Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gKOAANS1q9FTKiU4HLJhXuwe3KA.cer
File: gKOAANS1q9FTKiU4HLJhXuwe3KA.cer (raw, json)
Hash identifier: 4IrH2SW3MbCyuReuka46s+ZCN6mHKQbV8Ud94M8+Z2U=
Subject key identifier: 80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428251E9FB660CEBC0E1B00D9DAE274BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:51:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.24.80.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:1e:9f:b6:60:ce:bc:0e:1b:00:d9:da:e2:74:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:51:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80a38000d4b5abd1532a25381cb2615eec1edca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:09:c2:c5:9e:e2:be:6a:ad:11:69:0c:51:
53:d0:28:f2:ee:29:09:40:82:3a:ed:18:36:04:13:
72:eb:24:17:d1:c7:da:ba:ae:17:73:f3:f3:a5:7c:
92:3b:11:f4:8d:ae:c0:71:6e:9f:91:b0:6c:2f:02:
c8:1e:c3:2b:9a:4b:20:58:32:e8:e7:fe:71:bb:bc:
18:0a:c7:6a:d9:51:0d:99:56:13:ad:94:04:66:7e:
f6:1a:10:c8:f3:ee:99:68:6f:b7:7b:fd:b9:1c:ce:
eb:c7:19:68:fc:1d:12:1c:f2:b2:4d:7c:58:89:4e:
f4:71:1c:88:09:0f:ca:e3:a7:d8:b1:89:56:ee:b3:
87:33:4b:cd:2d:98:68:48:fb:6d:1c:28:28:a6:1a:
66:60:51:02:3d:67:c4:2d:f6:0f:2b:0d:d6:0e:90:
e6:6b:b3:64:ab:02:41:b3:52:e1:f6:17:fc:bf:58:
68:a2:88:52:ab:16:ed:f8:96:85:6a:5f:7f:58:49:
c9:ac:38:3c:66:3a:4c:82:89:1d:9b:b2:f9:cc:a9:
0f:23:7d:b2:dd:7e:0e:4b:ae:d4:f2:b4:36:9b:17:
f7:97:f2:ab:e4:1c:61:c2:6e:83:f4:ae:6c:42:36:
c4:5a:68:52:2e:db:db:05:b3:68:52:cf:c7:bf:37:
fe:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A3:80:00:D4:B5:AB:D1:53:2A:25:38:1C:B2:61:5E:EC:1E:DC:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8ef162-e840-4a15-aba6-9e0898f4450c/1/gKOAANS1q9FTKiU4HLJhXuwe3KA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.80.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f0:f0:28:cc:36:0a:ac:5e:8d:96:b9:20:92:54:35:c9:05:
24:65:38:10:72:b3:51:3a:ce:a4:0d:07:c0:33:2d:77:86:ea:
a3:6d:50:65:14:9c:bd:63:5e:cd:c2:db:e0:88:53:1a:bb:11:
60:36:bb:0f:6a:34:03:7e:00:58:00:c9:83:65:1c:a9:f1:51:
5a:63:e4:fc:9d:b5:0a:b4:8a:77:0c:65:7a:db:f4:35:9d:ce:
57:ae:cc:cd:11:b4:ca:90:b4:af:28:b7:24:15:5e:cc:fe:a4:
ae:03:bc:21:87:a0:15:a2:3c:54:2a:8a:ea:fa:0f:5f:34:0f:
cf:46:65:f6:3f:7f:2c:27:a8:6b:2d:a4:73:43:cf:fd:7e:5e:
55:61:f8:de:c8:30:75:ab:74:b6:b4:6b:b5:c3:07:1b:7c:10:
12:8f:19:1a:58:b6:74:62:91:23:e5:ea:57:aa:7c:bf:2a:01:
f3:7f:6f:98:bc:4e:a6:64:d2:f6:6b:16:b7:69:91:90:63:48:
82:d4:26:7a:b1:1f:88:d8:93:f4:23:46:24:83:ef:ce:a7:14:
ca:63:19:fe:3f:b6:be:0b:95:27:79:15:8f:43:b0:b4:b9:92:
20:91:65:5e:ea:dd:2f:48:c4:68:d8:c0:e8:49:77:db:43:b0:
8d:b1:91:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:19 2025 by rpki-client