Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
File: P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer (raw, json)
Hash identifier: 1VXq+IUuk747/GHIj5cEcSESOx5G9255PWxQVLZpqBE=
Subject key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019492C81C36E1E5EC774D8401DAA0DDF3BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Jan 2025 10:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8851
AS: 31270
AS: 34940
AS: 39179
AS: 41393
AS: 43198
AS: 60648
AS: 61341
AS: 196875
AS: 199291
IP: 37.98.144.0/21
IP: 37.252.24.0/21
IP: 77.93.128.0/19
IP: 77.107.64.0/18
IP: 79.99.72.0/21
IP: 79.99.144.0/21
IP: 80.240.80.0/20
IP: 81.5.128.0/18
IP: 81.168.0.0/17
IP: 82.152.0.0/15
IP: 82.163.0.0/19
IP: 85.159.128.0/21
IP: 89.28.232.0/21
IP: 89.31.232.0/21
IP: 89.213.0.0/21
IP: 89.213.40.0 -- 89.213.255.255
IP: 95.130.96.0/21
IP: 109.176.0.0/16
IP: 158.255.8.0/21
IP: 185.20.32.0/22
IP: 185.24.84.0/24
IP: 185.24.86.0/23
IP: 185.49.124.0/22
IP: 185.101.44.0/22
IP: 193.27.212.0/23
IP: 193.189.140.0/24
IP: 194.105.64.0/19
IP: 195.128.138.0/24
IP: 212.38.64.0/19
IP: 213.130.128.0/19
IP: 213.152.32.0/19
IP: 213.210.0.0/18
IP: 213.218.208.0 -- 213.218.255.255
IP: 217.144.144.0/20
IP: 217.145.64.0/20
IP: 2001:1a90::/32
IP: 2a00:c60::/32
IP: 2a00:1c40::/29
IP: 2a00:4ae0::/29
IP: 2a01:4cc0::/32
IP: 2a02:21f8::/32
IP: 2a02:6f80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:c8:1c:36:e1:e5:ec:77:4d:84:01:da:a0:dd:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 23 10:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:c4:33:c1:cb:64:46:09:6b:ff:d6:2e:92:
30:e6:08:0e:3e:52:f9:ec:68:28:48:7c:99:fb:e7:
e0:4c:fd:bb:1c:69:d0:18:0d:5b:bf:60:81:c0:e5:
87:76:7f:9f:2b:67:f9:6f:47:ab:61:f4:e9:8d:72:
63:35:1d:6b:90:87:f9:92:4f:d1:49:7a:50:27:c3:
88:69:b3:4b:13:5a:31:b3:51:a7:c0:71:0c:d9:a7:
6f:ed:5f:4c:84:e3:fe:b5:de:0b:a6:c3:81:6c:64:
d6:0b:6c:cc:4c:10:26:dc:ec:45:1c:e9:b1:23:e2:
54:ca:8a:23:fc:74:fb:81:ac:4a:c8:c1:ea:98:09:
41:3a:86:11:1f:14:ea:b9:07:03:09:7f:c2:ee:3e:
bf:58:a6:00:e4:72:99:6d:56:21:c8:b9:b2:c8:3a:
75:2a:38:26:68:da:1e:41:81:7b:67:ad:a2:13:50:
64:71:0b:a4:d1:36:a2:1d:24:9f:f7:44:a9:ed:15:
d6:31:2f:12:80:d9:4c:e3:41:d7:0c:04:95:3c:0d:
02:b4:8d:26:3f:3a:b1:37:5e:68:3e:33:b1:c2:a9:
33:03:66:ef:e8:3c:ac:8e:cf:2b:17:e7:49:58:55:
59:f7:5d:9c:04:20:ec:6b:93:5d:b5:02:74:28:a4:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.144.0/21
37.252.24.0/21
77.93.128.0/19
77.107.64.0/18
79.99.72.0/21
79.99.144.0/21
80.240.80.0/20
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
82.163.0.0/19
85.159.128.0/21
89.28.232.0/21
89.31.232.0/21
89.213.0.0/21
89.213.40.0-89.213.255.255
95.130.96.0/21
109.176.0.0/16
158.255.8.0/21
185.20.32.0/22
185.24.84.0/24
185.24.86.0/23
185.49.124.0/22
185.101.44.0/22
193.27.212.0/23
193.189.140.0/24
194.105.64.0/19
195.128.138.0/24
212.38.64.0/19
213.130.128.0/19
213.152.32.0/19
213.210.0.0/18
213.218.208.0-213.218.255.255
217.144.144.0/20
217.145.64.0/20
IPv6:
2001:1a90::/32
2a00:c60::/32
2a00:1c40::/29
2a00:4ae0::/29
2a01:4cc0::/32
2a02:21f8::/32
2a02:6f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8851
31270
34940
39179
41393
43198
60648
61341
196875
199291
Signature Algorithm: sha256WithRSAEncryption
99:48:4d:71:00:28:ce:c8:50:19:1d:cc:7e:89:66:8c:2c:80:
f7:06:e7:7d:1f:92:0d:15:62:41:6d:44:02:5b:b0:40:a3:d5:
5e:ac:9d:c9:24:a3:eb:dd:85:f8:5a:8a:ce:b4:64:aa:7e:5e:
ef:49:0f:b7:e2:c8:54:2e:b7:a4:09:26:15:7a:84:e4:1d:73:
da:2d:04:57:af:7b:82:c5:10:2e:93:ad:7f:87:df:f4:4c:b8:
8d:e4:cb:c0:b7:1f:50:cb:c1:69:61:8b:45:02:c6:bd:64:a1:
77:5c:10:0d:63:f2:c0:a8:46:59:ce:3b:24:20:6e:13:cd:32:
21:e2:57:ca:e9:9f:5c:27:70:49:3a:00:7e:f1:e2:c8:2e:c5:
93:10:01:af:7b:40:8e:06:c5:b3:f4:ef:23:81:63:57:25:55:
a8:03:cc:71:6a:ef:b0:07:75:a3:6c:49:5b:98:0b:db:6b:58:
ad:19:24:52:f2:46:fd:34:ba:36:72:8c:a2:be:f3:da:7a:21:
9e:ae:6d:cb:3c:90:e1:74:3f:6b:1a:0f:35:05:16:ba:d7:6c:
3f:59:71:75:2d:9d:3e:b7:84:36:a0:35:0c:86:1b:59:e4:83:
d9:25:58:2d:55:4e:7d:0e:6c:11:6e:63:7a:b3:8b:49:0e:11:
37:1d:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:42 2025 by rpki-client