Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.cer (raw, json)
Hash identifier: maQH2KKzXiSFx6FoTmJj8ZyazGt4xlszak2PrYS2d3k=
Subject key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B26ADCF8682294A565E1768F6967D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206291
IP: 185.188.44.0/22
IP: 2a0b:b780::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6a:dc:f8:68:22:94:a5:65:e1:76:8f:69:67:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:a8:d9:1d:63:c9:e2:9b:a8:10:8d:c5:22:
b8:44:7e:a4:0c:54:a0:ec:dd:ae:ad:34:5d:3c:98:
87:6c:32:48:69:f8:6a:7e:b9:d8:6e:ca:58:5d:c1:
a4:7c:40:46:f4:a9:a1:58:66:39:af:e8:dc:50:0a:
c1:6a:3f:26:85:f3:a2:c0:aa:5f:5f:ee:cc:09:08:
e1:e3:96:44:f4:c7:56:e2:07:0a:18:97:62:ba:03:
17:f9:46:e4:d1:fd:84:8c:5e:6f:d0:9f:d5:d3:d6:
a0:52:1f:b6:ef:b5:fa:c4:be:30:ff:3a:6d:2f:25:
ee:bf:45:cc:b8:55:85:1e:3b:42:b3:ba:42:5d:0a:
bb:2c:dc:8a:af:e0:2b:86:4c:23:ee:54:ee:50:fc:
2b:f6:99:96:6b:c6:ec:f1:5e:04:b2:3c:34:c3:27:
fd:90:24:38:6f:d3:3c:bb:7f:18:4b:68:35:fa:33:
40:2c:65:96:73:18:4d:5f:f8:63:5c:db:83:0b:24:
85:4f:62:87:e3:bc:3a:ed:dc:0f:04:cf:49:b8:ca:
27:08:1d:cb:c8:31:03:d0:6f:1d:d1:01:f3:d9:ca:
db:1f:76:fb:6c:3c:79:4c:91:b8:d5:f9:c7:9e:0f:
d5:5a:28:86:26:20:e8:c2:0a:46:34:46:ec:a6:2b:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.44.0/22
IPv6:
2a0b:b780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206291
Signature Algorithm: sha256WithRSAEncryption
14:dc:8f:2e:3a:b6:a5:5e:ae:73:55:7b:fa:0d:3a:e6:af:11:
eb:cb:4a:50:0f:cd:83:2f:13:7d:7c:a1:a5:4a:f0:40:fc:ed:
45:21:6b:62:b9:5d:68:7e:86:9c:47:ea:ac:c0:92:3d:83:48:
16:69:34:9d:7c:2d:46:d3:b0:dd:c8:7c:78:2b:20:a0:07:7b:
bc:15:0f:68:bb:06:15:9f:3f:f8:74:b3:98:eb:4c:83:48:da:
de:32:e7:9c:59:28:f8:12:24:9a:4d:55:94:ea:98:24:0e:15:
7b:5d:a7:99:70:c9:aa:c0:15:67:80:08:8c:57:35:c6:80:f6:
da:fa:87:44:13:c1:50:43:4b:8e:7a:21:21:06:b8:00:a5:91:
b6:ad:06:ee:a9:22:d8:37:8c:fb:68:22:95:e8:f8:91:f6:6f:
a0:f6:4e:4b:e2:bb:c6:18:8a:68:6f:d0:c1:29:1b:55:18:1a:
ec:6e:36:f3:a5:ba:63:d8:ec:e0:34:8d:6b:12:5e:27:79:30:
02:48:89:08:42:72:e3:ff:a6:68:b9:6b:2c:02:ca:68:2b:e5:
03:2b:63:66:09:c6:d4:2b:1b:c7:0a:be:9c:f7:2c:37:7d:97:
3d:cd:69:1a:27:19:21:3a:3f:20:70:70:7d:16:8a:ab:0e:45:
f2:0d:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:35 2025 by rpki-client