Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gvq72Ih6kieJRewu74JDoSlq33g.cer
File: Gvq72Ih6kieJRewu74JDoSlq33g.cer (raw, json)
Hash identifier: 3dCE2z9YW9uMoPBoxga3nQAm76Ylz4oH/OQLQAeSaF4=
Subject key identifier: 1A:FA:BB:D8:88:7A:92:27:89:45:EC:2E:EF:82:43:A1:29:6A:DF:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DDFE8E94B308A6B10EDE3E685CA65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/Gvq72Ih6kieJRewu74JDoSlq33g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48256
IP: 91.223.29.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:df:e8:e9:4b:30:8a:6b:10:ed:e3:e6:85:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1afabbd8887a92278945ec2eef8243a1296adf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:88:84:88:26:93:33:5e:b8:e1:fd:eb:24:
0c:da:92:7a:26:94:2a:57:af:b6:cb:ce:bb:db:0e:
b7:1c:41:cc:b1:a5:23:dc:c5:b5:69:5a:71:83:05:
f0:c1:5a:1c:da:ff:22:f5:b2:c9:7c:4b:39:39:57:
48:d7:76:41:6d:b5:bf:ca:3c:17:8f:f6:5e:ce:0a:
29:06:c8:dc:29:c6:b3:b8:bd:b0:c7:f3:ec:21:7e:
f3:c1:37:1d:eb:b4:b0:34:1c:14:f7:cf:94:7e:82:
cf:62:10:32:7b:0b:9d:67:50:2e:73:c4:b1:2b:c2:
8f:61:86:05:5f:bf:7f:d8:54:60:14:89:ae:8d:f5:
89:44:c2:27:2b:40:3e:b7:e9:80:27:04:08:32:c6:
cc:64:e4:37:b5:b6:38:32:43:45:73:0e:11:3b:2b:
61:d4:9e:38:b0:d4:5a:49:9d:36:85:67:78:ba:1f:
59:16:48:af:f9:7f:cf:38:86:eb:af:e8:20:22:69:
93:47:04:52:ca:56:cf:c2:90:b3:d6:b2:99:35:eb:
d6:8b:04:76:f1:44:c2:aa:5d:72:ec:fa:28:a9:5e:
4d:bf:50:4b:c8:d1:bf:d6:4e:92:9b:a4:b2:f0:86:
b0:4a:71:33:3f:85:26:44:2d:40:2d:fd:22:a7:69:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FA:BB:D8:88:7A:92:27:89:45:EC:2E:EF:82:43:A1:29:6A:DF:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/df7a4c-2548-40dd-900e-516065b6cfa5/1/Gvq72Ih6kieJRewu74JDoSlq33g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.29.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48256
Signature Algorithm: sha256WithRSAEncryption
37:51:3f:c5:0b:2e:97:25:d4:6f:84:58:5c:74:21:ea:51:39:
89:94:9b:9e:5a:7a:52:97:ed:a2:57:f8:80:68:fe:fd:6b:d6:
76:47:2f:4c:46:09:24:45:d3:22:4c:bc:02:1d:a5:30:c2:7a:
ff:10:cd:7f:c0:c0:00:d2:e9:6f:dd:12:5d:79:2f:98:a7:f5:
a6:60:a8:98:c4:84:e7:d7:3f:41:76:29:e0:b2:06:65:51:65:
f5:2d:7c:6f:3d:ac:77:53:4f:cb:e1:2b:d0:1e:78:96:89:b8:
0b:db:1e:26:dd:70:f2:34:c6:a9:b1:fd:20:04:7e:ed:79:57:
15:d1:a4:33:56:ec:b6:4b:d1:f4:a3:7c:2d:b6:8f:24:8d:ec:
d0:8a:60:95:4d:a9:51:5d:d6:d2:0a:89:93:48:7c:b4:68:75:
58:4a:35:33:0c:8b:4a:23:84:f3:68:d7:9f:07:a8:f3:a1:76:
92:36:c2:8e:cc:43:ac:0f:2c:91:7c:b5:3a:c1:b5:ca:fa:ca:
55:b1:14:71:21:c9:cf:88:68:90:6b:07:17:8b:9c:e2:c8:c8:
a9:b7:a1:9c:50:55:4f:b7:0b:53:75:f0:34:ba:63:3d:83:9e:
f8:68:83:c7:4f:52:2b:1e:c5:54:4a:a1:9f:77:79:a2:e1:33:
be:66:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:11 2025 by rpki-client on console.sobornost.net