Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
File: GTWdi0RPJzSynpueCQG-CLAPQOM.cer (raw, json)
Hash identifier: JborFM8ZubPaWVnse6xUl5TrC648vN+zrEZTXxFDdLc=
Subject key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5744E33B7F3D10B95D9AA84A75C5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199007
IP: 91.241.43.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:74:4e:33:b7:f3:d1:0b:95:d9:aa:84:a7:5c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:49:c2:1a:d9:82:24:b0:44:27:2a:e0:cc:ce:
e3:b2:2a:cd:0d:20:7c:27:02:a7:a2:19:56:02:42:
25:b3:d9:5a:04:14:5b:e0:62:ee:2e:1e:23:33:81:
29:bc:11:fa:4f:3f:56:c5:1e:c5:04:49:87:9b:b4:
e2:17:bd:d9:e6:38:f7:81:1a:3f:81:f2:d6:91:81:
a9:a1:c6:be:96:f4:91:01:0e:45:d1:f4:65:58:23:
e1:35:81:8a:1a:7a:13:e6:d5:5e:07:f3:fa:a8:40:
61:c6:a1:9a:db:9a:44:98:a8:52:f7:fc:b0:ae:95:
92:03:bb:78:b6:0c:5a:ec:d3:7e:cb:e6:e1:db:76:
68:94:3b:20:4a:67:f0:69:80:58:3b:a1:03:32:39:
7d:7b:b7:ee:54:4b:2f:1e:5e:f5:6a:0c:7a:37:fc:
4e:6e:8d:db:80:3d:5e:f9:40:5e:23:dd:76:b2:68:
18:e3:6b:96:89:4d:57:e7:39:3d:8d:3b:0e:82:4b:
ad:0f:dc:6d:15:c0:ef:c0:78:61:d6:55:07:d8:d3:
0e:68:fd:a4:6c:95:45:ea:28:bf:3b:9a:40:78:fa:
75:ee:8e:d4:f0:a6:b1:8e:7f:1a:e9:dd:31:82:df:
12:94:cb:a7:a9:88:48:0b:42:0b:2c:88:12:19:da:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.43.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199007
Signature Algorithm: sha256WithRSAEncryption
af:37:15:cd:cd:9d:28:83:dd:39:fa:7d:2a:96:39:e4:bb:7f:
7e:b7:ed:9a:20:ba:d6:42:7f:36:23:fc:fe:12:54:19:49:61:
07:63:6c:72:65:8e:0a:25:40:c8:ab:e0:3a:8d:49:a5:24:ff:
b7:c0:54:18:6e:2a:dc:ae:f6:be:e6:d7:12:65:7e:17:32:25:
74:cd:79:1a:91:1b:72:e8:b7:ab:18:03:bd:fc:87:d5:8f:50:
21:ac:c2:bb:26:a4:d5:f0:7c:a2:0a:38:b2:63:c4:40:35:ba:
cd:1e:a3:0b:a0:b0:55:70:53:07:8a:0a:13:69:b3:6f:25:f8:
0e:fb:45:9c:83:65:92:b5:e1:7d:7a:4c:22:b7:44:ae:94:22:
16:5d:93:92:40:76:bd:7b:9f:bc:f0:e0:12:00:f0:12:e8:50:
af:f8:92:14:bc:06:1d:7e:eb:fb:db:da:60:6f:8e:af:5b:ed:
24:4a:c2:28:62:e1:0c:dd:1a:99:4e:e5:46:45:ed:2c:4d:29:
65:2a:ce:1a:08:31:2b:29:ab:71:5b:fe:c9:ea:36:0a:9d:c6:
6f:2c:c0:cb:76:31:cc:07:d6:1d:bd:17:9c:f4:e4:b6:be:ee:
ea:98:0a:c6:5b:79:cd:c7:0f:bb:fa:60:49:5b:15:6b:a0:55:
8d:9e:00:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:43 2025 by rpki-client