Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ggYltmnomnWueN8AgdbwG2fHs88.cer
File: ggYltmnomnWueN8AgdbwG2fHs88.cer (raw, json)
Hash identifier: 8TaBi5MxB2huR+4YevR1cz3VCQMz/FC9mkHPQC/Kl70=
Subject key identifier: 82:06:25:B6:69:E8:9A:75:AE:78:DF:00:81:D6:F0:1B:67:C7:B3:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F49C5C0CDAF62A7439EF9F6EE99A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.110.207.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:49:c5:c0:cd:af:62:a7:43:9e:f9:f6:ee:99:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=820625b669e89a75ae78df0081d6f01b67c7b3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c4:e5:7b:01:0f:2d:73:eb:04:61:dc:f5:73:
cd:8a:b5:f5:04:a0:fa:46:21:7a:74:7c:1a:4a:c1:
1d:59:af:67:5f:ea:a4:ab:37:46:bf:85:52:16:01:
af:2b:32:f6:9c:b4:7a:d6:b2:ef:86:52:a9:3e:8e:
c4:7c:20:59:98:d7:e3:be:84:53:09:1b:18:d0:d0:
94:81:66:ba:51:a1:ce:0c:2b:9c:4c:53:79:ca:7c:
52:9c:d0:d5:ef:09:74:97:07:54:21:87:03:a4:45:
dc:42:03:08:2e:a9:6b:bf:38:1b:48:1a:d2:ac:ad:
0d:28:9c:a0:9e:cf:2f:90:e7:f9:88:dd:1c:49:bf:
ad:88:fd:66:4b:4c:4f:8e:5a:bf:0e:5b:e1:9c:77:
a3:f4:d2:76:ad:3e:fa:fa:18:dc:00:f3:5f:f7:d7:
3c:14:32:a9:1c:f7:f9:fd:30:0a:39:4f:b7:17:0a:
ed:fa:c5:a2:34:40:a5:4f:13:ef:7f:aa:88:a1:0d:
53:2b:30:71:97:94:d4:73:7e:fa:a6:8a:54:a0:ae:
32:77:1f:ae:44:53:a1:2f:0c:6f:7c:74:62:84:e9:
cb:b2:fc:37:93:74:b1:74:ea:88:0b:3f:60:a9:8d:
ea:8f:fe:e2:21:0f:c4:5d:7d:67:d6:b0:a3:18:b3:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:06:25:B6:69:E8:9A:75:AE:78:DF:00:81:D6:F0:1B:67:C7:B3:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/50013a-fb19-45cf-ad8a-326c1e370bcf/1/ggYltmnomnWueN8AgdbwG2fHs88.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:2b:32:fc:25:d6:b3:15:a3:6a:dc:92:f5:f1:e8:72:d4:85:
de:9f:1f:5a:6e:7a:78:21:2a:4b:9d:84:37:78:5e:05:68:7e:
b5:2c:f0:ea:a3:dd:90:83:14:65:da:6b:a3:23:9c:99:df:b9:
bb:b5:dc:ac:99:78:29:24:35:fc:9b:20:97:00:44:2d:fc:73:
1e:43:80:92:5e:50:96:37:56:fb:b6:d8:f2:51:ff:2a:1d:f9:
18:b3:37:0b:c1:fe:db:1b:f1:1e:5f:72:7e:7e:0f:f4:44:70:
b8:7c:de:3e:31:f8:09:e2:59:b6:ec:82:0b:38:38:3f:e4:2a:
7a:27:f3:08:3d:6f:27:86:bc:75:c0:84:67:87:3a:69:30:29:
94:d8:c3:c5:92:27:98:8f:f7:3c:2b:c3:b2:14:70:73:91:d4:
a4:66:e7:ac:aa:e3:b7:64:9f:41:7b:ac:b7:7e:ac:58:0f:01:
fc:19:6f:d2:64:40:4e:a6:86:cc:ee:05:85:7e:80:b4:4d:b8:
bc:23:ca:ce:19:9b:dc:04:3c:3b:c0:7d:ea:5a:71:76:9f:4c:
33:65:e8:46:6e:86:cc:8a:1d:c9:95:2f:90:cd:31:bf:5d:40:
8b:77:53:ec:2a:70:63:f7:ee:4e:f7:9d:37:db:c0:9d:f4:66:
3b:13:65:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:58 2025 by rpki-client