Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer (raw, json)
Hash identifier: y7bY6RVdKAaNKHZI7HB7wHErrWSUodRGHCOKc5byQBo=
Subject key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EA2D80CE142156B3322BAAF01E0ACEAA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Apr 2024 07:24:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35767
AS: 41141
AS: 43890
IP: 31.14.21.0/24
IP: 45.14.236.0/22
IP: 45.67.36.0/22
IP: 45.82.28.0/23
IP: 45.88.172.0/22
IP: 84.247.23.0/24
IP: 86.105.193.0/24
IP: 89.34.100.0/23
IP: 89.39.0.0/21
IP: 89.40.224.0/23
IP: 89.42.132.0/23
IP: 89.42.135.0/24
IP: 92.114.2.0/23
IP: 93.174.160.0/21
IP: 94.177.26.0/24
IP: 176.223.114.0/24
IP: 185.220.184.0/22
IP: 185.248.136.0/22
IP: 188.240.0.0/24
IP: 188.241.72.0/22
IP: 193.16.144.0/24
IP: 193.138.122.0/24
IP: 193.200.62.0/23
IP: 2a03:9c00::/32
IP: 2a05:5680::/29
IP: 2a07:c440::/29
IP: 2a09:7740::/29
IP: 2a0b:4480::/29
IP: 2a0b:fb40::/29
IP: 2a0e:1680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Apr 2024 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:d8:0c:e1:42:15:6b:33:22:ba:af:01:e0:ac:ea:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 3 07:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:77:d5:2d:af:90:91:41:ba:17:2e:e9:02:70:
12:1b:c7:39:12:ff:cf:9a:91:25:d9:5f:55:c0:18:
91:00:65:5a:e0:49:01:a5:15:e8:47:ec:f1:41:6c:
33:3f:3b:d0:fa:9e:6b:24:55:3f:77:30:58:fb:64:
a3:2c:a8:08:ad:ed:7f:32:5c:bb:11:ec:82:c7:e4:
5f:84:74:6e:b9:2b:24:7a:d7:ad:41:f7:f2:00:4d:
cc:96:29:94:52:5f:1b:7c:2f:25:e6:5a:7c:59:5d:
ee:e2:fa:ab:1d:dd:3f:fb:92:da:a0:73:88:85:9c:
5f:ec:30:5b:94:3c:7b:5c:43:4d:09:86:d1:3b:67:
50:17:ba:59:70:1f:df:7b:bf:0c:31:9c:25:aa:0b:
73:e6:c4:80:f8:c0:d4:cd:bd:eb:41:57:3b:18:18:
14:ed:9f:ca:31:01:a2:72:0a:2d:67:a7:b0:24:ad:
c7:a0:8b:9d:e5:99:e9:81:37:14:72:3a:9e:39:79:
9c:6f:6b:f6:57:4e:da:ce:03:91:09:f0:57:7a:03:
49:0b:d9:f5:94:24:d2:81:60:18:4b:32:00:c2:89:
4b:af:61:b5:a7:1f:32:16:44:f6:6c:2e:21:54:5c:
f7:b8:29:e8:05:45:f3:b6:9d:39:c3:83:7f:d0:b1:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.21.0/24
45.14.236.0/22
45.67.36.0/22
45.82.28.0/23
45.88.172.0/22
84.247.23.0/24
86.105.193.0/24
89.34.100.0/23
89.39.0.0/21
89.40.224.0/23
89.42.132.0/23
89.42.135.0/24
92.114.2.0/23
93.174.160.0/21
94.177.26.0/24
176.223.114.0/24
185.220.184.0/22
185.248.136.0/22
188.240.0.0/24
188.241.72.0/22
193.16.144.0/24
193.138.122.0/24
193.200.62.0/23
IPv6:
2a03:9c00::/32
2a05:5680::/29
2a07:c440::/29
2a09:7740::/29
2a0b:4480::/29
2a0b:fb40::/29
2a0e:1680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35767
41141
43890
Signature Algorithm: sha256WithRSAEncryption
4a:61:2b:b2:32:8d:63:ca:ad:7d:9d:f1:3e:e6:16:8c:ae:bb:
39:24:5e:a2:a9:68:c9:0c:27:4c:f1:67:e2:f4:79:1a:b6:ed:
aa:0e:e7:e8:c0:0c:72:a8:d9:44:f6:00:bc:db:f1:f9:ad:1b:
55:83:bf:0f:08:99:29:d4:5e:0a:c1:2e:ad:30:ce:ab:01:5c:
1d:e9:04:f9:22:34:ef:e1:6e:d5:9c:fa:1b:70:12:87:c8:3d:
10:97:ad:52:28:1c:ca:02:08:e8:0c:5a:8c:5a:95:40:df:c8:
93:69:1f:1a:f6:c5:d8:48:ab:71:4e:55:19:4e:e8:d5:01:18:
bf:3a:17:78:9e:16:b3:08:01:b6:3d:34:90:4f:21:b2:14:e9:
b9:64:a1:fc:22:33:52:69:b2:e2:ac:10:5d:c4:4f:1f:d9:78:
48:46:9f:d7:33:80:1d:14:99:f4:b4:63:26:79:61:2b:d9:20:
90:b4:d5:c6:e7:37:1a:06:6b:65:69:34:d4:e8:d6:9e:f2:b2:
aa:29:04:bd:5f:3d:92:c4:bd:73:48:d8:d2:3f:e6:06:ad:a3:
fd:78:d9:8e:ea:2e:b0:e4:28:a9:80:b0:25:e0:c9:1c:09:55:
50:a8:8b:67:12:fd:93:4b:0a:f0:63:a7:a9:63:d2:79:9e:45:
82:6e:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:57:37 2024 by rpki-client on console-ams.rpki-client.org