Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
File: 08tc7MITufhtu6UYUh6FRuyThhw.cer (raw, json)
Hash identifier: sn3auUNFZE2ec7UkmqCwIKpzS8ZWpu2U1xVcfXjGY4w=
Subject key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D3BFED47A229714922F63406ABA40002C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Jan 2024 15:02:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 31034
AS: 202242
AS: 202613
AS: 205727
AS: 213224
IP: 5.249.128.0/19
IP: 31.11.32.0/21
IP: 31.14.128.0/20
IP: 46.37.0.0/19
IP: 62.149.128.0/17
IP: 66.71.128.0/18
IP: 77.81.224.0/20
IP: 80.73.224.0/20
IP: 80.211.0.0/16
IP: 82.192.128.0/19
IP: 86.105.48.0/21
IP: 89.36.208.0/20
IP: 89.38.144.0/21
IP: 89.40.112.0/20
IP: 89.46.64.0/20
IP: 89.46.104.0/21
IP: 89.46.192.0/21
IP: 94.177.160.0 -- 94.177.255.255
IP: 95.110.128.0/17
IP: 176.107.128.0/19
IP: 185.56.8.0/22
IP: 185.58.116.0 -- 185.58.123.255
IP: 185.58.224.0/22
IP: 188.213.160.0/20
IP: 194.182.64.0/19
IP: 194.182.104.0/22
IP: 194.182.110.0/23
IP: 195.231.0.0/17
IP: 209.227.192.0/18
IP: 217.61.0.0/18
IP: 217.198.128.0/20
IP: 2a00:6d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:fe:d4:7a:22:97:14:92:2f:63:40:6a:ba:40:00:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 24 15:02:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:8f:95:77:4f:02:f9:75:6d:4d:97:56:ef:
68:ce:50:bd:e3:fa:d3:e3:db:70:be:03:97:f7:5b:
0f:e7:73:6d:0a:80:c2:9e:2f:63:dd:07:76:b9:2d:
ee:50:7c:12:21:24:77:ce:30:8b:dd:e8:6f:5f:af:
ad:58:37:2b:44:ff:ea:9f:74:07:18:40:15:66:61:
63:f7:a7:23:ae:4e:a4:e0:ef:83:e5:9d:8f:b3:4a:
83:0e:0b:26:5a:7e:f9:32:ef:7e:65:6a:f8:70:a0:
e0:76:52:32:0f:89:4e:46:71:e5:4d:b2:a7:43:f6:
b2:42:bf:5e:62:5a:a9:fa:95:fc:a0:b3:bf:89:bd:
77:4f:0e:19:87:b7:49:f4:5c:68:87:0a:a5:38:b2:
67:49:a8:f2:6e:74:73:43:13:b4:a5:6f:65:04:81:
35:d6:1b:29:e9:4c:37:9b:ad:60:17:a1:46:8e:ad:
be:ad:e1:a3:47:ad:f6:dc:de:79:4b:89:f0:c1:c0:
6e:49:f3:be:ff:4c:c2:77:87:3b:db:63:0d:4f:37:
d3:8a:70:5a:35:2f:a7:b5:b4:35:10:50:03:3f:79:
db:e1:f0:1c:7f:91:06:a6:55:24:fe:86:1c:28:91:
3f:be:bd:2b:05:ee:da:d6:69:dd:1f:b4:45:87:3c:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.128.0/19
31.11.32.0/21
31.14.128.0/20
46.37.0.0/19
62.149.128.0/17
66.71.128.0/18
77.81.224.0/20
80.73.224.0/20
80.211.0.0/16
82.192.128.0/19
86.105.48.0/21
89.36.208.0/20
89.38.144.0/21
89.40.112.0/20
89.46.64.0/20
89.46.104.0/21
89.46.192.0/21
94.177.160.0-94.177.255.255
95.110.128.0/17
176.107.128.0/19
185.56.8.0/22
185.58.116.0-185.58.123.255
185.58.224.0/22
188.213.160.0/20
194.182.64.0/19
194.182.104.0/22
194.182.110.0/23
195.231.0.0/17
209.227.192.0/18
217.61.0.0/18
217.198.128.0/20
IPv6:
2a00:6d40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31034
202242
202613
205727
213224
Signature Algorithm: sha256WithRSAEncryption
60:99:66:65:ea:70:3e:48:a2:3e:b6:70:6c:38:ef:5e:76:a6:
41:bf:4b:e2:22:a0:d0:f1:73:da:70:af:f3:08:75:8d:72:6b:
4b:9a:f8:e6:15:9f:7e:a6:35:42:bd:fc:9d:14:c8:4b:35:62:
06:72:36:22:3a:3d:a3:15:c0:06:f3:f8:c2:49:1d:fe:d0:e6:
c8:fd:ea:54:6a:cb:d4:3f:fb:be:84:c1:1c:fa:ac:35:c4:b8:
db:f1:0f:36:c6:6f:a0:f8:a0:fc:56:38:82:20:d8:62:eb:9b:
e9:70:ab:bc:29:a8:06:71:df:fa:ef:1d:fd:bc:15:e4:5c:a1:
34:7f:e5:e1:4d:42:91:c2:96:6e:3c:7d:7f:c1:49:fa:7d:29:
53:b9:d9:f3:c2:43:36:4e:28:4a:d6:5b:a3:f8:8f:47:22:2c:
2b:4d:08:c5:7e:2c:94:d1:9b:7f:fb:8c:ab:8c:0c:5c:38:d0:
29:9e:3a:dd:d9:0b:0e:bc:59:a2:d8:c6:46:71:8f:56:67:4b:
88:8b:09:67:bf:74:e3:15:d8:72:62:4a:32:db:41:ea:6b:49:
e0:ec:19:0f:43:b1:f3:d8:d1:24:23:92:5c:a5:2c:d9:95:a7:
0e:80:c0:f7:41:ac:52:f4:28:47:68:bd:e0:95:f8:6c:e4:17:
68:9b:1d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:56:34 2024 by rpki-client on console-ams.rpki-client.org