Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/giKx_lqaAWNQKFrAeI08yrPrORk.cer
File: giKx_lqaAWNQKFrAeI08yrPrORk.cer (raw, json)
Hash identifier: zeb2kKF5eZtjRgC4azf04ahjeL/nRDUjC6ViQGQPPyU=
Subject key identifier: 82:22:B1:FE:5A:9A:01:63:50:28:5A:C0:78:8D:3C:CA:B3:EB:39:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FAEA78D814C827E4765BAD30CB0BF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202375
IP: 45.135.196.0/22
IP: 185.243.92.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ea:78:d8:14:c8:27:e4:76:5b:ad:30:cb:0b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8222b1fe5a9a016350285ac0788d3ccab3eb3919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6b:88:f9:eb:36:41:c5:15:69:d9:cb:27:5f:
c3:ea:60:08:e0:83:9d:25:9e:65:dc:82:62:f2:c3:
f4:d8:3e:a9:1a:19:8f:69:32:b3:fc:9d:b1:13:f6:
15:40:19:bc:77:d8:2c:f9:5d:1a:66:9d:29:00:13:
d8:ed:26:90:78:27:e0:f3:79:51:3c:38:45:1e:68:
b4:ee:a5:5c:cb:20:6f:a7:b4:71:c5:17:69:34:64:
71:0c:66:b8:50:48:81:28:17:7a:97:c5:1b:68:79:
eb:8f:4b:05:50:a5:63:45:0e:c3:df:96:33:3c:43:
88:c0:20:b7:c8:19:46:fd:e7:4c:c2:e7:f4:9a:99:
a3:45:25:30:7c:99:d7:bf:af:80:fc:39:35:ed:ff:
3c:84:99:85:1a:7f:8d:95:3c:7b:56:04:a3:72:18:
99:a6:81:54:93:5c:f0:98:16:99:68:16:45:cd:89:
26:28:2e:46:bd:c6:e3:96:a7:01:25:8a:db:26:04:
ac:78:83:29:3a:21:bb:b9:76:66:ca:05:95:e7:90:
f5:9d:19:39:3d:44:a0:bd:2a:04:18:de:8f:46:22:
d5:e2:9c:f9:44:16:1f:d2:d7:9a:49:4e:85:06:c5:
90:17:ea:c7:67:6f:f9:6c:b5:08:7b:b4:c0:6f:8e:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:22:B1:FE:5A:9A:01:63:50:28:5A:C0:78:8D:3C:CA:B3:EB:39:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/220cae-8459-4870-a6a2-30a16485f5c4/1/giKx_lqaAWNQKFrAeI08yrPrORk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.196.0/22
185.243.92.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202375
Signature Algorithm: sha256WithRSAEncryption
6b:15:44:9e:96:44:a5:e4:60:7d:09:9c:eb:17:a0:31:f5:cb:
a2:1b:4f:92:4b:24:45:b6:fc:70:74:47:07:82:ad:90:dc:39:
14:e7:2e:40:17:5e:a5:be:dd:e3:35:69:21:e1:0b:5a:1d:9b:
63:2a:aa:32:da:21:d9:78:be:9d:cc:99:78:a9:be:81:c3:1c:
63:02:e4:4e:5e:72:0f:da:5e:74:84:32:4d:fa:22:a5:34:20:
8f:f6:e5:df:73:7c:47:db:12:30:ba:f3:6b:e3:d9:09:d8:df:
eb:f2:a0:06:86:ab:ca:6a:79:72:8b:8b:ba:7a:a6:e2:71:20:
c0:52:9c:80:81:a4:94:f0:31:93:a5:51:ce:cb:00:d4:d9:4c:
60:bc:e1:23:95:81:74:b1:fa:ee:85:37:ed:d9:f6:05:d4:7f:
7b:e2:20:25:33:40:5b:f9:53:31:7f:27:54:d9:6b:43:78:84:
40:20:e6:ad:0f:93:28:d3:1d:90:e3:da:52:94:92:cf:15:88:
0a:92:9b:e3:87:1a:0f:0d:9f:3d:b6:5c:0f:32:c1:c7:a2:99:
32:a7:0e:2d:8a:c9:ad:c1:66:20:5e:75:1a:44:4c:0b:2c:6d:
70:45:18:2a:b6:e4:45:ae:8a:4c:b5:7e:ac:a2:a9:db:71:06:
d0:0b:af:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:39 2025 by rpki-client