Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
File: 26EiB69NGGxE2iUzwLjx_R9V2Ns.cer (raw, json)
Hash identifier: rqAzvo19OA5549QFatXGX15x2yUq+udMBTFP4omFzhA=
Subject key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019517F67A65BE89EAD56EF0F230C6D36525
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Feb 2025 07:29:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8935
AS: 8954
AS: 41960
AS: 215834
IP: 2.56.216.0/22
IP: 5.183.132.0/22
IP: 37.148.184.0/21
IP: 45.10.124.0/22
IP: 45.95.252.0/22
IP: 45.140.156.0/22
IP: 45.151.116.0/22
IP: 77.73.224.0/21
IP: 85.184.8.0/21
IP: 91.211.160.0/22
IP: 93.188.64.0/22
IP: 94.142.253.0/24
IP: 171.22.176.0/22
IP: 185.116.12.0/22
IP: 185.234.152.0 -- 185.234.154.255
IP: 185.239.168.0 -- 185.239.170.255
IP: 185.249.136.0/22
IP: 185.251.152.0/22
IP: 185.253.48.0/22
IP: 193.105.183.0/24
IP: 194.61.84.0/24
IP: 194.61.86.0/24
IP: 195.184.86.0/23
IP: 195.184.90.0/23
IP: 195.238.86.0/23
IP: 212.19.192.0/19
IP: 212.26.192.0/19
IP: 212.57.48.0/20
IP: 213.156.0.0/20
IP: 213.173.56.0/22
IP: 217.8.96.0/20
IP: 2001:67c:21b4::/48
IP: 2001:6e0::/29
IP: 2a02:690::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:17:f6:7a:65:be:89:ea:d5:6e:f0:f2:30:c6:d3:65:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 07:29:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:d8:4c:84:01:43:bf:03:b8:7d:89:dc:63:
12:a1:e4:de:1e:04:c4:de:e6:33:4a:be:5c:2d:a4:
2f:a3:29:3c:34:f3:05:76:ea:3d:77:8f:3f:46:2e:
c9:f2:3b:3f:54:1c:8f:28:ea:38:9c:1a:21:9e:b5:
5f:c4:da:f5:1f:bf:98:49:dd:13:3a:03:49:7f:b7:
e3:b0:45:3f:d7:bf:5e:3b:09:b6:5f:7b:ea:e5:ee:
28:56:18:11:00:62:86:cd:42:50:73:c3:ee:51:51:
80:ba:64:9e:3b:70:e4:28:67:02:9e:f0:af:4d:b4:
e9:a3:8b:e3:ea:36:b8:48:f1:49:af:ea:7f:fe:3c:
2e:dc:65:b4:17:e3:7b:b7:c4:e5:3c:10:51:fd:70:
1f:72:a0:2d:d6:86:f4:13:42:de:4f:31:e5:f7:29:
99:b3:56:71:6b:24:72:af:7b:db:f1:6c:ac:29:d8:
19:25:a1:1e:1b:2f:fd:a4:b4:be:e9:ef:54:dd:96:
d9:b5:36:71:1f:7e:f0:64:fa:17:26:69:67:11:79:
d8:f9:96:27:ac:69:d5:ad:11:0d:04:ac:43:94:9c:
bf:e5:c9:ad:de:9e:2e:2f:5f:d0:75:b6:6b:63:c8:
c4:59:83:5f:0f:f9:f0:bc:8a:49:89:79:a3:08:67:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.216.0/22
5.183.132.0/22
37.148.184.0/21
45.10.124.0/22
45.95.252.0/22
45.140.156.0/22
45.151.116.0/22
77.73.224.0/21
85.184.8.0/21
91.211.160.0/22
93.188.64.0/22
94.142.253.0/24
171.22.176.0/22
185.116.12.0/22
185.234.152.0-185.234.154.255
185.239.168.0-185.239.170.255
185.249.136.0/22
185.251.152.0/22
185.253.48.0/22
193.105.183.0/24
194.61.84.0/24
194.61.86.0/24
195.184.86.0/23
195.184.90.0/23
195.238.86.0/23
212.19.192.0/19
212.26.192.0/19
212.57.48.0/20
213.156.0.0/20
213.173.56.0/22
217.8.96.0/20
IPv6:
2001:67c:21b4::/48
2001:6e0::/29
2a02:690::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8935
8954
41960
215834
Signature Algorithm: sha256WithRSAEncryption
85:39:d6:6d:25:45:01:4b:ee:5a:de:57:f8:67:fa:4b:50:3b:
48:ee:7f:cd:1d:d4:63:5e:2b:14:77:cb:f1:97:e4:67:8d:9a:
25:27:60:c8:6b:35:28:e0:51:16:f1:25:fe:d6:02:f8:7e:70:
3b:de:a0:c1:cd:cc:9b:de:ed:8e:53:50:16:2f:8f:31:8a:8d:
c4:89:d6:a1:64:53:1d:81:09:fe:3b:6c:94:b9:eb:2d:a3:49:
04:44:0c:5a:cb:a7:48:ca:83:d3:d6:6f:46:a8:cb:0c:b9:00:
98:4b:69:93:85:1e:8e:3e:1d:70:d2:67:8d:5d:4a:7f:0f:d7:
ba:96:9a:a7:25:49:69:82:ff:55:eb:16:81:d4:a2:1f:38:27:
c0:12:21:4a:eb:c8:c6:5a:77:dc:dc:04:27:00:b5:e1:81:be:
3f:fe:cc:64:05:cd:e0:67:6f:5b:52:93:b4:84:c3:09:ee:53:
4b:59:66:b1:63:f4:48:65:25:93:91:e4:22:a9:dd:49:86:cb:
4c:15:ef:69:5f:a3:45:5b:2b:c3:97:c0:bb:c7:e4:60:c2:28:
c5:ca:0e:98:6f:a3:bc:41:81:77:be:9b:20:8a:45:c5:14:a7:
85:1a:a4:96:4d:cc:e4:6f:01:68:f4:7a:23:2d:b0:9b:53:e5:
0d:a9:71:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:19:44 2025 by rpki-client