Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
File: agPhC26juPNiz7I671icd3cefso.cer (raw, json)
Hash identifier: 92McWGzxO2UMBy3oxN6HJrIk3dftOtlalWR36QpKd/s=
Subject key identifier: 6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B24FBD98B2B17292FED676D5CECB9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.114.125.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4f:bd:98:b2:b1:72:92:fe:d6:76:d5:ce:cb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:f2:d0:d8:65:02:4a:75:d3:7f:40:da:96:
04:80:34:1b:59:22:d8:ee:d9:2d:91:41:7f:4b:1a:
6d:75:7a:44:2c:54:e9:99:af:61:74:86:0f:42:66:
35:b2:d4:be:8b:d3:af:ab:27:ae:b4:4e:77:52:86:
c2:af:63:21:0a:ea:12:88:3f:5d:0f:b4:eb:de:4d:
ed:b1:f2:b0:fa:fd:10:9f:75:f5:45:3f:83:01:bd:
94:3d:ae:23:bc:ef:a6:df:32:55:da:98:99:67:d4:
f4:a1:f3:3c:a2:36:27:e4:22:df:71:29:e0:41:e2:
a7:13:9e:10:c4:74:16:02:75:38:88:1f:80:48:cc:
67:46:a8:8c:45:b8:79:76:f4:de:ce:aa:1e:6f:49:
74:75:7a:1d:c2:1d:d7:31:af:f3:29:9c:62:ca:4a:
91:14:54:13:c0:46:ce:ec:2f:e6:37:63:29:42:f6:
eb:2c:40:a5:70:a9:c7:bc:54:26:6b:75:c7:15:69:
57:da:da:b7:73:e8:67:ba:9a:12:dc:af:60:e4:18:
45:a4:d1:0f:3b:09:74:aa:37:cc:88:ce:88:46:cf:
bc:c7:d0:99:aa:ce:da:49:a8:a6:66:a6:ea:6e:58:
32:89:02:47:c2:1c:08:20:63:23:5b:d3:3b:a2:95:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.125.0/24
Signature Algorithm: sha256WithRSAEncryption
77:12:a5:dc:24:74:10:2b:55:06:b0:c4:6b:29:7d:2d:7f:92:
3f:fa:fd:c4:e7:b2:3e:01:da:64:fd:6d:d3:fe:bd:5f:41:63:
9d:00:74:0f:88:b7:54:e4:66:0a:47:d1:34:e0:06:3d:89:63:
f3:b3:63:05:47:24:ff:7f:5e:01:b5:a3:52:cc:2f:97:2e:ce:
54:19:92:3c:39:34:9d:21:80:34:13:a2:f4:2e:12:b2:75:4d:
bc:c0:0e:63:ac:91:ff:e1:25:f7:c2:53:eb:69:82:eb:5b:19:
f6:13:14:f9:5c:9a:15:37:1c:d8:93:ff:a1:8c:81:12:6c:04:
79:6a:5f:a9:a7:9d:6e:6b:5a:d6:13:f5:ec:3c:71:6c:f2:41:
96:79:98:92:42:1b:a2:64:63:88:6a:de:76:1c:a2:98:b3:66:
b4:05:93:7c:97:74:6e:cd:a0:b1:f7:46:04:3c:6c:fa:d7:a3:
38:f7:1d:0c:30:39:af:13:d9:74:11:13:76:c4:49:93:63:dc:
64:2b:f5:e3:9b:21:f0:85:ed:05:33:5a:9e:44:a2:94:de:66:
03:89:12:67:03:1e:1f:7f:52:40:cb:4f:ea:0b:3f:95:c6:e9:
9d:82:56:e6:f1:14:4c:f9:c7:25:bf:4a:44:55:5d:5b:52:32:
08:ef:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:34 2025 by rpki-client on console.sobornost.net