Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
File: saew2N6CUdNtfIP69rx-_sc7UDQ.cer (raw, json)
Hash identifier: QC/NyEP6JBS3IzoF9vwU/d7Tlbc9Un8Lpv98Je3UkLA=
Subject key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194CC1324F84513B19B11F0041025D60C94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Feb 2025 13:49:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2.56.164.0/22
IP: 5.182.48.0/22
IP: 45.81.20.0/22
IP: 45.90.144.0/22
IP: 45.140.220.0/22
IP: 77.83.240.0/22
IP: 78.108.216.0/22
IP: 83.143.116.0/22
IP: 85.202.160.0/22
IP: 89.190.156.0/22
IP: 178.218.144.0/22
IP: 185.185.40.0/22
IP: 185.186.64.0/22
IP: 185.227.68.0/22
IP: 185.234.72.0/22
IP: 185.242.224.0/22
IP: 193.31.28.0/22
IP: 193.34.76.0/22
IP: 193.105.165.0/24
IP: 193.105.177.0/24
IP: 193.221.192.0/22
IP: 194.31.140.0/22
IP: 194.50.16.0/22
IP: 194.56.224.0/22
IP: 212.107.12.0/22
IP: 2a0b:b80::/29
IP: 2a0b:7080::/29
IP: 2a0d:77c0::/29
IP: 2a0e:c7c0::/29
IP: 2a0e:e800::/29
IP: 2a0f:8ac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:13:24:f8:45:13:b1:9b:11:f0:04:10:25:d6:0c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 3 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:41:50:47:07:28:b3:34:60:89:30:38:b2:
8f:f3:76:94:f2:f7:97:4f:e5:0a:a0:2c:d6:63:53:
8d:34:e0:b1:70:e3:ad:15:47:29:ac:24:7c:67:57:
2b:34:b8:74:e8:65:04:4e:b8:dc:6b:27:f0:a6:5d:
8c:b6:e5:e2:8e:97:84:5c:78:ea:ff:48:f6:ec:96:
04:3e:d0:8a:2d:8d:5b:53:2b:18:1b:47:18:ca:94:
dd:94:cb:a5:31:97:42:17:e3:8d:f3:70:e8:38:80:
8d:bd:08:db:36:63:44:29:20:e5:fe:48:27:1c:14:
f7:71:23:3a:bd:56:bf:05:97:85:fe:37:ec:19:24:
ab:39:9d:43:00:89:05:74:fa:38:b4:7a:c5:f6:d8:
bb:e8:79:33:b3:bd:2c:d9:59:52:d9:7d:09:32:59:
ca:33:38:27:fa:23:04:f5:96:30:81:01:2b:14:9f:
1d:c8:08:bf:ab:eb:1f:f3:28:34:ad:c1:3c:f4:fc:
90:ab:44:83:e3:81:f5:6e:d3:cd:fd:72:20:f0:ac:
78:5d:52:41:39:7c:4e:48:d4:7f:b1:78:a5:f1:fd:
ed:2c:d6:b9:2f:e8:6d:d3:11:8b:bd:f2:62:56:fb:
eb:90:a5:0a:1c:54:04:af:34:09:e6:13:a8:c1:0d:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/22
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.105.165.0/24
193.105.177.0/24
193.221.192.0/22
194.31.140.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b80::/29
2a0b:7080::/29
2a0d:77c0::/29
2a0e:c7c0::/29
2a0e:e800::/29
2a0f:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
19:ac:16:9f:34:46:8f:18:a2:11:61:78:3c:18:79:56:da:9a:
84:f8:88:f7:93:83:00:34:4e:1b:38:34:8b:42:86:27:0b:0a:
ca:7d:66:b9:cd:c6:6e:46:24:6a:05:71:69:df:e2:63:10:ac:
59:fe:e3:7b:f3:23:45:71:62:57:79:ad:53:df:17:ac:58:1c:
3a:37:2c:98:df:43:64:37:1d:35:a9:3c:44:e0:6c:f5:29:19:
90:96:b6:8f:1b:84:f3:0e:b7:e8:0d:76:c2:c9:81:74:c9:c1:
ba:10:ea:67:d1:9d:26:58:2f:e1:61:1d:ff:fe:1e:67:15:bc:
08:e4:ba:eb:7c:3c:a7:81:65:e5:88:7f:6e:44:2e:4f:1c:f8:
26:13:b5:df:6c:b0:9a:da:41:f6:13:13:8b:56:c0:0c:dc:be:
58:75:06:d0:8c:e1:5d:d2:08:c6:81:dd:e7:f7:d3:bc:77:80:
87:ea:e4:e5:13:7f:12:fb:32:37:01:7c:d1:97:df:5d:91:a2:
a0:60:71:1e:b4:65:79:29:c5:bb:cc:96:83:83:79:16:98:02:
b3:de:7f:2a:31:a6:82:e4:b6:e0:77:c9:33:78:d1:8f:2f:34:
bf:21:cf:9c:32:da:5c:b4:d4:42:31:f2:7d:3d:4d:76:6d:72:
63:75:7d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:13 2025 by rpki-client