Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer
File: BA930DA42AF780577BA736F0E22EEAE94F8DB293.cer (raw, json)
Hash identifier: ySMMy4TBuYNbyQxXJdlQx6jQiPxM9HHKMegkQ+yv4oU=
Subject key identifier: BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4E6128FE866FB32ADDFB0A70AA338046B969A39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
caRepository: rsync://rpki.cc/repo/MythicalKitten/7/
Notify URL: https://rpki.cc/rrdp/notification.xml
Certificate not before: Sat 06 Apr 2024 16:10:27 +0000
Certificate not after: Sat 05 Apr 2025 16:15:27 +0000
Subordinate resources: IP: 2a06:a005:b70:: -- 2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
IP: 2a06:a005:bd0:: -- 2a06:a005:bff:ffff:ffff:ffff:ffff:ffff
IP: 2a06:a005:d41::/48
IP: 2a06:a005:1040::/43
IP: 2a06:a005:1490:: -- 2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
IP: 2a06:a005:1600::/44
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:61:28:fe:86:6f:b3:2a:dd:fb:0a:70:aa:33:80:46:b9:69:a3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Apr 6 16:10:27 2024 GMT
Not After : Apr 5 16:15:27 2025 GMT
Subject: CN=BA930DA42AF780577BA736F0E22EEAE94F8DB293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:47:2c:0a:7a:dd:33:6c:f1:1a:d2:0d:81:
7f:27:c8:69:60:62:47:d8:61:5b:46:e4:8f:23:06:
2d:e5:c8:ce:fc:df:fa:94:91:60:e2:d7:35:a7:71:
41:8f:b0:59:22:68:d3:be:00:d8:dd:a5:ed:7c:ef:
88:df:36:42:68:43:3d:90:51:82:e3:9b:9b:fe:17:
1e:5a:23:25:e0:90:dc:c7:a2:51:f4:3a:dc:4a:fe:
a8:f5:60:67:81:8e:4e:f1:44:14:5e:62:6f:56:2e:
17:d2:d7:9b:66:c9:c8:46:e8:08:cc:e5:9e:30:8f:
a2:4d:48:14:69:69:73:c2:bc:a0:f6:28:11:b9:8f:
f2:38:fc:de:6a:62:c5:e3:11:9a:80:51:f9:80:71:
8b:59:06:f7:c9:c1:b1:13:0a:25:86:22:57:a0:bd:
e9:41:e3:67:06:1e:d4:53:c4:a9:c7:e1:5c:5c:c7:
71:eb:36:ea:98:3f:73:ca:39:d0:c2:f0:bf:a8:4e:
4a:76:9c:74:ea:61:16:9d:9d:10:f7:32:d0:d8:2a:
06:21:27:1b:b3:6b:0c:01:13:13:db:78:85:3f:84:
00:db:40:84:33:83:e1:a6:9a:78:57:b2:3a:4b:67:
61:5f:ce:db:d4:d5:a8:b8:b6:99:0d:f1:59:70:34:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
BA:93:0D:A4:2A:F7:80:57:7B:A7:36:F0:E2:2E:EA:E9:4F:8D:B2:93
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.cc/repo/MythicalKitten/7/
RPKI Manifest - URI:rsync://rpki.cc/repo/MythicalKitten/7/BA930DA42AF780577BA736F0E22EEAE94F8DB293.mft
RPKI Notify - URI:https://rpki.cc/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
2a06:a005:bd0::-2a06:a005:bff:ffff:ffff:ffff:ffff:ffff
2a06:a005:d41::/48
2a06:a005:1040::/43
2a06:a005:1490::-2a06:a005:14df:ffff:ffff:ffff:ffff:ffff
2a06:a005:1600::/44
Signature Algorithm: sha256WithRSAEncryption
71:e5:da:2a:75:cd:fb:2b:a3:7f:72:0b:eb:37:2e:f7:27:8b:
9f:78:93:f2:f1:4d:9e:3e:d9:76:3a:39:4c:82:4a:59:ea:30:
90:c8:ed:d8:9b:0a:0e:af:a7:d1:7d:9a:42:6b:b9:89:84:67:
4a:e9:3b:a1:76:71:ff:35:9f:2e:b6:0b:15:56:10:48:6e:c3:
18:d0:a2:57:5b:79:09:ba:f4:45:cc:1d:cc:54:71:ad:65:22:
43:92:96:1e:56:bb:15:ef:64:5f:bf:e8:cc:81:d5:42:e5:a4:
f4:2e:43:0a:cb:1e:93:77:bb:aa:0d:c7:3a:1f:60:8b:12:c6:
90:81:7f:a4:a0:5d:b6:fc:a2:51:ed:2d:b5:8e:7e:a9:c8:56:
d7:bf:34:09:55:aa:f0:92:c4:14:0f:88:c2:aa:bf:96:02:10:
54:2a:97:94:05:9b:eb:d3:da:cd:83:7c:21:d5:62:5a:fb:d2:
42:6d:4a:fd:8c:66:f2:ba:8b:84:34:e3:9b:84:43:ed:8c:15:
f3:62:67:60:79:fa:cb:50:f6:d8:bc:5c:4c:b5:4f:4d:cc:6f:
08:97:5b:97:e6:3a:3b:2a:54:e6:a6:e3:b7:86:cd:ea:7e:7f:
7d:fe:5c:21:9e:66:10:fa:33:e6:87:91:6c:e5:51:66:c4:c0:
85:a6:54:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:56 2024 by rpki-client on console-ams.rpki-client.org