Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer (raw, json)
Hash identifier: X8IuBWHhSTR/7Bk88nWSIuKcCKBEkrHILE5qwjpRXlU=
Subject key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FCFB1537735760B53EAEB6F6611E43
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199638
IP: 91.245.193.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:fb:15:37:73:57:60:b5:3e:ae:b6:f6:61:1e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:0d:3f:b1:e3:19:b1:82:9b:7b:31:08:81:
ea:fd:65:ea:c0:26:fb:ba:53:89:53:52:c2:46:31:
b0:ba:36:d6:4c:9c:8d:7c:eb:9f:6e:70:98:4f:10:
84:a9:f4:9d:bf:d7:1f:44:0a:90:8b:85:61:ab:d3:
fb:52:8b:4f:64:6d:72:21:b0:73:34:95:0b:a4:79:
d9:50:60:6c:74:66:8a:2b:2f:b2:bf:e3:ca:ca:d8:
6a:54:fc:be:10:ae:ba:3a:db:0c:4b:ba:dc:a5:e0:
9d:51:db:c4:0f:66:42:50:bb:48:15:00:a5:ed:e0:
f7:06:ee:be:65:9c:d3:f7:ce:2a:c5:6f:a6:62:35:
f4:eb:26:70:27:d0:a0:20:0d:c1:13:5b:35:a2:d1:
6a:6b:ca:1e:c7:e4:51:d7:86:16:ba:54:e8:ac:69:
89:ad:d3:48:90:d7:c7:2d:54:a6:69:52:8c:61:7d:
f0:9d:68:eb:b4:e9:60:de:91:07:f6:13:4a:58:70:
4f:b0:5a:be:7f:f9:e6:48:be:43:e7:ab:b4:18:0a:
e4:df:63:dd:72:20:fc:bb:ff:c9:9a:35:22:1f:d1:
b6:4f:26:e7:fb:a2:51:d7:79:1d:ff:8a:3d:a1:c7:
4d:33:6d:47:1b:f3:b7:a5:d1:2c:08:56:fc:92:39:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.193.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199638
Signature Algorithm: sha256WithRSAEncryption
6d:48:27:aa:11:5e:a8:fa:d4:10:3d:c1:6f:65:e1:db:71:b1:
fd:c0:8c:4a:0e:c5:22:aa:45:99:77:13:b7:04:10:62:b8:0e:
7c:d4:52:41:c0:22:da:6b:19:2f:bd:27:8a:ca:a3:c1:cc:90:
a2:ce:23:49:4e:13:6b:1d:b7:db:be:6f:03:65:2c:32:cf:51:
d6:e1:75:3e:eb:ca:f5:7b:14:4f:c0:03:a7:c5:30:1c:03:3a:
e1:5d:96:c1:de:e7:69:9b:ad:9d:74:7f:ad:b5:74:f5:85:df:
17:bd:22:8f:2d:76:67:8a:48:28:c3:74:7b:43:d5:a7:38:c0:
62:b0:77:a6:31:f1:e5:d7:77:06:92:d0:3a:59:b8:c7:cd:63:
a4:a8:3e:1a:ef:1a:d1:20:77:16:01:1a:a7:cb:73:7a:ba:88:
2b:49:78:86:65:1f:08:30:7c:75:c4:50:3b:d9:fe:0c:f7:61:
79:88:74:28:30:81:9e:0b:84:4c:ca:ec:69:69:0f:b5:0d:40:
1f:2f:83:a2:67:c4:07:e3:88:dc:84:3c:16:f8:c2:b9:2c:44:
19:83:ae:7d:2f:9d:35:19:00:ed:34:85:77:82:50:3e:e2:50:
33:19:9f:99:e6:e0:1b:92:0e:4a:3f:53:e3:39:e1:94:fe:4b:
6a:6d:24:9b
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQl/PsVN3NXYLU+rrb2YR5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGI3Mzc3Y2U1ZWZhM2NhMDMwZWJiNGRkNzc1NjdmYzAzMmZjZDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z0NP7HjGbGCm3sxCIHq/WXqwCb7
ulOJU1LCRjGwujbWTJyNfOufbnCYTxCEqfSdv9cfRAqQi4Vhq9P7UotPZG1yIbBz
NJULpHnZUGBsdGaKKy+yv+PKythqVPy+EK66OtsMS7rcpeCdUdvED2ZCULtIFQCl
7eD3Bu6+ZZzT984qxW+mYjX06yZwJ9CgIA3BE1s1otFqa8oex+RR14YWulTorGmJ
rdNIkNfHLVSmaVKMYX3wnWjrtOlg3pEH9hNKWHBPsFq+f/nmSL5D56u0GArk32Pd
ciD8u//JmjUiH9G2Tybn+6JR13kd/4o9ocdNM21HG/O3pdEsCFb8kjkFywIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFBi3N3zl76PKAw67Tdd1Z/wDL80BMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFiL2EwYmE4
OC00ZDg4LTQ2OTEtYWE2Yy1iNWI4ZjU3ODRkZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYTBiYTg4
LTRkODgtNDY5MS1hYTZjLWI1YjhmNTc4NGRmZS8xL0dMYzNmT1h2bzhvRERydE4x
M1ZuX0FNdnpRRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW/XBMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwML1jANBgkqhkiG9w0BAQsFAAOCAQEAbUgnqhFeqPrUED3Bb2Xh23Gx/cCMSg7F
IqpFmXcTtwQQYrgOfNRSQcAi2msZL70nisqjwcyQos4jSU4Tax23275vA2UsMs9R
1uF1PuvK9XsUT8ADp8UwHAM64V2Wwd7naZutnXR/rbV09YXfF70ijy12Z4pIKMN0
e0PVpzjAYrB3pjHx5dd3BpLQOlm4x81jpKg+Gu8a0SB3FgEap8tzerqIK0l4hmUf
CDB8dcRQO9n+DPdheYh0KDCBnguETMrsaWkPtQ1AHy+DomfEB+OI3IQ8FvjCuSxE
GYOufS+dNRkA7TSFd4JQPuJQMxmfmebgG5IOSj9T4znhlP5Lam0kmw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:05 2025 by rpki-client