Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gWV7alecowapJrlTJ04UW7ejb_w.cer
File: gWV7alecowapJrlTJ04UW7ejb_w.cer (raw, json)
Hash identifier: aBvdiJFV6CE0b9vVtNaeGUb3l4gjpj6qm2ZPtuhw5f8=
Subject key identifier: 81:65:7B:6A:57:9C:A3:06:A9:26:B9:53:27:4E:14:5B:B7:A3:6F:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887DB2B1913A329658EDFEBE93B228C5D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/81657B6A579CA306A926B953274E145BB7A36FFC.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 20:00:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.8.203.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:b2:b1:91:3a:32:96:58:ed:fe:be:93:b2:28:c5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 20:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81657b6a579ca306a926b953274e145bb7a36ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:e7:64:32:75:47:8f:8d:6f:ac:ea:89:ff:
4c:74:29:6a:99:bb:06:a4:88:f6:bf:a5:24:01:08:
a4:3a:80:fe:82:d4:9f:1a:cd:8c:30:82:fb:3a:c6:
63:2d:dc:b8:e4:2f:14:a9:65:a9:30:78:be:9b:2f:
aa:25:f6:47:9e:86:1e:f1:3b:20:cf:32:13:99:4f:
db:b4:e5:e2:3f:82:96:be:58:63:6c:01:eb:f9:f7:
8f:36:8a:74:e4:0f:50:a2:f3:40:36:77:94:a8:c4:
e8:f0:07:60:bf:b6:e5:03:96:9a:99:f6:98:2a:7c:
e9:79:2c:6a:1f:41:e6:c0:b9:da:21:e3:cb:29:06:
7e:05:5f:61:3f:5c:36:dc:91:3d:20:4d:ca:3b:68:
83:4e:02:58:24:8f:30:bb:b8:59:0f:3d:2d:65:89:
a5:fd:62:3b:6b:cb:e7:15:0d:73:91:83:af:99:b0:
95:08:08:87:1e:4c:3d:26:0d:59:e1:c8:f8:b6:39:
62:3b:c8:af:0e:42:2a:27:bf:1e:07:90:66:9c:69:
77:00:7a:de:5d:78:f6:a2:7a:6d:08:07:2f:8c:ed:
ad:08:6e:4c:1c:9f:61:26:b7:22:78:ca:0f:02:b9:
7e:02:45:76:96:df:40:0b:07:51:ae:68:25:b7:e3:
01:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:65:7B:6A:57:9C:A3:06:A9:26:B9:53:27:4E:14:5B:B7:A3:6F:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/81657B6A579CA306A926B953274E145BB7A36FFC.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
19:54:fe:90:b6:ac:d1:c5:a0:64:58:a7:4f:ee:0c:b1:e2:d3:
f2:56:c1:63:c2:0b:b2:21:21:02:92:04:33:cc:9d:11:f4:8d:
37:a0:57:82:1a:c5:e6:fb:31:58:d7:ca:d8:ab:e1:0d:a8:94:
c9:0a:49:d0:14:3c:20:aa:33:67:a9:59:91:4d:eb:00:25:df:
0a:8a:30:ff:e0:ad:42:4a:74:db:24:74:2b:0c:29:d3:c3:d2:
d9:29:5b:21:c8:35:b4:93:49:aa:3d:99:50:9c:59:f2:33:22:
c2:5a:0d:a0:f7:e3:0f:e1:7f:6e:e9:b2:fc:c3:d3:4c:18:f0:
7e:e3:5f:bd:7b:47:84:53:fc:11:bd:02:9a:28:a1:5e:63:c5:
56:0e:05:db:03:14:a8:56:5a:64:46:72:78:fa:25:5c:1e:77:
8b:3e:3e:60:71:21:e4:40:fa:cb:3a:14:7b:be:58:a6:1e:90:
9d:fc:a8:20:0a:ef:db:01:09:d8:e9:2d:47:f2:f1:e9:72:7e:
e6:e9:47:fd:8b:0c:07:9d:cf:01:1f:55:3a:2e:a4:29:02:91:
58:f6:23:ad:0a:6f:69:c9:2e:31:d1:2f:75:82:10:8c:8f:ef:
1c:0e:d7:c1:6e:0b:02:55:a6:c8:9d:75:a5:0b:92:32:76:58:
3d:2c:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:22 2025 by rpki-client