Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer
File: gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.cer (raw, json)
Hash identifier: CJx22gAjW9z7Me8piWQTxStfCMWkjoz2b50gzJkOt64=
Subject key identifier: 83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A1C896DF2D6C6ABA577002F7FCAB2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48745
IP: 91.212.17.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1c:89:6d:f2:d6:c6:ab:a5:77:00:2f:7f:ca:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83020637e89655e299d91843769254af07714994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d8:91:40:32:37:05:1f:ba:21:89:9b:23:06:
5e:28:08:b2:7e:b8:ce:25:73:14:a3:4c:81:7a:c6:
38:1c:e8:a3:5d:d6:61:e7:a5:0d:ab:b9:a3:96:e2:
ff:cc:2c:18:60:3f:03:72:d9:82:0a:f3:94:c3:44:
f8:dc:b2:3d:34:f0:e7:3b:22:e1:eb:bd:b9:3d:48:
ba:a2:71:d4:46:21:f6:7a:7a:06:ac:ac:ec:bd:77:
53:2e:0e:7e:b5:3d:99:13:a8:31:c9:ef:a5:59:62:
e8:ee:fc:d1:7e:63:56:97:4d:0a:1f:09:65:25:73:
ba:fb:e4:1f:95:79:c4:84:f9:e7:5d:76:19:82:b7:
e4:6a:cb:56:ac:da:2b:9c:fb:f9:68:bf:d8:cf:d9:
d6:7c:bd:2a:66:54:08:fb:64:bb:ab:72:d2:b6:a9:
c5:a0:af:5d:cd:35:bd:45:20:a9:66:1a:54:22:31:
31:81:b2:f4:02:a8:ee:f4:23:58:d0:83:46:34:89:
9a:52:68:6a:1c:52:b2:22:d9:29:f3:23:2e:60:4b:
07:4d:06:80:56:47:7e:38:8f:7c:b9:f9:5a:5f:03:
fa:91:c2:7a:12:e2:1d:ab:71:ef:99:f5:df:c0:1c:
99:d2:d8:cb:67:39:af:15:85:31:1d:5e:4e:37:5a:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:02:06:37:E8:96:55:E2:99:D9:18:43:76:92:54:AF:07:71:49:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/521d12-fe7a-4d94-8fa9-b2bfac3b3204/1/gwIGN-iWVeKZ2RhDdpJUrwdxSZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.17.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48745
Signature Algorithm: sha256WithRSAEncryption
5e:b6:6f:e2:f1:bf:e0:7b:fd:d4:61:fb:93:a1:bf:46:b1:3e:
d1:ed:73:d3:a9:1b:54:c7:58:69:00:90:b0:0d:b0:27:44:c6:
09:18:4c:a7:3c:ce:04:c1:f9:db:d6:96:d5:30:79:05:dd:f1:
e2:6d:96:22:17:1d:7e:bf:a3:e4:4f:7d:06:f9:1b:af:2d:41:
50:08:96:2c:a5:82:a2:62:50:0b:64:80:2f:e5:a7:d2:1e:f9:
3f:d7:e8:23:c5:cc:b6:60:59:0e:67:9c:07:4d:73:9f:34:4f:
80:44:ff:fc:d5:b1:e3:8a:e7:90:e8:2d:9c:cb:d7:36:82:84:
b8:02:70:c9:46:e1:b9:e0:11:2c:7a:e6:18:82:4e:76:b6:20:
97:14:d6:f1:53:92:a5:ae:a5:19:8e:95:87:83:a9:ca:24:64:
ef:43:3f:0a:37:a2:ce:7b:88:75:3d:2d:73:bf:3f:b1:ae:4a:
69:77:2e:f3:b9:f5:7f:41:2d:59:d0:52:94:e3:9d:63:e2:28:
4a:13:4c:c0:60:b3:87:59:c2:ee:ea:f0:ad:b6:68:ec:6d:09:
ac:c0:84:66:45:cd:e4:ec:a5:cf:cf:c6:08:6f:5e:34:c4:99:
a7:9c:20:58:5a:d1:09:e1:d1:8a:92:a5:6a:41:f7:1a:64:d9:
ad:e3:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:00 2025 by rpki-client