Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
File: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer (raw, json)
Hash identifier: RW9Ij2vGlVKqgWvKnU9Podo6xrvbnZh0Y4XAukT0CYc=
Subject key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAB6DA80C44BDFA3B68AF0316D1DF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212956
IP: 2001:67c:d00::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b6:da:80:c4:4b:df:a3:b6:8a:f0:31:6d:1d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:15:93:32:d0:05:c1:d7:c4:50:0c:00:18:
c8:3c:91:bf:0b:25:09:fa:fb:88:9c:ee:04:08:f3:
21:1b:e5:e9:df:1b:45:90:c1:ba:99:98:4d:ae:c1:
22:61:e1:e5:6f:d7:eb:6f:e1:69:10:79:47:f4:46:
87:8a:6a:1d:88:0d:44:99:7f:45:2f:4d:4b:49:ba:
5c:1d:65:25:51:33:c8:da:b2:41:f5:0e:8e:7d:c8:
68:4e:bb:88:23:b8:34:7e:f9:6a:77:90:d4:cc:44:
c0:25:7b:07:fc:ef:c8:a7:c7:26:8f:50:8a:6a:c3:
b8:29:63:39:92:75:58:d2:6c:3b:60:60:1a:8b:a2:
67:54:44:25:88:f8:36:27:fa:6d:04:3e:7c:31:d5:
51:7c:22:18:15:8a:6b:d7:a7:52:1b:7e:5d:23:ea:
0f:4b:61:d9:47:90:a9:71:9c:47:0d:bc:a4:9c:0f:
8b:47:21:f0:d9:ac:3f:0f:d9:73:ed:04:1e:92:90:
be:55:b4:cb:5c:41:10:0d:b9:85:e3:3e:63:04:4c:
fb:01:85:f1:f9:f9:25:ca:18:a5:ab:ce:18:27:2b:
47:b9:77:e8:43:f5:90:9a:01:3e:5c:b4:c2:c0:f5:
dd:b2:c4:3d:74:82:9c:63:e3:38:6b:d9:6b:31:b5:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d00::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212956
Signature Algorithm: sha256WithRSAEncryption
37:87:33:50:67:5b:ac:4c:4b:bd:f5:3b:b4:58:fb:76:9c:40:
0c:a8:25:c2:16:76:c3:9f:f7:9f:06:bf:68:f8:76:23:51:7f:
02:66:86:9d:4b:b3:31:e9:05:9e:12:4a:70:32:0c:a5:c3:5b:
c6:43:cc:c5:a1:ea:b1:47:b3:77:55:e5:b3:5a:e7:ac:c6:45:
8a:c0:43:d5:a4:23:db:29:06:b7:68:db:56:a4:78:be:ef:97:
06:7f:40:34:b3:5c:49:cd:b9:10:37:a9:99:b9:eb:34:47:44:
fc:51:4e:5e:b6:9c:9e:3f:ce:5c:9b:d6:04:96:61:33:52:57:
ff:94:74:5d:c0:13:12:1f:23:82:73:e5:aa:00:0a:f9:70:98:
51:a9:53:61:27:c6:3c:de:15:cc:8a:77:26:32:c5:b1:cd:e9:
ca:1a:30:a4:6f:18:44:cd:5c:34:ef:d7:1f:d7:35:a9:ed:cb:
34:41:87:60:c8:09:09:42:2f:9d:7c:1a:67:f2:a1:1d:b4:6b:
98:7a:7d:5f:dd:28:2a:a1:f8:45:90:0a:7d:28:4c:e8:0f:a1:
89:b4:32:3e:ae:53:46:31:52:cc:aa:96:35:05:f4:f6:72:30:
8e:2f:ae:96:32:7d:44:b3:ff:08:4a:fd:54:c6:2b:f6:23:8d:
c7:71:6f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:40 2025 by rpki-client