Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer (raw, json)
Hash identifier: EFxhkqCEu8520WXeW20+0fGN17Cv27dNskswaIaZELU=
Subject key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195666994E78BC6EEABD0AA067A53F4C5B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Mar 2025 13:05:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6675
AS: 8220
AS: 8372
AS: 9126
AS: 12640
AS: 12755
AS: 12761
AS: 12878
AS: 15404
IP: 46.248.128.0/19
IP: 57.133.0.0/16
IP: 58.0.0.0/16
IP: 58.1.128.0/17
IP: 62.23.0.0/16
IP: 62.72.96.0/19
IP: 62.84.192.0/19
IP: 62.96.0.0/16
IP: 62.97.64.0/18
IP: 62.152.96.0/19
IP: 62.192.0.0/19
IP: 78.143.0.0/18
IP: 78.156.64.0/19
IP: 80.80.0.0/19
IP: 80.169.0.0/16
IP: 80.251.160.0/19
IP: 82.112.192.0/19
IP: 84.14.0.0/16
IP: 84.16.160.0/19
IP: 85.88.128.0/19
IP: 87.241.0.0/18
IP: 116.83.0.0/17
IP: 118.67.224.0/19
IP: 134.128.128.0/18
IP: 136.225.0.0/16
IP: 157.120.224.0/21
IP: 157.120.236.0 -- 157.120.255.255
IP: 178.159.176.0/20
IP: 193.82.32.0/19
IP: 193.93.80.0/22
IP: 193.114.160.0/19
IP: 193.118.160.0/19
IP: 193.118.224.0/19
IP: 193.188.132.0/23
IP: 194.223.128.0 -- 194.223.139.255
IP: 195.68.0.0/17
IP: 195.110.64.0/19
IP: 212.0.96.0/19
IP: 212.23.224.0/19
IP: 212.31.224.0/19
IP: 212.35.96.0/19
IP: 212.36.128.0/18
IP: 212.74.64.0/19
IP: 212.78.160.0/19
IP: 212.121.128.0/19
IP: 212.123.192.0/18
IP: 212.161.0.0/17
IP: 212.203.64.0/18
IP: 213.27.128.0/17
IP: 213.41.0.0/17
IP: 213.61.0.0/16
IP: 213.86.0.0/16
IP: 213.164.0.0/19
IP: 213.173.160.0/19
IP: 213.185.160.0/19
IP: 213.208.192.0/18
IP: 213.215.128.0/17
IP: 213.229.128.0/18
IP: 213.246.192.0/18
IP: 217.110.0.0/15
IP: 217.173.96.0/20
IP: 2001:920::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:69:94:e7:8b:c6:ee:ab:d0:aa:06:7a:53:f4:c5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 13:05:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:94:da:e4:b5:6d:20:41:31:fd:17:3e:4a:
20:af:31:a0:4d:03:6b:7a:aa:ec:ac:76:56:3e:72:
f9:33:60:b6:0a:aa:d0:ef:48:9d:f0:5c:a9:ea:70:
84:c5:f3:b9:cc:e2:df:c2:5e:63:3e:1b:df:16:b8:
b8:ab:e2:cc:e8:f5:36:9a:2f:68:e0:90:09:26:e9:
30:10:1a:5c:3e:8b:6f:2b:1b:36:0c:f5:95:2d:16:
27:c1:bf:a4:e7:4a:de:cc:b8:e6:c4:b2:52:f8:18:
72:3b:b0:b0:a7:a4:fd:3a:5c:c7:b7:a0:9a:71:cb:
f4:5b:b1:8c:6f:49:af:43:55:c7:f3:b9:c0:6f:12:
9f:e8:16:60:e4:23:4c:4c:f2:ce:33:40:60:bc:14:
94:67:27:9e:35:ab:4e:07:5b:af:b7:ed:a5:e1:bd:
57:4c:64:a9:1c:c4:58:12:77:70:4d:07:94:b5:0c:
fd:c4:1a:3b:11:90:ed:67:f7:dd:5d:68:3b:91:9a:
82:45:47:92:ad:a4:91:04:3c:70:58:42:01:ad:53:
34:da:ff:97:50:a0:7f:a7:f4:4d:0e:65:f3:8d:90:
3c:11:6c:b3:8d:8e:09:2e:9f:4a:d3:4a:13:8a:5d:
a2:65:1e:68:32:43:1b:cf:67:85:69:3c:29:45:6c:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.128.0/19
57.133.0.0/16
58.0.0.0/16
58.1.128.0/17
62.23.0.0/16
62.72.96.0/19
62.84.192.0/19
62.96.0.0/16
62.97.64.0/18
62.152.96.0/19
62.192.0.0/19
78.143.0.0/18
78.156.64.0/19
80.80.0.0/19
80.169.0.0/16
80.251.160.0/19
82.112.192.0/19
84.14.0.0/16
84.16.160.0/19
85.88.128.0/19
87.241.0.0/18
116.83.0.0/17
118.67.224.0/19
134.128.128.0/18
136.225.0.0/16
157.120.224.0/21
157.120.236.0-157.120.255.255
178.159.176.0/20
193.82.32.0/19
193.93.80.0/22
193.114.160.0/19
193.118.160.0/19
193.118.224.0/19
193.188.132.0/23
194.223.128.0-194.223.139.255
195.68.0.0/17
195.110.64.0/19
212.0.96.0/19
212.23.224.0/19
212.31.224.0/19
212.35.96.0/19
212.36.128.0/18
212.74.64.0/19
212.78.160.0/19
212.121.128.0/19
212.123.192.0/18
212.161.0.0/17
212.203.64.0/18
213.27.128.0/17
213.41.0.0/17
213.61.0.0/16
213.86.0.0/16
213.164.0.0/19
213.173.160.0/19
213.185.160.0/19
213.208.192.0/18
213.215.128.0/17
213.229.128.0/18
213.246.192.0/18
217.110.0.0/15
217.173.96.0/20
IPv6:
2001:920::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6675
8220
8372
9126
12640
12755
12761
12878
15404
Signature Algorithm: sha256WithRSAEncryption
11:8c:13:8e:67:29:26:c0:e9:ed:7d:05:89:b9:7c:c0:8b:cd:
53:15:a7:62:bd:14:f2:18:c7:06:03:1a:f3:5b:71:ae:6d:85:
f2:ba:d7:33:98:6a:ee:a3:c8:12:b5:ae:d9:6c:80:98:f0:36:
78:72:fc:3b:a1:e0:58:80:bf:95:51:da:8a:26:43:32:4d:6a:
10:c6:d4:27:11:23:97:95:a2:a1:26:93:5c:17:80:0c:3c:d4:
b1:c7:db:cd:29:42:2b:e0:fc:86:be:d6:17:c2:cc:c5:a3:41:
c4:24:4d:8f:f8:ea:ca:69:28:a2:10:28:d6:c0:ff:5e:28:88:
ae:87:29:8f:5b:15:be:a9:47:55:72:1d:44:9e:67:af:9c:af:
9f:2b:2e:6b:ff:4b:f7:8a:82:7f:87:30:0a:31:46:71:34:39:
05:48:42:bc:52:3a:5a:b8:79:28:90:87:3e:a9:3f:51:a6:9d:
b8:03:86:30:91:7f:f7:87:14:5a:f0:cd:1f:f6:ed:35:40:e7:
c1:0e:8d:e4:16:92:df:8a:f0:52:21:78:82:39:e2:90:cd:e2:
d4:82:a1:dd:84:49:5a:40:45:7b:d5:63:b5:96:a0:16:3b:e9:
dc:d1:01:ef:32:43:ec:2f:85:eb:1c:6d:49:35:5b:61:eb:18:
a2:a3:05:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:01:49 2025 by rpki-client