Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
File: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer (raw, json)
Hash identifier: aFtLC29VD4fTrljz3elTwNsc/ZyKoMzcQ463olRJKZo=
Subject key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7952B613805152E01C7C7A34A3EA27E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 60150
AS: 202592
IP: 43.240.148.0/22
IP: 45.12.100.0/22
IP: 147.185.196.0/23
IP: 147.185.206.0/23
IP: 185.96.56.0/22
IP: 185.136.16.0/22
IP: 193.160.220.0/22
IP: 193.168.200.0/22
IP: 194.38.48.0/22
IP: 207.244.196.0/22
IP: 207.244.208.0/22
IP: 2a05:ff00::/29
IP: 2a07:5b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2b:61:38:05:15:2e:01:c7:c7:a3:4a:3e:a2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:0f:c5:55:b0:97:04:23:34:26:e3:70:df:
6e:ee:b9:56:a9:04:0f:9a:20:08:6b:91:ee:a7:82:
f0:2a:82:12:e4:91:a8:9f:23:86:6b:de:19:4f:28:
aa:04:a4:e6:dd:27:e2:f1:31:d2:83:fb:dc:2a:81:
f4:62:1a:3a:c3:50:25:2c:d9:bb:42:d6:44:db:78:
dd:b0:ab:1a:55:ac:cc:1d:a5:cd:80:2b:b2:14:db:
78:50:2b:e0:fd:15:33:75:bd:40:ba:27:c6:69:3b:
9d:97:b3:eb:99:a2:e3:ca:fc:ea:87:5d:1d:d4:27:
33:7e:f1:ce:f6:67:1d:d1:b3:67:c4:a2:83:aa:2d:
07:52:9d:72:b4:bb:aa:59:2a:ce:f1:83:46:66:f3:
6f:8a:af:83:2b:fd:3f:2f:f4:60:c6:da:01:b0:48:
37:1e:17:da:6e:5d:26:df:25:9a:09:b7:d6:3a:7d:
23:22:f3:50:de:19:1f:7e:0b:47:ad:24:18:fb:36:
47:e7:71:6a:a6:95:17:90:de:f1:2f:48:97:04:a7:
cd:a5:a2:a7:69:1b:c2:7c:22:24:9d:01:71:3b:eb:
73:93:b5:38:e6:e0:cd:65:19:65:94:02:63:fd:48:
d7:c8:e4:f3:40:78:5e:4c:45:aa:e2:fe:b7:4f:dd:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.148.0/22
45.12.100.0/22
147.185.196.0/23
147.185.206.0/23
185.96.56.0/22
185.136.16.0/22
193.160.220.0/22
193.168.200.0/22
194.38.48.0/22
207.244.196.0/22
207.244.208.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60150
202592
Signature Algorithm: sha256WithRSAEncryption
14:18:01:e3:f8:0e:95:bd:25:16:32:ad:b7:2d:7f:80:9a:1d:
b2:e7:37:8c:e0:55:54:37:f3:b6:09:85:5e:81:b3:da:05:5e:
05:ee:fd:2d:b6:4e:b3:21:ea:1c:51:a5:c5:a0:be:aa:a3:a6:
1b:3f:dd:88:7d:cc:85:85:8c:07:92:a1:a0:cf:14:0f:bf:f1:
ed:d5:d2:53:25:44:ba:23:9f:c8:28:89:6d:00:c5:80:f6:67:
35:b8:07:47:ce:f7:22:c3:91:35:fc:eb:ab:91:b2:8b:a4:11:
2e:b2:98:69:31:b2:10:0a:73:45:85:ed:be:d6:33:44:31:72:
f7:27:90:34:24:6b:08:80:50:a4:ee:d9:89:32:07:1f:d9:6f:
27:64:b7:1c:65:81:33:57:ba:55:36:78:ea:44:a8:52:cf:8b:
0e:76:47:43:e2:cc:3c:af:09:a7:a6:f2:6f:dc:f7:18:cd:26:
36:a6:bc:d6:6d:ce:5c:4d:2e:2a:7f:eb:5f:f3:84:76:73:01:
77:f3:8e:d4:5f:9d:2d:90:8c:c6:7d:81:91:59:0f:de:da:d1:
0b:ab:91:f2:d2:62:59:19:7b:37:7b:3c:99:58:ce:17:62:0b:
b5:19:ca:00:b9:2c:88:de:52:49:c5:5a:29:c4:60:6e:4d:1e:
30:f7:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:23:48 2024 by rpki-client on console-ams.rpki-client.org