Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
File: gwn4FzfW8X58GtWISa_3HFAGTwQ.cer (raw, json)
Hash identifier: cfzNHfV9gh3YajS1GeY/hhkB7c/7ajnXBc6hcQF0rwU=
Subject key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369376238BFA60955DA1FA0F97473BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212944
IP: 89.35.78.0/23
IP: 185.163.51.0/24
IP: 2a07:dfc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:37:62:38:bf:a6:09:55:da:1f:a0:f9:74:73:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:47:30:11:2c:34:1d:4e:ba:4e:34:9b:7e:
fc:66:e5:25:29:8b:2e:65:17:f8:ce:78:6b:e4:99:
65:ff:4a:a3:d5:af:ea:f5:d2:a3:ef:72:91:f2:91:
fd:8c:c0:11:1b:c2:a7:16:65:37:13:55:58:0d:42:
35:33:6d:19:6e:4f:17:d0:04:6b:7c:4f:29:61:14:
42:79:ea:53:f1:63:c8:fd:33:c6:5c:95:5b:2e:95:
6e:ec:20:1b:5c:d0:58:5d:d4:52:13:0b:1c:91:85:
09:69:67:54:3f:96:48:e7:28:0c:3c:27:d0:5d:1c:
0d:d9:5f:a7:70:24:d1:eb:52:a9:33:23:30:4f:f9:
be:a3:e7:91:5c:b3:05:5a:b9:89:92:bc:ef:93:57:
ba:bf:19:1f:da:2e:eb:e2:a3:df:f3:d9:0f:ec:7c:
4d:5b:d2:c7:4c:55:fa:7a:8a:98:92:56:31:79:50:
30:6f:30:63:7c:02:19:33:a3:ee:f4:48:58:a9:ad:
5e:d4:78:b8:c7:cd:ba:de:2e:8c:51:4d:18:54:f1:
71:16:9a:4c:15:3c:49:00:d4:6b:22:9d:d1:8a:36:
1d:7c:53:91:bc:19:d1:12:79:45:88:eb:1c:36:07:
48:23:7c:32:f7:12:ce:52:26:a3:39:18:36:25:ac:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.78.0/23
185.163.51.0/24
IPv6:
2a07:dfc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212944
Signature Algorithm: sha256WithRSAEncryption
76:98:4c:99:76:86:ec:a0:77:e3:00:69:07:cf:6e:57:9f:1a:
28:b3:fb:3a:c1:ba:cc:81:60:b3:72:4d:a1:1d:d9:7c:6e:15:
96:83:7e:fc:61:71:a9:a7:4a:cc:dc:31:db:ef:c4:d5:9e:5f:
a6:18:c1:85:a2:cd:38:64:e1:06:00:48:a1:56:a9:d6:ed:6c:
37:b2:df:91:b5:f5:6c:cf:ed:2c:eb:23:8a:5f:f2:fe:b4:90:
47:eb:7a:9e:6a:cd:7f:02:d2:ee:be:8c:8a:0a:cb:17:95:7c:
4c:e3:68:28:f2:c3:9d:96:2a:04:69:6f:78:c1:51:82:1f:ef:
ee:ea:ee:30:f7:f7:10:78:a4:22:fe:9f:de:c8:13:2a:80:8e:
ea:bb:34:8a:fe:ee:d4:58:17:32:85:84:8b:b1:bf:be:b6:91:
bf:3e:ca:5d:d4:fe:80:f6:fb:17:0a:6d:80:18:29:0b:21:7f:
40:cc:43:18:ba:69:9f:6e:f0:85:7f:be:81:89:58:1c:06:cd:
43:8d:51:d3:6c:e3:61:81:a0:37:2d:b3:1f:10:aa:e0:b7:b2:
85:d0:6d:d5:11:52:27:4c:9a:2d:46:7f:3f:3e:9d:60:ff:80:
c8:8c:c7:2a:e9:8d:07:08:50:f1:11:15:16:52:d6:fb:92:7c:
25:98:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:11 2025 by rpki-client