Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
File: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer (raw, json)
Hash identifier: i1i/6iRMV6dKPOIb8Vxgrt1nZz7qbfqWgpIIUE4LAOw=
Subject key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC4727A8FC11E1B5D67D2758007813
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197422
IP: 91.224.148.0/23
IP: 185.119.168.0/22
IP: 2a03:7220::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:47:27:a8:fc:11:e1:b5:d6:7d:27:58:00:78:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:66:74:91:88:a9:7d:92:cf:f0:7a:59:f0:5b:
8e:d7:39:56:03:84:7a:57:10:9a:ea:f1:3a:97:0f:
7b:5e:b6:18:7c:f1:dc:52:f9:d2:e4:f5:35:1b:66:
63:ff:21:4e:2e:dd:9f:d7:ad:24:02:3c:e5:5f:2f:
fa:0c:19:07:a7:af:31:d5:12:69:a2:37:37:eb:31:
98:ac:f6:2e:a9:6c:da:ca:86:05:ec:c1:56:b3:d8:
b4:dd:ab:48:0f:dc:82:37:35:c2:8e:4e:fc:ad:d0:
fb:fc:d1:37:db:d1:2b:8a:0a:49:b0:85:71:80:bf:
41:58:21:75:b0:4f:2a:6d:84:9f:05:51:63:cf:5f:
6b:c1:9c:2e:ca:c0:f1:d2:48:2b:3e:cc:fc:ca:29:
b2:8a:ff:69:94:f0:cb:0a:8c:77:ae:84:57:34:ee:
7b:2b:28:64:fa:12:79:e3:fd:ed:cb:22:ba:b2:08:
9b:ea:ea:39:0d:f1:1b:20:de:30:97:31:e2:98:c5:
52:fd:3f:a8:76:fc:24:29:a1:5f:a5:2c:14:11:b7:
e9:16:6e:b8:ae:5e:28:52:18:cd:b0:52:f8:62:7c:
56:77:b6:e6:aa:85:ba:4c:e5:d7:38:5f:cb:ae:d0:
95:26:ee:f8:55:4c:9a:cd:44:be:38:20:bf:73:56:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.148.0/23
185.119.168.0/22
IPv6:
2a03:7220::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197422
Signature Algorithm: sha256WithRSAEncryption
13:f6:7b:73:14:f6:d8:31:cb:ce:c5:22:58:87:c9:91:6c:9e:
f4:0d:6d:9a:74:3f:9e:62:f5:ce:cb:5d:cd:9c:9d:09:ff:ec:
da:e0:66:1c:5a:25:ed:35:2c:2a:b3:40:c9:65:9b:41:61:80:
67:24:3b:72:68:19:ae:a0:38:7f:f0:83:72:e7:7b:3e:f0:52:
94:25:a1:46:12:c6:08:e2:2a:d4:e7:eb:da:51:0c:72:c9:55:
ac:a0:23:bd:c0:4f:66:64:1d:b0:0c:8f:57:8f:e9:c8:1c:9d:
ea:d8:e2:31:2d:f4:cb:f6:ca:eb:6d:30:d2:a8:2e:89:a6:21:
d8:c3:be:97:5b:5c:83:7c:00:b7:41:1b:b9:14:d6:99:22:31:
c6:1a:03:a5:a9:dd:73:0a:aa:68:17:a6:64:6b:d2:3d:65:e8:
91:2a:bd:dd:4a:f1:c1:29:42:38:60:92:20:30:71:c2:d2:53:
da:80:5b:28:69:7e:b7:74:47:c6:17:e3:97:e3:3e:48:a1:fe:
8e:51:5d:28:39:fb:19:77:d4:61:7d:1b:db:86:d0:5b:70:9d:
6d:96:e7:03:ce:ee:11:0c:3b:bb:89:5d:11:15:d5:6c:6d:70:
59:c2:27:c7:b0:62:25:e7:f0:19:6e:ac:9d:0c:e5:11:c6:89:
90:14:5d:8a
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQi/EcnqPwR4bXWfSdYAHgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzAwOTk2YzA4ODkwYmQ1ZTFlNmRkMDUyODIxN2QyOGY5ZDA5MzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mZ0kYipfZLP8HpZ8FuO1zlWA4R6
VxCa6vE6lw97XrYYfPHcUvnS5PU1G2Zj/yFOLt2f160kAjzlXy/6DBkHp68x1RJp
ojc36zGYrPYuqWzayoYF7MFWs9i03atID9yCNzXCjk78rdD7/NE329ErigpJsIVx
gL9BWCF1sE8qbYSfBVFjz19rwZwuysDx0kgrPsz8yimyiv9plPDLCox3roRXNO57
Kyhk+hJ54/3tyyK6sgib6uo5DfEbIN4wlzHimMVS/T+odvwkKaFfpSwUEbfpFm64
rl4oUhjNsFL4YnxWd7bmqoW6TOXXOF/LrtCVJu74VUyazUS+OCC/c1Y7LQIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFIMAmWwIiQvV4ebdBSghfSj50JNVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2MwMTMw
Ni02NmY1LTQyMDktOGM4OC0yZGI2OTFiMWQ0YWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvYzAxMzA2
LTY2ZjUtNDIwOS04Yzg4LTJkYjY5MWIxZDRhYi8xL2d3Q1piQWlKQzlYaDV0MEZL
Q0Y5S1BuUWsxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBW+CUAwQCuXeoMA0EAgACMAcDBQMqA3IgMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMDLjANBgkqhkiG9w0BAQsFAAOCAQEAE/Z7
cxT22DHLzsUiWIfJkWye9A1tmnQ/nmL1zstdzZydCf/s2uBmHFol7TUsKrNAyWWb
QWGAZyQ7cmgZrqA4f/CDcud7PvBSlCWhRhLGCOIq1Ofr2lEMcslVrKAjvcBPZmQd
sAyPV4/pyByd6tjiMS30y/bK620w0qguiaYh2MO+l1tcg3wAt0EbuRTWmSIxxhoD
pandcwqqaBemZGvSPWXokSq93UrxwSlCOGCSIDBxwtJT2oBbKGl+t3RHxhfjl+M+
SKH+jlFdKDn7GXfUYX0b24bQW3CdbZbnA87uEQw7u4ldERXVbG1wWcInx7BiJefw
GW6snQzlEcaJkBRdig==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:05 2025 by rpki-client