Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GpRvSoJtYiozjtg-CvzfeMh2BPg.cer
File: GpRvSoJtYiozjtg-CvzfeMh2BPg.cer (raw, json)
Hash identifier: WC8UG+B+g8nkf1rLxx14D7Cq1AvDa8Jay8OK76WERh8=
Subject key identifier: 1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D64132B179DBBB17347E71E32E501F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208116
AS: 210568
IP: 91.204.82.0/24
IP: 193.111.28.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:41:32:b1:79:db:bb:17:34:7e:71:e3:2e:50:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a946f4a826d622a338ed83e0afcdf78c87604f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:53:ae:fb:65:42:47:58:4a:6d:f8:da:b5:
b1:19:88:26:79:50:9a:31:b6:cc:85:28:f0:62:03:
94:18:c0:d1:05:2f:6d:e8:92:d3:7e:5c:d6:11:4a:
ef:39:bd:51:52:c9:d7:b3:6e:4c:08:42:ed:0b:b3:
07:0b:be:04:2b:c1:d8:d3:51:0d:5d:c1:0e:c2:c6:
35:b1:2b:f0:d5:d7:99:31:10:41:13:95:2a:63:4f:
da:33:0c:0c:fe:26:1d:00:b9:f2:14:e2:c6:4a:f9:
8a:e4:bc:97:ea:de:40:43:6c:86:79:8e:88:fa:f3:
01:4b:a1:ca:de:05:57:b6:7f:8f:00:08:e0:93:7f:
95:b6:f4:72:f1:5d:83:64:80:97:47:70:14:9c:bd:
4b:1e:d0:29:0d:a8:e9:57:4c:32:21:e2:12:f0:9c:
c0:bf:38:c7:42:8d:ce:9b:20:37:fc:a0:8d:f1:16:
78:44:bd:9b:6f:51:75:d6:7d:15:70:4e:cb:1c:b4:
70:c8:58:c9:cb:0e:92:d7:f4:fd:7e:78:8e:6f:6e:
b6:1a:c4:dc:07:5f:6a:f1:ee:7d:d4:82:d0:83:05:
b4:69:6d:d9:62:54:75:95:11:71:22:2d:fd:31:94:
7d:9d:0a:ff:38:97:f6:56:56:1f:e2:f9:ee:53:59:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:94:6F:4A:82:6D:62:2A:33:8E:D8:3E:0A:FC:DF:78:C8:76:04:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6ba6a3-25e0-499a-a7a9-98398fdbc9fb/1/GpRvSoJtYiozjtg-CvzfeMh2BPg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.82.0/24
193.111.28.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208116
210568
Signature Algorithm: sha256WithRSAEncryption
22:cf:e3:8a:9c:7e:b9:ff:4e:6d:4c:82:47:e7:4a:e5:ac:21:
98:e9:c1:c5:ab:d2:4d:e3:19:00:7f:73:31:da:0c:0a:0f:2b:
b1:fd:f9:bd:a9:da:67:ac:62:55:7a:e5:14:98:bd:f4:93:8f:
8f:cb:dd:84:aa:57:a9:f1:9a:64:99:a3:1d:ec:25:68:cc:f3:
d3:3c:09:21:4d:2e:e9:fa:1b:77:8b:a8:0e:59:38:7e:ad:e1:
43:95:53:7b:d3:ef:aa:43:52:9b:73:44:87:94:bf:58:9b:26:
f8:61:0d:29:51:48:70:24:b5:ee:46:77:50:8d:3a:22:f6:9b:
1d:67:9a:1b:70:f9:db:c2:fa:73:3e:98:05:61:48:7a:bb:01:
fc:b2:74:95:24:15:04:54:59:75:bf:83:b2:ff:da:da:83:3c:
44:40:9b:f5:22:80:66:76:4f:10:08:0d:30:7a:6c:4b:70:a9:
75:6c:e9:b1:d3:ba:6b:eb:f4:17:f2:29:e3:93:a3:09:0a:bf:
37:e2:09:f1:44:9f:e4:86:0e:e7:da:79:92:ab:b6:24:d0:61:
4f:3a:36:9a:f3:57:63:c6:6a:e1:0b:4a:7f:0b:b8:bc:a8:d1:
95:79:ad:3c:b8:00:63:95:6d:bf:69:49:b6:40:46:8c:2c:09:
ca:69:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:33 2025 by rpki-client