Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer (raw, json)
Hash identifier: MdAEGDu1WJ5vfi4Sn8ZON0iRLgW1zNeTdy5SMFkeoYE=
Subject key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D8FB7EE0F7F28E2A190896088BAF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8833
AS: 15547
IP: 31.31.48.0/20
IP: 77.242.160.0/20
IP: 78.155.0.0/19
IP: 81.13.128.0/17
IP: 81.88.176.0/20
IP: 86.111.128.0/20
IP: 92.62.176.0/20
IP: 92.240.96.0/19
IP: 95.215.60.0/22
IP: 178.157.84.0/22
IP: 178.237.80.0/20
IP: 185.17.108.0/22
IP: 185.17.176.0/22
IP: 185.44.196.0/22
IP: 185.50.220.0/22
IP: 185.55.216.0/22
IP: 185.84.208.0/22
IP: 188.239.160.0/20
IP: 192.162.24.0/22
IP: 194.12.16.0/20
IP: 195.162.160.0 -- 195.162.165.255
IP: 195.162.167.0 -- 195.162.191.255
IP: 213.221.128.0/19
IP: 213.230.52.0 -- 213.230.63.255
IP: 213.238.0.0/19
IP: 217.79.192.0/20
IP: 2001:14a8::/32
IP: 2a02:26a0::/29
IP: 2a03:4380::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8f:b7:ee:0f:7f:28:e2:a1:90:89:60:88:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:73:32:99:1d:33:1e:13:05:95:1e:b7:17:
7e:e1:50:65:da:a6:80:4d:b2:bb:fd:d9:ff:4b:60:
d7:17:54:6c:69:bc:e4:d7:0c:32:d0:a7:44:f1:b6:
9d:e8:40:14:4a:54:d9:a4:a0:5e:aa:82:19:5a:cf:
76:2b:b2:84:72:fa:53:d7:75:b5:a7:d4:14:79:de:
a6:cf:90:bc:85:14:43:8a:c5:34:dd:d8:f9:f1:c7:
5b:03:2e:14:c0:82:49:40:d6:9b:e1:19:a4:5e:37:
d2:ed:83:d0:91:01:e0:24:52:2e:98:f0:31:59:a3:
c6:69:d6:2b:ba:27:da:45:1d:5e:f9:1e:3c:08:8e:
01:9c:a3:bf:12:ae:a1:26:63:9d:6a:7e:d9:65:35:
3c:93:72:78:05:dc:ed:d3:c2:8e:37:19:3f:9f:08:
e7:8f:27:64:4d:b4:63:2f:cf:c7:4d:6b:a4:c6:b9:
53:aa:df:ed:93:c8:70:18:ad:8a:d5:2c:bd:86:f3:
37:5a:7f:5d:c8:ca:56:08:ac:75:2a:db:f6:25:6c:
22:a7:6d:05:f0:b9:6e:a5:f5:0d:93:fb:8c:f6:c9:
4c:94:ac:d2:ac:6c:47:8b:9e:ab:e7:b0:ca:96:3f:
08:0b:8d:94:c9:4b:62:6f:85:98:f8:c3:43:ce:73:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.48.0/20
77.242.160.0/20
78.155.0.0/19
81.13.128.0/17
81.88.176.0/20
86.111.128.0/20
92.62.176.0/20
92.240.96.0/19
95.215.60.0/22
178.157.84.0/22
178.237.80.0/20
185.17.108.0/22
185.17.176.0/22
185.44.196.0/22
185.50.220.0/22
185.55.216.0/22
185.84.208.0/22
188.239.160.0/20
192.162.24.0/22
194.12.16.0/20
195.162.160.0-195.162.165.255
195.162.167.0-195.162.191.255
213.221.128.0/19
213.230.52.0-213.230.63.255
213.238.0.0/19
217.79.192.0/20
IPv6:
2001:14a8::/32
2a02:26a0::/29
2a03:4380::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8833
15547
Signature Algorithm: sha256WithRSAEncryption
33:58:66:6c:e6:68:90:61:c5:6f:05:d0:77:13:33:c2:6d:98:
18:89:1f:41:3f:b4:df:89:81:0c:72:35:de:35:35:b8:aa:63:
d7:23:f0:20:97:27:76:5f:09:57:d0:4b:5b:c3:b2:ae:d6:4b:
51:96:95:ba:27:1f:6e:a0:62:95:b6:94:11:35:12:39:b0:b8:
ff:6c:58:bb:38:00:f4:ba:e4:4f:c5:dc:7d:9e:74:ae:77:26:
3c:1a:d0:f0:16:ac:cd:5f:a6:0c:b1:b7:b1:58:b9:ca:d0:be:
af:8f:0c:d5:55:9b:70:44:b3:f4:1d:18:52:d7:d8:5d:48:3e:
7c:c8:2b:ee:c5:35:b4:62:03:6f:d0:9d:2e:0d:85:e6:f9:82:
fa:92:8b:95:a5:c5:4a:29:71:1d:64:bf:34:40:4f:07:dc:22:
90:03:74:9c:6d:eb:d2:c1:4f:85:47:e9:1a:33:a6:9b:8a:bf:
7c:bb:45:23:8f:23:a4:d1:78:92:8e:24:3e:e1:e6:71:a1:7f:
fe:21:f8:29:29:f0:45:8c:88:5e:37:6d:46:fe:4d:26:d3:35:
e5:46:29:76:a2:85:e3:a4:ed:88:91:90:99:a7:de:0c:c8:48:
09:90:91:ba:32:55:3c:46:e5:33:bf:da:4e:cd:18:08:cf:08:
4e:99:ad:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:42:35 2025 by rpki-client