Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aguD3NU5lRLJK1kcU452-_8S26o.cer
File: aguD3NU5lRLJK1kcU452-_8S26o.cer (raw, json)
Hash identifier: 089sUMkTvqqTIfPGKngnd9dmxjih7duAydZSX0+m/fI=
Subject key identifier: 6A:0B:83:DC:D5:39:95:12:C9:2B:59:1C:53:8E:76:FB:FF:12:DB:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A53884DEB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/66b11f-2643-48aa-b168-b6b76ec19a11/1/aguD3NU5lRLJK1kcU452-_8S26o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/66b11f-2643-48aa-b168-b6b76ec19a11/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:59:26 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 212294
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709617835703 (0xa53884deb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:59:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a0b83dcd5399512c92b591c538e76fbff12dbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:43:3d:81:0a:27:4d:84:0a:68:85:e0:c3:8f:
0e:55:16:15:39:72:4d:e9:f9:21:c7:f4:a1:4e:d5:
58:68:f4:cd:8b:8f:dc:9c:1b:44:ba:20:64:09:ac:
46:f3:70:aa:1c:c6:c9:1c:24:0d:88:b6:4c:4c:b9:
39:7a:7c:4e:f7:1d:ef:bc:4a:5b:25:40:c3:a9:72:
58:2f:e3:71:ed:b5:2e:ca:9d:fb:b0:16:ac:33:b6:
3b:05:5d:81:d4:59:b5:20:48:74:30:8f:dd:fa:74:
3a:ee:a1:af:f3:6a:57:e3:a3:c2:85:66:32:83:76:
df:1f:94:a5:bd:85:f6:2e:01:3f:67:83:99:59:2a:
53:c9:ac:a4:df:a4:2d:69:d3:05:df:cc:80:1d:97:
9c:c9:fd:f5:e0:df:63:e2:df:e0:d9:57:9a:8f:0d:
53:1c:ec:5d:c8:7e:fe:80:e2:5b:c0:00:d3:25:60:
d3:c3:fa:3f:01:4c:22:c0:a0:6e:f4:7f:93:af:31:
7f:72:41:17:6f:85:ee:30:f2:06:8f:03:77:c3:64:
cd:cc:31:61:f0:c1:08:43:8e:fd:d3:72:af:ad:1f:
7b:46:09:08:50:70:2c:d6:65:d2:3e:60:c5:e9:a3:
80:a7:fe:5c:3e:49:1c:21:5d:ab:d3:83:9f:ee:8c:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0B:83:DC:D5:39:95:12:C9:2B:59:1C:53:8E:76:FB:FF:12:DB:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/66b11f-2643-48aa-b168-b6b76ec19a11/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/66b11f-2643-48aa-b168-b6b76ec19a11/1/aguD3NU5lRLJK1kcU452-_8S26o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212294
Signature Algorithm: sha256WithRSAEncryption
1c:44:f2:09:f3:2e:40:d7:e8:55:86:c0:e0:6a:50:e5:45:74:
fc:46:50:44:51:ba:98:d4:af:f0:02:e8:14:85:e3:b0:16:0b:
8c:e7:af:f1:81:2e:d1:55:7c:b3:cf:4c:1f:a6:2e:30:99:36:
af:5b:59:7d:fc:8f:1b:a0:94:64:a3:af:2a:a0:95:3e:2f:3d:
d1:cc:44:a1:ed:3f:dd:0f:60:0a:06:24:b0:7f:ce:50:db:6a:
51:89:f0:1f:d7:9f:29:05:65:43:ce:01:42:05:94:a3:d4:2f:
d8:d0:0c:b8:71:23:8c:89:88:ad:9a:82:b3:f4:c6:8c:44:2d:
e0:82:af:8f:5a:cb:8f:07:ca:07:fb:48:6f:d7:4a:59:f9:9d:
44:01:2a:eb:b6:d5:c4:81:fa:bf:e7:9b:ec:e5:8b:fc:9f:29:
dd:3d:7d:fe:a2:2f:a1:f8:34:8d:73:e5:5a:97:6a:b9:71:11:
98:8d:4b:81:f2:95:82:09:dd:09:1c:e7:cd:1f:62:fa:c5:36:
99:67:6d:26:da:c4:81:d4:5e:d1:9a:a4:89:f1:25:49:b0:ea:
13:08:e3:43:29:26:ba:18:9f:be:78:1a:3f:55:01:99:7c:75:
19:be:b9:59:74:33:70:b2:e0:22:3e:05:a2:6b:21:41:c8:02:
29:1d:90:a1
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIGAKU4hN63MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMTA1OTI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2YTBiODNkY2Q1
Mzk5NTEyYzkyYjU5MWM1MzhlNzZmYmZmMTJkYmFhMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA5EM9gQonTYQKaIXgw48OVRYVOXJN6fkhx/ShTtVYaPTN
i4/cnBtEuiBkCaxG83CqHMbJHCQNiLZMTLk5enxO9x3vvEpbJUDDqXJYL+Nx7bUu
yp37sBasM7Y7BV2B1Fm1IEh0MI/d+nQ67qGv82pX46PChWYyg3bfH5SlvYX2LgE/
Z4OZWSpTyayk36QtadMF38yAHZecyf314N9j4t/g2Veajw1THOxdyH7+gOJbwADT
JWDTw/o/AUwiwKBu9H+TrzF/ckEXb4XuMPIGjwN3w2TNzDFh8MEIQ47903KvrR97
RgkIUHAs1mXSPmDF6aOAp/5cPkkcIV2r04Of7oz9OwIDAQABo4ICfzCCAnswHQYD
VR0OBBYEFGoLg9zVOZUSyStZHFOOdvv/EtuqMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzY2YjExZi0yNjQzLTQ4YWEt
YjE2OC1iNmI3NmVjMTlhMTEvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNjZiMTFmLTI2NDMtNDhhYS1i
MTY4LWI2Yjc2ZWMxOWExMS8xL2FndUQzTlU1bFJMSksxa2NVNDUyLV84UzI2by5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwM9RjANBgkqhkiG9w0BAQsFAAOCAQEAHETyCfMuQNfoVYbA4GpQ5UV0/EZQ
RFG6mNSv8ALoFIXjsBYLjOev8YEu0VV8s89MH6YuMJk2r1tZffyPG6CUZKOvKqCV
Pi890cxEoe0/3Q9gCgYksH/OUNtqUYnwH9efKQVlQ84BQgWUo9Qv2NAMuHEjjImI
rZqCs/TGjEQt4IKvj1rLjwfKB/tIb9dKWfmdRAEq67bVxIH6v+eb7OWL/J8p3T19
/qIvofg0jXPlWpdquXERmI1LgfKVggndCRznzR9i+sU2mWdtJtrEgdRe0ZqkifEl
SbDqEwjjQykmuhifvngaP1UBmXx1Gb65WXQzcLLgIj4FomshQcgCKR2QoQ==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:16 2025 by rpki-client