Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
File: GAIUWTANFfrFUHBc9uJYmZ09hro.cer (raw, json)
Hash identifier: 1bRawun0JV/dTw/LwSfEFXT4IV2qaFyw1vcC0eKJuCg=
Subject key identifier: 18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9F5B674874AFE6284F5190EA1A5AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.137.178.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f5:b6:74:87:4a:fe:62:84:f5:19:0e:a1:a5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18021459300d15fac550705cf6e258999d3d86ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:61:d7:38:f6:20:e6:7c:3d:f1:94:4f:a3:
db:ec:2f:0b:5e:2e:41:04:1a:40:f3:7b:7f:49:70:
65:d8:4d:62:8d:ea:0b:55:34:15:e9:eb:24:bb:9e:
22:e8:70:4d:3c:48:a7:2c:d4:fd:40:2a:18:92:c4:
7c:0a:e5:09:e8:5b:09:bd:4a:07:e5:ed:de:74:1b:
89:8d:b5:80:5d:c6:aa:5d:74:37:2c:0e:30:4d:1b:
3a:19:fe:87:e0:ad:bc:88:91:be:5c:d9:8e:02:d6:
77:2f:d9:26:fc:52:31:6a:01:da:09:2c:12:09:b0:
f2:f0:b7:bb:fe:be:99:34:87:02:4c:fb:8e:1c:f3:
2e:aa:5e:39:fe:94:81:78:c5:7a:7c:bf:7e:38:6d:
71:94:7e:2f:81:80:ac:c7:14:3a:8f:52:ea:98:54:
de:28:93:41:fe:ce:ea:10:77:c7:aa:40:34:35:f5:
fa:44:bb:c8:56:1d:4c:d6:d0:53:a3:80:d6:e2:60:
0d:c3:0b:5d:11:34:b4:91:aa:6e:d5:ba:c9:80:94:
17:55:61:78:e3:c9:50:08:e1:e5:c9:d4:4e:04:4a:
c3:77:e0:b3:56:f0:c0:e8:e9:70:3b:7f:7a:70:82:
c0:2f:87:c9:25:71:ba:21:0b:e2:48:70:6c:e2:f5:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.137.178.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:85:0c:5b:f5:93:f9:c6:55:29:77:11:e8:a0:02:d9:f6:16:
65:2e:22:44:f1:11:f0:4f:39:fa:1e:6f:74:55:9a:4b:bf:cc:
08:a6:e5:f5:a1:20:31:98:ce:16:a9:f2:52:97:bf:e9:3e:7e:
c5:16:b3:44:74:e4:bd:f8:dc:57:93:ac:15:ea:33:2f:c6:06:
4c:5d:eb:b3:bb:2e:ff:74:33:75:ca:06:88:77:ed:7c:c7:6c:
e8:79:1e:b7:c0:36:5d:a0:6c:81:2f:4a:8b:ea:e5:e9:c7:bd:
0b:0e:54:c9:ac:66:da:73:a4:a6:30:4f:42:39:6f:68:0b:ea:
4b:d8:79:c2:6c:fb:50:f1:6c:07:7e:87:c6:23:80:71:d6:72:
99:01:af:0a:91:2c:43:6c:53:a3:77:4c:15:a4:25:f1:d5:f2:
b6:ac:52:29:88:d1:06:f8:61:76:ce:0e:f4:f5:f4:c4:08:cd:
82:0e:b4:4d:ec:28:4b:f5:bd:ca:ec:89:ad:4d:57:ec:4e:e9:
38:2d:ec:0d:03:9f:4d:25:ac:bd:00:61:7d:8e:25:5b:86:5f:
23:7c:d8:c0:fc:d7:41:e5:17:e3:39:24:eb:38:04:83:ae:c2:
e1:c3:3f:b4:c4:27:d4:22:20:d7:bf:46:9e:84:2b:99:56:b7:
a4:d8:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:44 2025 by rpki-client