RPKI Certificate
Location: rpki.ripe.net/repository/DEFAULT/L4oC2eNHFEmN1qZSpQD-wiluhXU.cer (download)

Subject key identifier:   2F:8A:02:D9:E3:47:14:49:8D:D6:A6:52:A5:00:FE:C2:29:6E:85:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest:                 nostromo.heficed.net/repo/1124971/0/2F8A02D9E34714498DD6A652A500FEC2296E8575.mft
Subordinate resources:
    1: AS: 206164
    1: IP: 185.170.40.0/22
    2: IP: 2a0a:9f00::/29

--
$ openssl x509 -text -inform DER -in rpki.ripe.net/repository/DEFAULT/L4oC2eNHFEmN1qZSpQD-wiluhXU.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503709779695 (0x75477146ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 00:02:31 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=2f8a02d9e34714498dd6a652a500fec2296e8575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f8:6e:38:61:c2:fe:59:23:8e:b3:d6:0c:a9:
                    64:d3:f5:ea:66:93:c9:d4:a2:1b:d2:51:ab:55:a0:
                    5b:93:e1:c3:77:1c:39:03:18:cb:fa:3a:b2:21:e7:
                    15:96:42:63:ce:c8:6e:c1:d5:cd:04:84:3e:82:e4:
                    03:0e:24:6d:3c:f3:d9:63:99:cf:ac:68:9d:91:9d:
                    85:b1:ad:fe:88:68:9e:9e:5b:b2:37:72:23:60:77:
                    b5:93:e2:af:26:86:74:66:8e:03:ec:3d:02:d1:89:
                    ff:64:d6:06:d7:2d:48:3e:46:f5:0d:44:d4:83:59:
                    e9:1f:83:14:cf:7b:77:ac:c3:40:af:4a:a7:aa:18:
                    77:5a:b6:19:ec:68:1b:38:8d:5f:40:3b:1c:cf:b9:
                    29:2c:6c:2a:fa:33:01:4a:f7:53:d7:60:fe:f4:71:
                    a7:06:91:f6:d4:b9:0d:a6:a0:d8:3f:68:11:78:76:
                    51:49:49:95:a7:28:22:ba:19:a4:d8:6b:87:82:2f:
                    f5:58:2d:91:48:12:67:95:8b:9c:45:13:2c:7b:df:
                    30:fa:a1:19:a2:e8:d0:22:47:56:c9:74:79:0c:aa:
                    c5:60:15:e2:08:f3:86:5d:e8:d8:ca:3d:f1:87:49:
                    1c:d6:77:71:c0:76:f2:91:99:9e:13:77:bd:48:f3:
                    27:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
            X509v3 Authority Key Identifier: 
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access: 
                CA Repository - URI:rsync://nostromo.heficed.net/repo/1124971/0/
                1.3.6.1.5.5.7.48.10 - URI:rsync://nostromo.heficed.net/repo/1124971/0/2F8A02D9E34714498DD6A652A500FEC2296E8575.mft
                1.3.6.1.5.5.7.48.13 - URI:https://nostromo.heficed.net/rrdp/notification.xml

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: 1.3.6.1.5.5.7.14.2

            sbgp-ipAddrBlock: critical
                0.0.....0......(0
....0....*
..
            sbgp-autonomousSysNum: critical
                0...0....%T
    Signature Algorithm: sha256WithRSAEncryption
         61:31:a9:58:82:65:6a:f5:cc:e1:13:37:0d:fc:b8:7e:8c:4e:
         30:19:58:92:0b:dd:47:4f:8e:72:a0:2e:60:94:28:15:90:32:
         53:65:e5:38:ea:30:53:72:88:89:04:47:3d:3e:b1:3a:72:5b:
         da:d3:9a:cb:1b:89:1b:f9:a5:2f:55:b7:05:78:ec:6c:ec:5d:
         55:71:b2:ba:6f:45:81:03:48:ba:b9:cb:43:4f:8b:fd:23:e7:
         42:da:0e:38:7c:42:ef:2c:b2:8f:28:a1:40:ad:31:d1:52:07:
         cf:33:5e:1f:6d:15:2b:46:9b:39:16:98:95:3b:05:5f:d8:c7:
         c3:70:8d:f6:1e:2b:2f:ac:1a:62:4f:bf:8f:e2:22:2a:99:af:
         f8:8c:e1:06:84:d2:20:35:09:60:7d:a9:18:4b:da:b8:26:80:
         05:e2:43:6e:58:b9:d2:3f:eb:d3:7b:cf:2a:1b:b2:dd:ba:1e:
         78:fb:61:6c:ca:9a:45:f9:26:6e:6d:c5:0e:4e:27:d1:d2:e4:
         79:75:ca:e7:4f:a2:07:21:bf:4f:2e:d5:f8:59:f6:c9:7c:db:
         9e:c3:0f:0c:8e:13:15:aa:6f:73:4f:d8:03:e9:b3:00:40:65:
         33:7e:3e:a0:e2:92:8e:5b:44:b8:60:98:fa:c5:51:1d:11:a7:
         7f:a4:06:3e
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIFdUdxRu8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
MmE5NGE4ZGQ1NTRhZTcwMTA3MjA5OWM3MGI2NDA3NTU1ZGRkZTY2OTAeFw0yMTAx
MDEwMDAyMzFaFw0yMjA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDJmOGEwMmQ5ZTM0
NzE0NDk4ZGQ2YTY1MmE1MDBmZWMyMjk2ZTg1NzUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD1+G44YcL+WSOOs9YMqWTT9epmk8nUohvSUatVoFuT4cN3
HDkDGMv6OrIh5xWWQmPOyG7B1c0EhD6C5AMOJG0889ljmc+saJ2RnYWxrf6IaJ6e
W7I3ciNgd7WT4q8mhnRmjgPsPQLRif9k1gbXLUg+RvUNRNSDWekfgxTPe3esw0Cv
SqeqGHdathnsaBs4jV9AOxzPuSksbCr6MwFK91PXYP70cacGkfbUuQ2moNg/aBF4
dlFJSZWnKCK6GaTYa4eCL/VYLZFIEmeVi5xFEyx73zD6oRmi6NAiR1bJdHkMqsVg
FeII84Zd6NjKPfGHSRzWd3HAdvKRmZ4Td71I8yeXAgMBAAGjggJ7MIICdzAdBgNV
HQ4EFgQUL4oC2eNHFEmN1qZSpQD+wiluhXUwHwYDVR0jBBgwFoAUKpSo3VVK5wEH
IJnHC2QHVV3d5mkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwYAYI
KwYBBQUHAQEEVDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9hY2EvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNlcjCB
8AYIKwYBBQUHAQsEgeMwgeAwOAYIKwYBBQUHMAWGLHJzeW5jOi8vbm9zdHJvbW8u
aGVmaWNlZC5uZXQvcmVwby8xMTI0OTcxLzAvMGQGCCsGAQUFBzAKhlhyc3luYzov
L25vc3Ryb21vLmhlZmljZWQubmV0L3JlcG8vMTEyNDk3MS8wLzJGOEEwMkQ5RTM0
NzE0NDk4REQ2QTY1MkE1MDBGRUMyMjk2RTg1NzUubWZ0MD4GCCsGAQUFBzANhjJo
dHRwczovL25vc3Ryb21vLmhlZmljZWQubmV0L3JyZHAvbm90aWZpY2F0aW9uLnht
bDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEw
BgMEArmqKDANBAIAAjAHAwUDKgqfADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMD
JVQwDQYJKoZIhvcNAQELBQADggEBAGExqViCZWr1zOETNw38uH6MTjAZWJIL3UdP
jnKgLmCUKBWQMlNl5TjqMFNyiIkERz0+sTpyW9rTmssbiRv5pS9VtwV47GzsXVVx
srpvRYEDSLq5y0NPi/0j50LaDjh8Qu8sso8ooUCtMdFSB88zXh9tFStGmzkWmJU7
BV/Yx8NwjfYeKy+sGmJPv4/iIiqZr/iM4QaE0iA1CWB9qRhL2rgmgAXiQ25YudI/
69N7zyobst26Hnj7YWzKmkX5Jm5txQ5OJ9HS5Hl1yudPogchv08u1fhZ9sl8257D
DwyOExWqb3NP2APpswBAZTN+PqDiko5bRLhgmPrFUR0Rp3+kBj4=
-----END CERTIFICATE-----

Generated at Wed Mar 3 04:29:34 2021 by LibreSSL & rpki-client.