Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
File: gaaIASwSJngYX8634QN_Dh7ReGE.cer (raw, json)
Hash identifier: AxbLv99HB4LCswL+FWI0JK8QYxzVuxTx1DC4hL0QomA=
Subject key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C7C0B6225F880413911AB61A77B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51877
IP: 91.220.162.0/24
IP: 2001:67c:37c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c7:c0:b6:22:5f:88:04:13:91:1a:b6:1a:77:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81a688012c122678185fceb7e1037f0e1ed17861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:40:58:fb:68:fc:77:ed:78:ce:00:e2:dd:
cf:32:9b:71:91:1c:e0:cb:75:6b:ca:37:56:19:ab:
bd:82:ba:61:a2:2a:1e:74:e1:4c:5d:f0:41:61:ee:
83:d2:cf:ba:c8:be:e0:24:46:9d:4b:46:dd:98:69:
7b:9b:70:89:42:6e:53:e1:10:0c:1f:e7:c2:5a:63:
ac:f2:41:4f:85:02:4a:66:9c:30:88:d4:b8:2f:d4:
58:1b:c7:4e:72:a3:53:d5:46:91:e2:bc:d0:8d:46:
12:90:d6:5e:73:c3:3b:41:5c:f2:a8:d0:18:dd:e5:
ab:ea:5a:61:34:70:28:3d:49:7c:bc:50:43:ed:57:
da:48:cc:96:60:42:2f:91:35:ac:d9:67:0e:b7:40:
bc:e7:d4:04:3e:0d:01:95:65:cf:01:8e:44:d2:86:
99:cd:50:a8:05:85:3b:01:b8:cc:8d:73:eb:d5:d5:
3e:33:3a:1f:3b:c4:17:13:d6:15:e9:22:de:26:2a:
ce:74:42:8d:b7:9f:40:00:8a:34:a6:67:ff:c4:2d:
da:56:31:dc:22:97:9b:cd:80:3d:29:7f:1f:2a:27:
18:42:e8:4b:0f:8c:24:2d:03:fd:60:37:40:f8:3f:
84:32:49:68:ec:16:5f:87:49:c2:87:aa:16:26:55:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.162.0/24
IPv6:
2001:67c:37c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51877
Signature Algorithm: sha256WithRSAEncryption
6c:30:1a:bc:92:c4:48:e6:26:d8:3a:9b:05:d5:63:3e:73:e6:
50:d3:e7:2d:cd:73:a5:67:7d:1f:db:dd:ec:c6:c9:7a:29:55:
87:fb:15:4c:72:89:28:ea:5e:53:74:7c:6e:00:ca:59:e8:e8:
2a:ee:57:31:a3:bc:bb:5d:ff:be:a0:09:ac:a7:48:08:d1:0a:
49:97:ea:52:03:5e:ae:dd:c0:66:59:24:9b:34:35:7e:62:b4:
7a:87:e6:aa:1a:cd:fb:5f:01:4d:ad:a7:57:a8:31:36:7b:c4:
16:26:17:dc:4e:ec:10:8b:b5:6c:3b:a7:f0:b8:be:ef:ad:3a:
f8:dc:d7:90:29:72:cb:28:10:5d:6d:bb:a3:f1:7b:b0:f3:dc:
99:9a:98:8f:11:55:21:0a:88:f6:08:a6:a5:94:e9:5d:28:23:
09:91:0d:29:b8:d2:bf:05:c7:d7:95:59:99:38:ca:28:fa:7e:
9f:5c:04:a1:dd:77:2a:c2:f1:35:21:b2:50:7d:b3:03:97:ec:
3c:28:63:7f:09:1a:f1:43:85:70:c2:c6:5c:4c:16:68:5d:25:
3e:c5:95:22:e4:d1:eb:ed:78:16:49:22:16:b9:5a:e1:15:55:
ea:cf:18:62:b0:d5:8f:6f:32:a5:3f:b4:b3:b8:a0:1a:bf:d1:
34:f3:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:27 2025 by rpki-client