Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
File: GRGmWD3HmkFVGxeutDFNspMRy-s.cer (raw, json)
Hash identifier: zU6Q/dd0MYhaTV1gu6/ktkRtoPFW8RGVH8QaRu8CXv8=
Subject key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252207739E735B59C0E7F7E2C4C86B08
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208060
IP: 193.43.30.0 -- 193.43.33.255
IP: 2a0f:b880::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:07:73:9e:73:5b:59:c0:e7:f7:e2:c4:c8:6b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:0f:a4:86:c8:ec:19:1c:2d:b0:53:ed:a8:
9b:35:6d:44:24:30:cb:94:43:0e:35:6e:84:e6:84:
4d:91:d7:15:65:2b:02:dd:ad:15:91:97:64:d3:53:
fc:79:f6:a6:59:83:ea:ba:d4:a4:20:4f:0a:bd:21:
83:e6:f3:e6:67:50:44:a3:5d:cc:81:41:fb:4b:17:
9b:2e:8d:fe:4b:db:c0:d4:d3:65:83:9a:dc:24:9e:
14:4e:ea:28:5e:3f:45:73:2e:ec:19:cc:45:5a:9f:
8d:35:1c:d7:79:3c:2b:d6:be:fa:d9:ab:27:63:29:
e0:18:4c:77:00:9f:f1:87:32:c7:5c:61:6b:ac:f2:
90:a7:2f:28:44:8f:6b:b5:4c:66:3d:b0:cd:00:a3:
70:be:01:89:7d:4a:2e:3b:f1:73:2b:ad:50:4f:b9:
f7:2b:c9:02:4f:50:4d:1b:c7:22:a1:77:7c:79:8c:
c5:bf:d3:54:36:05:9c:24:d5:08:81:7f:be:f6:de:
61:2c:6d:ba:f7:1e:5a:86:50:e2:03:0e:29:39:4e:
db:82:76:26:b5:0f:4c:1c:4d:44:9f:a7:4d:0e:21:
b3:33:7d:f6:12:29:95:69:34:5e:e7:0b:e8:a5:eb:
13:31:9d:54:04:b0:6c:28:ff:4f:68:f3:03:c1:af:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.30.0-193.43.33.255
IPv6:
2a0f:b880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208060
Signature Algorithm: sha256WithRSAEncryption
b1:13:a5:ec:71:92:ac:34:93:c2:57:a2:b5:7f:0f:50:4f:82:
65:0d:df:7b:a5:46:09:19:68:57:a5:27:98:75:3f:84:19:fe:
30:0e:7e:09:fb:38:94:39:d1:ed:24:4f:95:bc:99:9c:c2:c7:
7c:80:09:98:15:0a:6c:de:af:55:7d:0a:9c:b0:bc:a0:32:aa:
92:53:af:88:e0:f9:45:b6:4b:e3:01:44:27:21:21:ef:36:83:
22:3b:96:68:03:00:25:a5:2a:b5:66:0b:ed:c9:7e:0e:c4:47:
f9:a5:14:aa:91:c6:08:94:f4:8e:52:32:60:70:66:56:8f:dd:
1a:b1:96:6d:70:de:7b:75:51:ad:1f:cf:9d:25:04:58:00:c2:
36:38:9c:70:5d:84:89:1b:72:92:0f:47:f5:d3:4e:29:2f:d4:
10:f6:78:e3:02:5e:8b:68:2f:3a:61:42:d0:2d:34:ba:85:7e:
a8:75:25:f5:4f:b3:31:e1:ef:6b:0a:0a:f8:85:09:22:54:e1:
49:6b:3d:aa:d2:a9:f6:3c:f8:6a:10:b8:40:3b:4f:f4:e2:04:
e0:4f:ff:14:8b:15:e3:61:37:cb:46:a1:11:bf:1e:22:5c:a4:
97:61:52:09:7c:3e:fe:7b:7d:e6:f5:61:a1:81:33:7f:3f:b9:
8b:3f:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:33 2025 by rpki-client