Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
File: 4Uk5uDWV4u-2lFa83yOGalB59vU.cer (raw, json)
Hash identifier: p6mj9kFs9sfpoX+Z2JqNSFIhFUbYgjMpshM+Dw8ewD4=
Subject key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DEBF97F6FC87469AB0DD99D5C03CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206841
IP: 185.174.184.0/22
IP: 2a0b:b300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:eb:f9:7f:6f:c8:74:69:ab:0d:d9:9d:5c:03:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:af:97:c8:ff:50:4e:78:3d:3e:11:74:ba:
71:1b:22:12:e4:49:ce:51:8c:3c:f1:64:26:44:ce:
2e:c6:51:16:0d:86:a5:f0:8d:f0:22:9f:41:8a:a2:
d8:74:47:75:62:4a:5e:bf:e0:2f:07:36:6c:25:75:
28:f6:fe:56:c0:13:07:22:f5:32:24:5f:e9:5e:bf:
18:c5:32:e6:24:4d:1b:a6:d4:7e:4a:89:e4:ec:26:
df:ea:e7:ef:13:63:2e:c9:dc:6d:c4:1b:2a:ec:b3:
1c:6b:2c:9c:04:7c:60:e4:f5:80:87:06:30:3b:c6:
65:3a:d9:31:82:d6:c8:c5:c6:8f:d8:a6:a5:fa:af:
ef:6a:dc:d5:ab:60:14:b5:1c:6a:84:4a:8e:b1:e8:
81:56:08:10:a6:33:26:b3:b2:5a:30:5d:5a:8e:4e:
7d:f9:66:5e:0a:d8:4f:f5:f0:dd:8b:d5:69:13:e7:
8b:9f:77:73:35:a4:7c:05:8c:21:08:ca:81:0e:9e:
2f:ab:1b:73:56:5f:10:92:13:65:ea:89:29:63:24:
29:a8:36:10:a3:65:71:7f:58:bc:68:4c:58:70:ab:
c1:74:e5:e2:48:31:46:34:75:68:82:3a:5a:56:14:
96:87:74:3b:f6:02:4b:be:4c:cb:0d:41:50:42:84:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.184.0/22
IPv6:
2a0b:b300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206841
Signature Algorithm: sha256WithRSAEncryption
21:d6:52:e1:60:44:e6:10:6a:31:2b:a3:57:0f:6a:9a:57:9d:
85:89:e5:8a:34:33:2e:ba:ce:55:8e:c2:00:4a:3f:9c:f0:cc:
aa:f5:0a:34:fb:80:eb:18:0b:e9:65:be:0c:93:f2:48:1d:01:
a5:12:55:a7:bd:15:87:91:fb:a2:39:a8:83:8d:aa:3b:eb:cc:
36:41:a7:ee:b4:c5:fb:e1:8a:47:53:91:84:97:99:56:e1:8e:
a0:3e:25:6e:c0:84:9e:3a:69:a3:99:ab:c8:7c:04:30:c0:bf:
08:85:e7:cb:0c:a8:de:59:7f:84:ec:ae:24:c1:6e:d9:1f:86:
14:9d:cb:1a:c6:c9:9f:b5:34:81:bf:21:0b:53:dd:9d:0c:23:
be:6b:ad:3b:42:c8:b2:43:ec:5d:37:5e:1c:d6:9e:bf:52:d8:
28:3f:59:cf:7e:ae:27:2f:96:ff:f8:92:f3:35:f3:91:3e:81:
19:c7:ad:48:75:82:9b:31:66:33:d3:70:96:f4:bc:95:6a:05:
c0:c2:50:66:01:45:a5:70:ce:a2:e0:f8:6d:54:37:32:c7:12:
40:f5:4d:6d:d2:cc:e9:b8:06:9e:6b:fe:ad:b7:b5:a3:da:5a:
06:97:29:5d:c4:ea:22:00:31:32:46:6a:85:25:df:fc:7c:a6:
1a:ce:dc:3d
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzFbev5f2/IdGmrDdmdXAPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTQ5MzliODM1OTVlMmVmYjY5NDU2YmNkZjIzODY2YTUwNzlmNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdyvl8j/UE54PT4RdLpxGyIS5EnO
UYw88WQmRM4uxlEWDYal8I3wIp9BiqLYdEd1Ykpev+AvBzZsJXUo9v5WwBMHIvUy
JF/pXr8YxTLmJE0bptR+Sonk7Cbf6ufvE2MuydxtxBsq7LMcayycBHxg5PWAhwYw
O8ZlOtkxgtbIxcaP2Kal+q/vatzVq2AUtRxqhEqOseiBVggQpjMms7JaMF1ajk59
+WZeCthP9fDdi9VpE+eLn3dzNaR8BYwhCMqBDp4vqxtzVl8QkhNl6okpYyQpqDYQ
o2Vxf1i8aExYcKvBdOXiSDFGNHVogjpaVhSWh3Q79gJLvkzLDUFQQoRF8wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOFJObg1leLvtpRWvN8jhmpQefb1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2Y5MGZk
YS0wMzRkLTQ0ZTAtYTgxMi1jZDYzMGRiYzFkMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvZjkwZmRh
LTAzNGQtNDRlMC1hODEyLWNkNjMwZGJjMWQxOC8xLzRVazV1RFdWNHUtMmxGYTgz
eU9HYWxCNTl2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCua64MA0EAgACMAcDBQMqC7MAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMn+TANBgkqhkiG9w0BAQsFAAOCAQEAIdZS4WBE5hBq
MSujVw9qmledhYnlijQzLrrOVY7CAEo/nPDMqvUKNPuA6xgL6WW+DJPySB0BpRJV
p70Vh5H7ojmog42qO+vMNkGn7rTF++GKR1ORhJeZVuGOoD4lbsCEnjppo5mryHwE
MMC/CIXnywyo3ll/hOyuJMFu2R+GFJ3LGsbJn7U0gb8hC1PdnQwjvmutO0LIskPs
XTdeHNaev1LYKD9Zz36uJy+W//iS8zXzkT6BGcetSHWCmzFmM9NwlvS8lWoFwMJQ
ZgFFpXDOouD4bVQ3MscSQPVNbdLM6bgGnmv+rbe1o9paBpcpXcTqIgAxMkZqhSXf
/HymGs7cPQ==
-----END CERTIFICATE-----
Generated at Sat Apr 20 09:39:00 2024 by rpki-client on console-fra.rpki-client.org