Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
File: 1qo_vHjjEikVfHi20jpl6y41Pc4.cer (raw, json)
Hash identifier: sU8VlRj2xu2bq5A4xtIFjeaQWALth6TEcC6KLDzOX/E=
Subject key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EC85B5FB063063DC1CD51AEEBE6E9EF8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Apr 2024 14:13:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 215381
IP: 37.122.148.0/22
IP: 89.36.231.0/24
IP: 109.205.195.0/24
IP: 193.242.184.0/24
IP: 194.11.226.0/24
IP: 212.232.23.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:5b:5f:b0:63:06:3d:c1:cd:51:ae:eb:e6:e9:ef:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 10 14:13:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:ef:97:8b:41:5f:1f:cc:10:b8:d5:35:28:
69:d2:b3:8f:29:09:20:6e:eb:15:db:6f:fc:9d:f1:
9a:c5:5c:cc:93:80:cb:59:52:43:d9:3d:36:74:05:
17:41:fc:05:40:8d:27:68:e2:b9:3e:60:82:34:fb:
81:be:5a:c6:ce:e1:b8:8c:cb:b5:aa:25:2c:81:75:
d0:e0:f7:cc:02:ac:b3:cf:65:81:b9:1f:0e:8e:3b:
4d:8e:fd:b8:f3:8c:1d:35:0d:f4:61:9a:0e:ef:03:
d8:06:f9:37:e7:b8:f1:52:b0:4c:d4:31:4a:ae:dd:
de:95:47:40:1c:e3:dd:fe:7f:8d:bc:1e:55:e9:c7:
e0:1d:35:cd:e6:bc:43:6c:e5:9f:93:80:e5:8b:ed:
37:9b:34:10:3d:10:8c:a5:52:98:20:c4:0e:64:32:
5e:ff:8a:b3:8f:ad:32:df:05:e2:24:bf:d8:1c:71:
50:c3:90:c6:b0:5b:a4:ce:c8:1e:81:ca:88:0e:4c:
a5:1e:47:c5:d7:64:1b:5d:a8:e2:b8:ab:f1:ff:92:
a0:1c:2a:a9:df:26:4e:df:be:13:8e:61:89:42:a3:
cb:43:cc:91:74:03:d2:e6:bf:f5:f3:5d:7c:d3:08:
3e:7d:61:ee:f9:77:69:96:f4:6f:d5:a9:23:0a:83:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.148.0/22
89.36.231.0/24
109.205.195.0/24
193.242.184.0/24
194.11.226.0/24
212.232.23.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215381
Signature Algorithm: sha256WithRSAEncryption
9c:75:50:c5:ef:fe:1e:c5:59:6d:26:18:e2:48:3a:b3:7a:74:
08:05:4b:18:ef:66:f0:2e:61:95:85:7f:1e:7f:ae:c8:ac:97:
df:ad:59:11:3e:97:d7:e8:66:5e:3c:38:d2:fe:b2:f0:e5:d0:
c7:16:f8:a2:c0:66:a2:8e:f4:f5:39:1e:5a:c9:b8:d1:da:a7:
ee:09:2a:ee:50:b9:7d:45:51:7b:d5:c8:18:e6:c1:1c:fd:ee:
4e:da:03:fe:0b:63:92:da:90:bd:90:01:0c:de:4c:ad:80:c5:
21:10:42:13:ed:4e:90:c5:de:5d:35:31:d7:8d:74:f7:4a:19:
f6:be:b6:28:cd:b7:a7:fc:c3:c1:6d:6c:2e:d0:27:d2:36:7c:
50:1d:22:36:13:f3:ed:4a:70:5e:40:29:1a:35:11:44:bf:ac:
c0:c0:ec:f4:02:0f:08:de:bc:ae:28:9f:a4:cf:7a:14:8c:5a:
98:49:5f:04:34:52:2a:ed:85:16:2a:02:85:b9:5a:90:91:7a:
9b:91:3e:3f:0e:13:13:75:50:57:3d:81:e6:91:d1:70:fb:cb:
c5:5a:3d:04:5c:1c:b7:7d:98:03:49:d0:3b:fd:57:af:39:ec:
73:09:38:b8:54:f6:8f:cb:48:8a:d5:23:f0:3f:87:cc:1f:37:
bc:87:9f:5b
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgISAY7IW1+wYwY9wc1Rruvm6e+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDEwMTQxMzM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmFhM2ZiYzc4ZTMxMjI5MTU3Yzc4YjZkMjNhNjVlYjJlMzUzZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HPvl4tBXx/MELjVNShp0rOPKQkg
busV22/8nfGaxVzMk4DLWVJD2T02dAUXQfwFQI0naOK5PmCCNPuBvlrGzuG4jMu1
qiUsgXXQ4PfMAqyzz2WBuR8OjjtNjv2484wdNQ30YZoO7wPYBvk357jxUrBM1DFK
rt3elUdAHOPd/n+NvB5V6cfgHTXN5rxDbOWfk4Dli+03mzQQPRCMpVKYIMQOZDJe
/4qzj60y3wXiJL/YHHFQw5DGsFukzsgegcqIDkylHkfF12QbXajiuKvx/5KgHCqp
3yZO374TjmGJQqPLQ8yRdAPS5r/181180wg+fWHu+XdplvRv1akjCoPt6wIDAQAB
o4ICvjCCArowHQYDVR0OBBYEFNaqP7x44xIpFXx4ttI6ZesuNT3OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkLzZjZjhi
ZS0yNTNkLTQ2ZDUtYWI3Yy04Mjc2YzhhYWM1MGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNmNmOGJl
LTI1M2QtNDZkNS1hYjdjLTgyNzZjOGFhYzUwZS8xLzFxb192SGpqRWlrVmZIaTIw
anBsNnk0MVBjNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF
BwEHAQH/BC4wLDAqBAIAATAkAwQCJXqUAwQAWSTnAwQAbc3DAwQAwfK4AwQAwgvi
AwQA1OgXMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNJVTANBgkqhkiG9w0BAQsF
AAOCAQEAnHVQxe/+HsVZbSYY4kg6s3p0CAVLGO9m8C5hlYV/Hn+uyKyX361ZET6X
1+hmXjw40v6y8OXQxxb4osBmoo709TkeWsm40dqn7gkq7lC5fUVRe9XIGObBHP3u
TtoD/gtjktqQvZABDN5MrYDFIRBCE+1OkMXeXTUx141090oZ9r62KM23p/zDwW1s
LtAn0jZ8UB0iNhPz7UpwXkApGjURRL+swMDs9AIPCN68riifpM96FIxamElfBDRS
Ku2FFioChblakJF6m5E+Pw4TE3VQVz2B5pHRcPvLxVo9BFwct32YA0nQO/1Xrzns
cwk4uFT2j8tIitUj8D+HzB83vIefWw==
-----END CERTIFICATE-----
Generated at Fri May 3 09:23:03 2024 by rpki-client on console-fra.rpki-client.org