Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
File: GvujiocH_SMcOIfkpSvc3tqyAyM.cer (raw, json)
Hash identifier: vtKpzvO4hUOahx65X/D1OMi1GqY0oRiHXb/I86cO8BM=
Subject key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D76676558EB2928DD21941E77F7F65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207369
IP: 185.39.79.0/24
IP: 185.138.184.0/22
IP: 2a10:680::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:66:76:55:8e:b2:92:8d:d2:19:41:e7:7f:7f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:b6:c4:c7:24:f6:8b:39:6c:cf:09:37:a5:
c6:88:f3:37:67:31:d4:8f:d2:fa:60:7e:63:7e:13:
31:25:0c:ff:ca:de:dd:88:04:33:e7:5a:fc:6f:d2:
dd:7e:84:09:ac:33:4c:a4:36:51:57:e3:28:69:89:
1d:fa:a9:55:30:23:6f:b7:1d:71:bb:2f:8a:ba:3e:
23:e7:e7:5d:5f:ab:0e:fd:a6:0a:6d:6a:c9:d4:93:
fb:fc:25:db:d5:d2:57:6e:72:c5:f1:26:bf:dd:78:
6b:dd:79:a9:fd:f0:19:10:51:db:38:59:f7:f1:4c:
e7:d8:eb:1b:c2:a0:77:8c:1d:a2:72:cd:5f:16:e6:
53:9f:d4:ec:f6:b3:52:fb:42:90:a1:45:56:58:64:
fe:99:c3:44:7c:71:37:c6:cf:c9:81:eb:ca:f5:b4:
17:90:58:04:cf:c3:87:54:44:ca:0b:c8:fa:e2:5d:
53:28:e8:c1:8a:bb:fb:60:c9:69:a8:28:61:87:54:
93:b6:75:64:e3:74:53:60:5b:c7:bc:2e:7c:9a:ee:
2b:3b:3c:74:d4:62:78:81:d2:f7:22:d3:d0:fa:b3:
fc:6d:06:8c:58:82:74:53:3d:72:33:91:7d:a1:e6:
39:a1:bb:27:19:48:c1:da:1e:c6:23:59:f4:0d:1e:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.79.0/24
185.138.184.0/22
IPv6:
2a10:680::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207369
Signature Algorithm: sha256WithRSAEncryption
32:a4:c1:1c:f2:20:ff:06:28:f0:0e:2d:49:4d:0c:93:3b:00:
a8:9d:47:e3:2b:36:5a:c7:e4:8d:61:f6:24:fd:4e:97:81:71:
32:91:06:08:c0:05:17:74:a3:9c:67:f8:b0:5d:3b:ed:cd:5e:
22:f6:53:b7:4f:55:89:be:b7:79:00:ed:36:d0:76:2a:89:eb:
1e:76:73:9b:64:e3:b3:b6:53:92:71:a6:5e:02:9d:c1:1e:5e:
b7:84:e5:c6:23:74:9d:41:74:13:f1:a9:d1:f3:7e:88:bf:82:
a3:22:d9:ac:e0:ce:e2:34:42:88:aa:69:75:ba:c9:3c:ac:a2:
61:bc:72:5e:f9:d5:d9:1c:5a:b4:58:fd:0d:8c:61:8d:68:20:
b3:a2:9f:95:ac:d1:c5:4a:9b:f6:07:67:14:43:4f:c3:c2:8b:
c7:a0:6e:8c:09:d8:bd:d5:db:99:2b:52:fc:25:fb:8c:7f:54:
b0:59:55:61:f4:8f:b2:94:6b:4e:91:a7:5c:c9:fe:9c:ba:59:
fb:de:b4:a7:e3:c1:6a:9a:da:fa:f9:b6:13:2c:df:ee:eb:d0:
6e:85:ef:b7:83:ce:30:3b:27:a2:91:66:98:03:39:bd:95:3a:
4f:75:2b:50:7a:47:3f:4d:16:7d:b8:0a:e7:fe:a1:90:29:26:
70:df:8b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:57 2025 by rpki-client