Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
File: 5_iBQBq6zIjJQf33QPGrFTbwXbo.cer (raw, json)
Hash identifier: 3qHDtsTkDFNospKeaoyRASN+o28r6eyQ+w6q2bF/wWk=
Subject key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BB0190D6301D954E55A0D46D75838
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5578
AS: 6726
AS: 6803
AS: 8288
AS: 16160
AS: 16295
AS: 20579
IP: 62.65.160.0/19
IP: 62.152.224.0/19
IP: 62.168.64.0/18
IP: 62.197.192.0/18
IP: 80.250.240.0/20
IP: 81.88.128.0/20
IP: 82.119.224.0/20
IP: 83.168.128.0/18
IP: 84.245.64.0/18
IP: 85.248.0.0/16
IP: 92.60.56.0/21
IP: 94.124.144.0/21
IP: 185.121.64.0/22
IP: 185.130.220.0/22
IP: 185.220.120.0/22
IP: 188.123.96.0/20
IP: 188.123.116.0/22
IP: 193.58.192.0 -- 193.58.197.255
IP: 193.110.186.0/23
IP: 194.1.172.0/22
IP: 194.1.224.0/21
IP: 195.12.128.0/19
IP: 195.46.64.0/19
IP: 195.72.0.0/19
IP: 195.98.0.0/19
IP: 195.168.0.0/16
IP: 212.26.160.0/19
IP: 212.81.0.0/19
IP: 213.215.64.0/18
IP: 217.67.16.0/20
IP: 217.75.64.0/19
IP: 217.118.96.0/20
IP: 217.172.144.0/20
IP: 2001:1ba0::/32
IP: 2a00:1298::/32
IP: 2a02:770::/32
IP: 2a06:dbc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 14:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:b0:19:0d:63:01:d9:54:e5:5a:0d:46:d7:58:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:b4:75:97:ec:e0:da:c7:8e:38:ad:49:db:
e0:a7:ff:5d:ed:17:71:be:94:a7:4e:04:dc:14:31:
a0:0b:47:f0:fe:cd:f8:b3:d9:32:46:21:92:d1:8d:
e5:c4:74:0e:ea:dd:b6:b5:16:01:85:56:ef:82:dd:
e9:18:7d:9c:4d:9f:1b:80:e1:05:24:1e:d3:dd:89:
f9:33:fe:bc:53:ae:95:26:4a:20:3a:d9:4e:f0:9c:
0f:aa:a3:91:0c:60:11:0d:a3:e8:c7:3c:5a:2a:68:
99:c7:79:48:94:45:72:68:8f:09:39:b8:4b:1f:82:
90:1c:af:dc:da:cd:5f:d8:4f:f6:93:fe:01:e2:40:
cf:03:e6:af:73:9c:49:1e:e1:5b:d5:a4:69:33:30:
3e:32:f4:0a:fb:af:e7:07:2e:1e:b4:7e:9b:18:50:
5c:af:37:64:4b:ec:61:8e:cf:21:bc:18:13:b2:e5:
d8:26:a0:87:2a:63:0b:88:06:7d:22:eb:54:e7:02:
97:61:7d:d6:e7:d5:5f:d3:a0:0d:e4:bc:6e:5b:15:
92:7d:f8:f8:17:a3:38:2e:4f:d5:43:68:51:29:86:
cd:4b:96:35:a6:a5:e8:0a:93:98:8b:a2:6f:38:07:
3c:de:62:1e:c9:d8:aa:e1:8f:02:af:44:68:1d:01:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.160.0/19
62.152.224.0/19
62.168.64.0/18
62.197.192.0/18
80.250.240.0/20
81.88.128.0/20
82.119.224.0/20
83.168.128.0/18
84.245.64.0/18
85.248.0.0/16
92.60.56.0/21
94.124.144.0/21
185.121.64.0/22
185.130.220.0/22
185.220.120.0/22
188.123.96.0/20
188.123.116.0/22
193.58.192.0-193.58.197.255
193.110.186.0/23
194.1.172.0/22
194.1.224.0/21
195.12.128.0/19
195.46.64.0/19
195.72.0.0/19
195.98.0.0/19
195.168.0.0/16
212.26.160.0/19
212.81.0.0/19
213.215.64.0/18
217.67.16.0/20
217.75.64.0/19
217.118.96.0/20
217.172.144.0/20
IPv6:
2001:1ba0::/32
2a00:1298::/32
2a02:770::/32
2a06:dbc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5578
6726
6803
8288
16160
16295
20579
Signature Algorithm: sha256WithRSAEncryption
3b:9b:30:f5:19:66:0c:f5:0d:88:63:03:d6:f7:52:66:73:55:
bd:90:29:88:94:e3:be:b9:47:f6:9a:32:b3:29:e9:76:c0:c3:
84:07:58:c4:3d:5a:dd:ba:04:a0:ee:97:f9:fa:a7:15:ad:7a:
2f:28:34:df:b5:f4:12:c3:bf:36:de:e7:96:38:2b:62:d2:20:
c3:84:49:8b:87:e7:77:be:8c:48:d6:64:ae:ff:f4:9e:76:ec:
81:87:4b:5c:41:87:04:84:e6:29:3e:04:8e:ea:50:de:02:cb:
25:17:5f:4c:94:1a:c9:6f:47:ae:fd:03:0d:0d:11:ce:0a:2f:
30:70:36:72:40:2c:9e:98:ad:1c:ba:57:e6:bb:8e:40:99:f4:
84:a9:9c:59:fb:90:a9:d5:c6:ca:8b:98:7e:f3:77:bd:62:5a:
20:7d:5d:57:ed:c1:b6:f5:ec:5e:64:f1:67:55:f1:93:77:34:
3f:90:8c:2a:f3:6b:98:bb:a1:65:9d:1b:78:14:5b:49:ac:b9:
02:a8:06:67:06:07:5e:cb:a7:87:46:d7:ec:5b:8f:f4:db:7d:
e9:2c:c6:99:e3:b5:fd:ae:44:1a:56:34:3f:23:b6:06:ba:fd:
1f:a2:79:c1:d4:39:42:2a:3e:d5:f1:39:cd:ee:79:67:a4:e8:
b9:7a:94:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 16:29:44 2024 by rpki-client on console-ams.rpki-client.org