Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
File: 1HawBjUaL5zyqROG3lDOJ_FVBZU.cer (raw, json)
Hash identifier: 6Mn37nKxDz1HaZuU0Oi1+Q+E2dGCOHHQ7vTk2bYVVqE=
Subject key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FB40547C93C9F798D6C590AF3B057
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8586
IP: 5.102.80.0/20
IP: 37.152.32.0/20
IP: 62.8.96.0/19
IP: 84.252.192.0/18
IP: 94.250.224.0/20
IP: 146.255.0.0/20
IP: 164.40.208.0/20
IP: 178.239.96.0/20
IP: 185.13.140.0/22
IP: 195.12.0.0/19
IP: 195.74.128.0/19
IP: 212.58.32.0/19
IP: 213.83.64.0/18
IP: 213.246.128.0/18
IP: 2001:4160::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b4:05:47:c9:3c:9f:79:8d:6c:59:0a:f3:b0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:00:a4:d8:ba:08:33:50:d2:32:d1:5a:00:
2a:69:ff:c1:50:af:23:9a:48:be:ec:22:91:c7:a9:
fe:b9:ea:08:f5:a0:45:27:a2:e1:11:c5:d1:cd:f5:
80:95:b4:36:61:97:b4:89:00:69:0e:64:fd:c6:ec:
35:8b:bb:8d:83:e5:fc:fb:20:10:8a:2c:66:4a:57:
36:30:26:ca:13:c2:a9:71:e1:9d:0f:8c:15:28:5a:
ba:e3:f9:21:34:3d:63:ac:26:09:00:3d:17:6f:b8:
a0:62:74:bc:fb:a5:ba:0e:c9:1c:77:6c:ac:e1:8a:
06:3d:0e:ad:1f:ee:55:02:c3:38:cd:cd:70:06:be:
50:58:1f:b4:09:f8:20:e3:0d:01:14:fe:bb:f4:fe:
dd:92:ae:b8:2e:d7:a7:fc:97:7c:30:ca:5b:2b:62:
46:74:6b:8e:c4:14:73:d7:73:d6:87:45:20:e7:29:
17:dd:aa:ec:ef:e9:d6:94:89:13:cb:6e:f7:60:79:
c5:52:7c:b8:ec:0b:1b:0c:ba:73:6c:09:57:4f:15:
24:3d:a1:73:bf:cd:72:7d:b5:46:fd:2f:50:0d:c7:
55:6a:84:42:56:7a:8b:a0:22:11:c5:16:6e:cf:38:
84:b4:a9:83:71:03:df:3c:b4:ce:f3:f0:13:2e:22:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.80.0/20
37.152.32.0/20
62.8.96.0/19
84.252.192.0/18
94.250.224.0/20
146.255.0.0/20
164.40.208.0/20
178.239.96.0/20
185.13.140.0/22
195.12.0.0/19
195.74.128.0/19
212.58.32.0/19
213.83.64.0/18
213.246.128.0/18
IPv6:
2001:4160::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8586
Signature Algorithm: sha256WithRSAEncryption
39:f6:ae:07:1e:2a:24:d2:a7:ad:4b:fb:31:4a:08:10:27:4f:
27:8a:62:d8:63:a3:5a:ad:e7:ee:2d:9b:33:71:f6:0f:9e:24:
70:83:85:f4:d6:3b:e4:50:ee:91:e0:7a:da:72:c9:69:e8:76:
0c:09:73:96:a3:4a:9c:ad:45:2c:25:00:74:dd:2c:d3:61:0b:
6b:19:1c:eb:82:74:18:b4:f5:8a:f6:61:a3:89:dc:67:92:de:
30:db:ec:40:d0:da:55:9d:48:56:d3:9e:7f:0d:75:19:1b:79:
dd:e1:bd:2b:d2:a0:28:e5:db:37:66:a8:c4:cf:4b:40:39:f2:
ba:fb:86:04:aa:1c:d1:72:67:87:b3:ed:88:c6:fe:7d:20:64:
ac:39:ba:a3:25:14:bc:2d:2f:e7:3a:cc:89:2e:4e:3c:68:90:
83:c0:6e:ad:3d:f4:3a:5c:27:36:61:46:a4:1d:d2:fd:66:f0:
33:fa:c4:e3:78:57:d7:e7:9b:f5:f4:bf:86:90:a8:b6:5b:a8:
71:cd:7c:fc:9e:a0:98:63:17:1d:2f:54:64:6d:64:db:db:3d:
76:e1:5d:46:d5:0c:f9:0f:1c:2f:f6:f8:03:a0:bc:2d:79:89:
42:f7:d0:64:d5:d4:88:aa:54:07:73:d1:cf:57:40:49:56:c1:
5b:16:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:52:38 2024 by rpki-client on console-fra.rpki-client.org