Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
File: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer (raw, json)
Hash identifier: /p2yDjsZ8mtpx2xCvk2OmCyNY2hs9XlcQXguS7kjBGM=
Subject key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018DEFCFB11075BC2D940718BEEFD1491530
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 28 Feb 2024 13:03:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211528
IP: 84.234.126.0/24
IP: 185.251.37.0/24
IP: 2a10:ae40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:cf:b1:10:75:bc:2d:94:07:18:be:ef:d1:49:15:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 28 13:03:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:4d:b3:2a:ad:76:ea:90:2b:f8:1c:ed:7a:
b1:34:dd:53:ca:2c:18:16:7a:58:ce:c1:6d:f5:83:
3b:2c:f8:6f:a0:71:db:12:a3:9f:d0:ae:12:02:61:
fa:70:57:20:35:95:67:67:7e:78:f4:22:f4:88:70:
0c:90:2f:18:d8:42:40:18:22:ff:a9:d5:61:d8:44:
c4:c9:12:df:0f:2d:ec:67:05:9f:e6:33:76:40:4c:
92:a7:45:79:ff:5c:e7:6a:08:66:4d:7c:db:0a:ad:
63:87:b0:0f:51:45:54:0e:5e:b3:98:eb:8a:ad:fd:
61:39:c3:0d:ab:62:24:61:ad:f2:00:e3:e0:fc:5d:
9a:d2:3e:23:47:8a:cb:6c:ad:4f:5f:6b:b8:0e:09:
e4:19:44:96:4d:3b:91:1f:37:07:3b:34:58:c4:6a:
1d:ce:3c:5a:e4:e4:70:18:6f:95:e4:23:a1:6a:bb:
38:c1:70:db:cb:57:89:b2:4b:6a:d5:96:8e:92:78:
86:74:22:e7:b4:b7:7e:8d:05:3f:79:73:2c:29:90:
86:14:0f:72:8b:1f:c1:02:bd:3a:ed:4c:56:76:77:
05:c0:f8:ae:c7:03:f2:c3:f3:95:aa:0f:74:05:81:
e9:89:a8:b3:a3:3b:c1:dc:eb:b7:5e:9e:b3:af:be:
25:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.126.0/24
185.251.37.0/24
IPv6:
2a10:ae40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211528
Signature Algorithm: sha256WithRSAEncryption
13:69:cb:f9:84:fa:ae:18:87:32:60:69:84:01:0a:77:63:36:
1f:c6:7a:66:20:54:68:4a:9a:4b:b6:5f:80:32:e9:03:2b:8f:
d1:98:4a:97:80:62:ab:10:e2:d2:3c:e9:3e:1b:9c:ac:dc:de:
57:4d:50:b8:a7:2d:6b:8e:48:2f:12:6f:ba:94:b9:d8:35:cd:
a2:91:8b:2f:10:c1:e5:3a:79:1d:8e:30:3c:fc:1b:eb:17:99:
99:11:6b:ef:62:c2:47:d5:b2:7d:51:cd:cc:d6:74:b1:5b:1a:
a1:7f:11:29:38:b5:fa:86:7c:af:2b:d3:b4:e2:4a:0a:ab:8b:
f3:bc:76:0f:54:d8:fe:64:52:fb:0e:9f:97:df:df:26:83:0c:
00:78:a2:c9:23:19:70:90:b6:d6:4c:32:31:9f:f5:89:30:6a:
60:c2:0b:ba:cc:4e:f5:9c:ab:09:b1:cc:5d:04:ae:08:88:c5:
48:c5:4e:bc:74:a4:3a:e0:b1:78:f3:11:95:ac:1a:5b:99:9e:
c5:4e:ae:b7:4c:89:eb:6f:e6:fa:80:1f:89:3b:09:d4:51:65:
b1:c0:65:b8:ed:b4:d3:66:9f:32:48:dc:6a:4a:97:d2:ac:99:
25:8a:80:f8:ab:86:26:04:2e:b0:39:a0:71:db:da:2d:52:90:
41:78:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:53:22 2024 by rpki-client on console-ams.rpki-client.org