0:7a:1e:17:
70:a8:eb:54:41:34:7c:73:40:6c:b7:f6:1d:64:fd:
27:06:1e:7a:18:eb:1f:e6:67:fb:73:51:28:ea:23:
e2:6d:c5:2f:4f:c1:fb:74:d9:2f:ea:80:46:dc:c0:
33:42:f4:54:e9:4a:ed:71:a2:43:5b:4c:95:46:30:
4d:0f:64:ae:a8:a8:02:04:aa:b1:74:9e:9a:f9:86:
ad:39:08:e3:8c:4c:53:e7:e0:b2:69:1b:b0:1e:bf:
4b:35:1e:a1:f1:fc:db:13:2a:16:c2:a1:1d:94:cd:
5a:e5:0a:ee:de:9a:3f:d7:7f:40:5c:3c:59:3a:86:
9d:5b:c0:dd:0f:c8:27:a8:61:6d:53:8a:f6:67:bd:
c8:7a:7c:e3:82:f4:d9:a2:b1:a5:7b:cf:f3:09:9e:
72:bc:00:f5:cf:20:eb:71:9f:cc:77:a5:0c:2a:42:
7d:06:27:63:c0:fc:a3:f8:5c:32:b4:12:a6:52:51:
87:7a:25:b1:b4:34:8d:73:ef:cd:c3:eb:39:f3:2e:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.179.0/24
31.217.248.0/24
46.254.108.0/24
62.68.66.0/24
84.54.35.0/24
87.236.148.0/24
91.198.200.0/24
91.205.223.0/24
91.242.242.0/24
94.247.138.0/24
146.19.7.0/24
146.19.155.0/24
178.212.142.0/24
178.212.224.0/24
185.65.70.0/24
185.137.164.0/24
185.184.219.0/24
185.249.53.0/24
193.3.175.0/24
193.35.228.0/24
193.163.200.0/24
194.9.181.0/24
194.62.162.0/24
212.23.198.0/24
217.119.143.0/24
IPv6:
2a03:cc40::/29
2a0c:e500::/29
2a10:1d80::/29
2a11:1300::/29
2a11:1ac0::/29
2a11:3140::/29
2a11:3c80::/29
2a11:5340::/29
2a11:53c0::/29
2a11:5440::/29
2a11:5500::/29
2a11:7a00::/29
2a11:7dc0::/29
2a11:8380::/29
2a11:ac00::/29
2a11:b040::/29
2a11:b300::/29
2a11:c000::/29
2a11:ec80::/29
2a12:600::/29
2a12:2580::/29
2a12:2900::/29
2a12:5000::/29
2a12:b880::/29
2a12:d300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213823
Signature Algorithm: sha256WithRSAEncryption
8b:ed:3b:4e:d6:1c:5d:cc:30:19:4d:0d:f0:68:63:65:a2:01:
ee:e4:30:49:97:a5:b8:0d:99:88:01:82:d7:4e:ea:31:3a:9e:
c8:e7:f8:fd:3c:fb:21:54:e6:68:96:2f:a2:29:4d:b0:ad:95:
98:df:8b:8c:3d:74:66:bf:71:55:b7:38:27:1b:b1:9e:57:d4:
95:e2:40:0d:9d:12:8e:e1:3a:4e:99:e6:d2:44:35:ad:72:0c:
52:e0:55:f1:be:77:86:9f:7b:7f:eb:cb:2a:7d:f0:8c:d7:c8:
57:01:1c:5b:e1:fb:a0:fd:cc:44:ec:a9:f5:72:af:a6:b0:cf:
07:52:7c:72:7f:1d:14:98:f0:fe:df:94:e7:96:37:e6:aa:55:
5f:e5:75:f0:f3:f6:71:cf:09:9f:a3:b2:70:da:58:b0:80:27:
67:f3:c6:59:a5:cf:04:38:15:cd:b3:f7:04:ea:a9:0c:02:bd:
ea:3c:ed:e6:c5:3b:15:83:23:e2:a8:c3:f5:91:64:83:ec:1a:
dc:2b:1d:be:89:8f:cc:b8:17:bc:de:89:9f:98:f5:b2:53:3a:
90:4c:fd:7c:16:58:b8:93:72:8e:2b:d1:42:6c:7a:40:85:3e:
1b:3e:8b:69:a4:dd:5c:d9:45:12:49:1b:1f:78:ca:b5:f7:5a:
3e:2a:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:49:12 2025 by rpki-client