Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer (raw, json)
Hash identifier: mIxiI5Ffm2hkvWaiKPUDjlrgzypD+/pw5+UKDgCNz4s=
Subject key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AB8DD77ED37BD014282F28B2DBBB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 207931
IP: 176.121.0.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:b8:dd:77:ed:37:bd:01:42:82:f2:8b:2d:bb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:52:ca:57:f4:12:c4:f5:c5:d2:e9:8e:6f:6b:
5c:f6:95:0b:cb:9a:5f:32:d2:00:44:35:16:92:1d:
41:3d:03:ee:1b:bc:a2:7c:f0:0b:9e:fc:87:c7:2b:
b4:76:ee:e7:84:45:55:2c:a7:82:ec:41:cf:ce:21:
b3:27:8d:95:86:59:6b:e1:46:20:2e:08:c5:20:15:
6c:32:47:a6:aa:0d:0e:20:a7:19:f3:db:cb:ef:7a:
f9:51:dc:0e:ef:48:80:d4:62:e0:63:42:9f:55:2a:
fe:f9:c8:b2:7f:7a:dc:63:7e:ae:17:ee:2e:24:cf:
b5:b1:c6:37:1a:e0:76:2c:8e:d8:4a:78:4b:15:35:
56:c7:02:e2:ab:fa:7c:c5:27:a4:fc:17:5d:c3:98:
76:b8:f3:f9:59:1c:fa:9c:c5:3c:5c:f9:94:7c:8c:
6d:85:25:60:44:78:b3:e5:28:77:d5:01:19:39:73:
d9:73:10:2e:de:fd:64:73:03:1f:83:15:74:ea:8f:
57:3e:cf:36:a0:85:2e:dd:cb:15:eb:fe:3d:4d:39:
9c:a0:40:d4:d4:8e:c6:15:e2:fc:54:a0:b2:5f:0c:
6c:ce:fb:c5:83:ee:9c:a2:f4:69:0b:c2:0c:d1:ac:
4b:82:e1:d2:b9:a8:8d:2a:df:f0:ce:51:ae:e5:5c:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.121.0.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207931
Signature Algorithm: sha256WithRSAEncryption
15:68:28:6b:6b:fe:2d:e9:dd:85:3b:91:02:9b:16:cf:39:89:
21:2d:6f:12:be:72:79:da:36:c9:2a:d6:e0:73:d7:9c:2c:44:
e1:5b:c8:9a:6c:24:85:7a:ad:84:48:e4:bd:19:66:db:ff:d6:
e8:c9:99:af:dc:d4:e8:49:1e:3d:a4:99:35:dd:77:92:4b:ec:
15:81:f6:ec:16:1e:ef:61:78:dc:53:b5:eb:0b:64:19:d4:82:
d3:a3:4a:7e:64:69:46:44:4e:b0:89:dd:07:5c:73:40:ce:28:
90:4c:7f:a6:5a:d8:cd:0b:24:e0:cc:f5:1b:10:00:36:86:c2:
15:c9:4d:a2:72:45:8e:43:dd:16:96:4c:c2:19:01:dc:e5:20:
b3:d7:44:95:a5:a9:4c:9d:8d:de:99:5e:85:89:bf:41:17:e6:
8a:53:b5:78:19:1f:e2:f9:3a:56:4b:50:d9:ee:a5:ba:4b:c5:
d1:e6:ad:25:26:7a:f0:bf:1c:c2:2b:06:ec:9c:25:ae:ac:85:
9d:ad:a8:67:5e:dd:08:c6:a7:0e:ec:d2:62:3d:92:06:08:15:
c6:da:d2:89:ac:64:62:6a:f3:f5:e3:64:cb:d0:fc:0f:63:8f:
6e:79:8a:ef:0d:e3:68:d7:e8:47:f1:db:14:02:e9:4d:df:00:
f3:ff:55:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:22:12 2024 by rpki-client on console-ams.rpki-client.org