Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.cer (raw, json)
Hash identifier: pqu4DtF6SSeP3MgI7s6lV4Uh06ZzbKypItWTWWWB1L4=
Subject key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC2C848BE460118B75881D84F2155D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206280
IP: 185.190.252.0/22
IP: 2a0a:12c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2c:84:8b:e4:60:11:8b:75:88:1d:84:f2:15:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:07:91:27:73:6c:35:9b:99:c6:6c:3f:7d:94:
41:b8:d6:0e:4c:21:41:22:c7:a8:0f:c7:e1:26:6f:
65:55:4d:ec:32:14:ab:35:30:51:4b:02:ee:11:1d:
92:a2:0b:fd:58:41:2f:84:cf:84:8f:ab:6b:68:ec:
85:26:1c:eb:fe:71:6d:78:c5:b1:23:ac:73:7c:1e:
12:8a:f0:54:e2:ee:72:98:5e:c9:39:b5:95:80:e1:
39:de:99:2b:0b:72:fe:ff:72:ca:e8:43:eb:0b:bb:
76:55:34:35:01:33:ec:f8:a9:ef:5c:aa:82:84:f0:
b0:ad:cf:a4:ab:9a:cc:2c:bf:26:40:6b:71:48:68:
90:58:63:a5:dc:3b:fa:60:d1:97:26:e8:ce:ca:58:
58:25:12:50:35:68:50:76:67:ec:ce:25:92:c5:f4:
9b:89:92:1a:52:da:33:3b:56:e9:9d:2d:43:50:f6:
4f:58:11:c5:29:f4:65:66:9b:ac:98:26:0f:c2:c4:
66:23:5c:84:3a:cd:61:6e:f4:9e:aa:89:58:71:58:
b4:dd:ad:48:f4:de:5c:a0:26:d8:90:34:4f:64:92:
33:03:e2:c5:fd:62:6a:b4:da:69:b2:4b:f7:cc:51:
d1:4e:48:b6:9e:0d:75:07:97:f6:66:6f:d1:0e:89:
74:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.252.0/22
IPv6:
2a0a:12c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206280
Signature Algorithm: sha256WithRSAEncryption
3d:6f:5f:0d:d3:5e:ca:50:d7:6a:ef:25:e2:0f:dd:de:0b:04:
af:92:59:f0:df:ae:a2:22:ad:28:67:b2:fb:6d:cc:96:9e:a7:
b5:fa:24:b5:fa:0c:ac:77:25:4e:96:d6:97:90:46:ff:c9:04:
9d:98:31:13:09:6d:1f:86:5f:56:a9:d4:3b:e5:3c:14:cb:08:
d3:ff:ee:2d:9d:f5:7f:8d:25:41:90:79:b6:d7:1d:a0:50:e2:
59:03:14:36:d6:b0:c6:49:30:a7:65:02:69:1f:66:23:66:fd:
89:5c:90:50:20:1d:6b:03:3c:85:50:0a:98:25:0d:33:cc:96:
ff:9b:a3:ec:11:c9:cb:d0:2c:8e:19:46:c0:95:e8:52:62:f3:
cc:26:45:62:74:36:dc:41:14:40:8c:db:8f:0e:cf:92:98:e6:
f6:10:29:4e:f0:cf:bd:17:0c:fe:3c:55:24:5b:b5:c5:4d:80:
6a:1c:53:d9:c2:b4:c2:ea:8a:98:64:81:9b:3c:50:9a:08:76:
0e:f0:ab:92:5d:83:67:82:09:61:72:e2:b0:84:7a:26:66:05:
68:37:62:92:95:2d:6f:0b:ab:35:af:4f:1a:06:4f:fe:8e:a5:
0d:bb:85:1c:61:c0:61:09:51:4d:d1:0f:51:e2:48:b0:ad:e4:
33:72:3d:d4
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzJvCyEi+RgEYt1iB2E8hVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjRhMDNmODBmNjJkYTg2NjM1MmUxOTkwOTk3ZjFkNDZjZWIyZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3weRJ3NsNZuZxmw/fZRBuNYOTCFB
IseoD8fhJm9lVU3sMhSrNTBRSwLuER2Sogv9WEEvhM+Ej6traOyFJhzr/nFteMWx
I6xzfB4SivBU4u5ymF7JObWVgOE53pkrC3L+/3LK6EPrC7t2VTQ1ATPs+KnvXKqC
hPCwrc+kq5rMLL8mQGtxSGiQWGOl3Dv6YNGXJujOylhYJRJQNWhQdmfsziWSxfSb
iZIaUtozO1bpnS1DUPZPWBHFKfRlZpusmCYPwsRmI1yEOs1hbvSeqolYcVi03a1I
9N5coCbYkDRPZJIzA+LF/WJqtNppskv3zFHRTki2ng11B5f2Zm/RDol0LwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOJKA/gPYtqGY1LhmQmX8dRs6y+wMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzU0MGM1
Zi1hMmEyLTQ0ZTQtOTI4Ny00MWI1NDUwMGZkY2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvNTQwYzVm
LWEyYTItNDRlNC05Mjg3LTQxYjU0NTAwZmRjZi8xLzRrb0QtQTlpMm9aalV1R1pD
WmZ4MUd6ckw3QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCub78MA0EAgACMAcDBQAqChLAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMlyDANBgkqhkiG9w0BAQsFAAOCAQEAPW9fDdNeylDX
au8l4g/d3gsEr5JZ8N+uoiKtKGey+23Mlp6ntfoktfoMrHclTpbWl5BG/8kEnZgx
EwltH4ZfVqnUO+U8FMsI0//uLZ31f40lQZB5ttcdoFDiWQMUNtawxkkwp2UCaR9m
I2b9iVyQUCAdawM8hVAKmCUNM8yW/5uj7BHJy9AsjhlGwJXoUmLzzCZFYnQ23EEU
QIzbjw7Pkpjm9hApTvDPvRcM/jxVJFu1xU2AahxT2cK0wuqKmGSBmzxQmgh2DvCr
kl2DZ4IJYXLisIR6JmYFaDdikpUtbwurNa9PGgZP/o6lDbuFHGHAYQlRTdEPUeJI
sK3kM3I91A==
-----END CERTIFICATE-----
Generated at Thu Apr 18 18:21:48 2024 by rpki-client on console-ams.rpki-client.org