Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
File: GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer (raw, json)
Hash identifier: uaKhK6nuWFBZ3sNhrLTpFRVa/FEByVQXnaNf20zFHuI=
Subject key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F516C9B619AB037CC3C5650DB70A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 84.39.136.0/21
IP: 185.69.128.0/22
IP: 185.146.68.0/22
IP: 203.190.56.0/21
IP: 2a05:2200::/29
IP: 2a07:4e40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:51:6c:9b:61:9a:b0:37:cc:3c:56:50:db:70:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:f7:71:49:fb:3d:d1:4e:9b:f4:29:d3:58:
65:eb:7d:9d:51:59:dd:e4:12:14:74:a8:47:96:8c:
c9:46:8a:d9:33:3b:87:64:bd:e5:36:05:b1:7e:4b:
6c:7a:a1:1c:c1:e4:f2:31:33:5e:9f:6c:ca:a4:8c:
79:d7:0e:b9:62:5c:75:80:b4:23:2a:92:f5:5e:6e:
5a:40:a5:60:54:b8:57:02:ce:54:48:51:2b:e7:bd:
c8:b4:d2:6f:5a:04:19:41:77:db:b1:07:b8:dd:98:
af:fa:aa:81:56:f8:39:a1:09:fb:69:e1:72:00:7d:
be:de:12:37:60:8c:86:95:5a:49:01:51:a5:ce:a4:
0a:f6:d6:24:a5:3f:9c:0d:a5:c1:96:9c:4c:1a:cd:
a6:01:5c:e7:3a:14:5e:33:b3:18:35:c1:cd:66:df:
92:f6:c5:1f:97:a6:25:2c:af:f2:41:66:07:53:37:
82:01:09:b7:9c:b2:c9:4b:3e:c7:dd:a1:1f:83:8d:
ae:23:d4:b7:13:c2:00:eb:d7:e4:38:4f:3f:61:99:
a8:bc:a5:6e:a4:1a:dd:cf:89:d9:10:d5:e0:b3:40:
bd:71:50:d2:8c:15:1b:3c:67:d2:ff:c3:69:5a:ae:
52:6b:78:3d:c1:fd:89:3d:d4:22:fc:8f:13:3a:49:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.136.0/21
185.69.128.0/22
185.146.68.0/22
203.190.56.0/21
IPv6:
2a05:2200::/29
2a07:4e40::/29
Signature Algorithm: sha256WithRSAEncryption
3b:e0:79:ce:f9:c9:6d:b4:90:68:c3:72:97:5e:75:87:b8:50:
ff:f2:cc:3b:04:49:1c:dd:25:71:98:e8:ca:9d:d7:e9:52:df:
da:7b:a5:61:c6:de:90:70:da:14:3f:6c:2f:bc:6f:47:44:bb:
3a:ba:ec:61:ce:51:ec:58:32:cf:bc:ac:7e:88:38:35:6e:4f:
38:ab:f3:f2:91:88:a6:f6:64:2e:c8:b5:d9:be:7a:e8:d2:1e:
50:92:9a:3a:55:f3:eb:61:a1:cd:a1:bc:a9:20:8e:94:e9:7b:
8e:e9:be:4e:87:2d:cb:41:a5:d4:a0:8d:87:fe:be:d5:e5:1e:
3b:95:14:56:be:01:cb:f5:01:f5:ff:67:21:91:9f:9e:f0:35:
35:cb:4d:1d:6b:69:a0:29:cb:85:05:11:47:02:c1:6a:b4:b5:
b0:77:92:4f:36:30:ee:e4:71:9c:f0:f6:48:ef:34:d1:6e:d6:
b8:77:13:54:19:d0:56:6c:c9:13:7d:30:8b:4c:f3:e8:a7:3f:
83:0a:19:59:6e:b5:3d:6d:08:f4:d6:19:ec:a7:db:79:8f:35:
6a:0e:1c:ad:24:69:3e:5c:c6:c1:db:e8:20:99:81:b0:32:36:
0f:c7:a8:bb:18:0d:48:f0:0c:04:64:2f:a9:52:0b:df:1c:f5:
96:2a:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:53 2025 by rpki-client