Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
File: 1Ion9EsQQExS9v_E4I3IK_i13uQ.cer (raw, json)
Hash identifier: K700NS1DnHpMeHliCZW4cU1rEPSU8Z0Zxy5F9L+3dYw=
Subject key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E3D9063179D4314F95034DF2F10947768
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Mar 2024 15:24:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200598
AS: 208308
IP: 24.235.22.0/23
IP: 31.187.92.0/22
IP: 50.20.224.0/20
IP: 62.164.224.0/19
IP: 66.9.96.0/20
IP: 66.117.8.0/22
IP: 69.72.72.0/22
IP: 74.124.204.0/22
IP: 77.223.192.0 -- 77.223.201.255
IP: 79.110.184.0/22
IP: 79.139.52.0/22
IP: 79.139.64.0/23
IP: 83.142.200.0/21
IP: 85.204.28.0/23
IP: 86.106.28.0/23
IP: 89.20.50.0/23
IP: 89.37.60.0/23
IP: 89.39.184.0/23
IP: 89.40.236.0/23
IP: 91.210.80.0/22
IP: 91.217.106.0/23
IP: 93.119.184.0/21
IP: 94.101.103.0/24
IP: 94.176.96.0/24
IP: 95.178.8.0/21
IP: 95.215.144.0/22
IP: 116.50.16.0/21
IP: 121.127.48.0/20
IP: 128.0.60.0/22
IP: 134.199.64.0/19
IP: 136.227.160.0/19
IP: 141.193.108.0/22
IP: 141.193.214.0/23
IP: 158.247.56.0/22
IP: 162.216.138.0/23
IP: 162.250.216.0/22
IP: 168.75.224.0/20
IP: 168.149.248.0/23
IP: 173.214.200.0/22
IP: 176.111.54.0/23
IP: 176.222.48.0/22
IP: 178.216.184.0/21
IP: 178.255.244.0/22
IP: 188.215.12.0/22
IP: 192.200.192.0/19
IP: 193.91.8.0/23
IP: 194.149.76.0/22
IP: 195.78.90.0/23
IP: 198.14.16.0/20
IP: 198.145.112.0/22
IP: 199.48.230.0/23
IP: 204.15.4.0/22
IP: 205.134.244.0/22
IP: 205.220.216.0/23
IP: 212.32.96.0/19
IP: 212.69.88.0/21
IP: 217.144.108.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:90:63:17:9d:43:14:f9:50:34:df:2f:10:94:77:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 14 15:24:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:4d:26:90:fe:c8:01:30:49:70:0b:86:9a:
ee:4a:fa:f7:63:b8:df:e6:ca:c8:22:9b:a7:47:5d:
75:12:25:df:07:fc:9b:da:e4:10:e2:6e:35:ad:80:
ab:71:84:82:20:db:c3:0b:9e:37:be:2e:04:26:c7:
2e:e1:32:e2:92:41:e4:91:77:25:5b:0a:55:ea:ca:
fe:2c:0b:46:11:a7:b4:8b:f9:86:fc:fe:cc:22:f9:
e4:ac:59:8c:6f:93:74:c7:43:cb:c7:fb:7f:25:b7:
58:69:9e:d0:50:13:a3:b3:6d:66:7d:fa:36:23:c5:
05:18:8c:38:9b:85:19:26:88:38:5f:0a:99:96:50:
33:61:f9:2a:b6:53:db:33:c4:9f:ce:58:8e:82:ed:
fc:9b:1b:d7:8b:95:ea:5a:d5:f7:dd:8e:85:be:e0:
3f:ec:6f:0f:60:77:ce:9b:43:52:ca:00:01:e4:a3:
fd:8d:4c:ea:5d:d7:36:92:78:a5:33:0d:99:23:ea:
ac:27:2b:9f:6f:8e:b0:f2:7b:c7:ee:1b:9e:5c:d1:
65:1c:ed:70:e4:68:08:8f:b9:7e:a1:6b:bd:f1:14:
4a:74:42:4d:96:09:11:db:93:93:0e:30:a5:01:52:
95:c7:e2:47:74:fa:f7:83:11:6a:b8:dd:07:84:ee:
fa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.235.22.0/23
31.187.92.0/22
50.20.224.0/20
62.164.224.0/19
66.9.96.0/20
66.117.8.0/22
69.72.72.0/22
74.124.204.0/22
77.223.192.0-77.223.201.255
79.110.184.0/22
79.139.52.0/22
79.139.64.0/23
83.142.200.0/21
85.204.28.0/23
86.106.28.0/23
89.20.50.0/23
89.37.60.0/23
89.39.184.0/23
89.40.236.0/23
91.210.80.0/22
91.217.106.0/23
93.119.184.0/21
94.101.103.0/24
94.176.96.0/24
95.178.8.0/21
95.215.144.0/22
116.50.16.0/21
121.127.48.0/20
128.0.60.0/22
134.199.64.0/19
136.227.160.0/19
141.193.108.0/22
141.193.214.0/23
158.247.56.0/22
162.216.138.0/23
162.250.216.0/22
168.75.224.0/20
168.149.248.0/23
173.214.200.0/22
176.111.54.0/23
176.222.48.0/22
178.216.184.0/21
178.255.244.0/22
188.215.12.0/22
192.200.192.0/19
193.91.8.0/23
194.149.76.0/22
195.78.90.0/23
198.14.16.0/20
198.145.112.0/22
199.48.230.0/23
204.15.4.0/22
205.134.244.0/22
205.220.216.0/23
212.32.96.0/19
212.69.88.0/21
217.144.108.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200598
208308
Signature Algorithm: sha256WithRSAEncryption
24:e4:53:e4:b5:62:3d:8b:3a:71:fa:9a:48:56:3c:91:95:aa:
8f:b0:3d:9f:c4:57:01:61:eb:8c:5e:ba:76:da:69:16:f7:5d:
2e:f5:5b:eb:aa:7c:1b:ea:97:9a:f1:76:bc:d8:f9:79:bf:7a:
a1:d8:09:a2:fc:1c:44:71:94:22:29:85:85:54:b5:25:5f:08:
4c:2a:eb:52:77:05:d5:05:7f:c5:04:c6:aa:db:aa:b8:c7:10:
88:05:d2:9b:59:c7:29:00:e1:82:51:b4:56:8c:eb:c5:03:dc:
3d:61:86:71:a0:84:91:30:af:e7:56:f5:2b:b0:9e:83:66:e0:
2f:c5:20:8d:67:f3:88:ee:fd:a2:05:e0:94:2b:14:68:c6:9a:
9b:c4:4e:74:d9:e5:50:65:da:b5:dc:8c:2e:c5:b3:2a:16:06:
2d:b7:9d:e2:70:7f:f1:7a:a8:b0:5a:3b:2a:cf:66:35:40:8c:
74:76:f8:df:fb:78:39:80:03:26:b5:7a:f7:7d:f8:2c:08:15:
51:c5:b7:b2:27:6e:dc:68:87:e0:84:b5:ef:40:0d:64:6b:66:
64:cd:9c:be:59:d0:3a:35:1a:fb:6e:cc:2a:ef:88:26:ec:9b:
1f:70:1b:8a:d5:6d:e1:09:cb:71:6b:5e:0e:d1:41:b1:64:ca:
03:7d:ac:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 04:10:02 2024 by rpki-client on console-ams.rpki-client.org