Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.cer (raw, json)
Hash identifier: E61dlWoeLYkLvfmJsNhfDD0lBLjjYYLMk1RkcEA4VcI=
Subject key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E783864653AB058E7114788BEE6A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:00 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15897
IP: 5.226.192.0/18
IP: 5.229.0.0/16
IP: 31.177.128.0/17
IP: 46.106.0.0/16
IP: 46.154.0.0/15
IP: 46.221.0.0/16
IP: 81.6.64.0/18
IP: 149.0.0.0/16
IP: 149.140.0.0/16
IP: 176.54.0.0/15
IP: 176.216.0.0/14
IP: 185.11.12.0/22
IP: 188.38.0.0/16
IP: 212.65.128.0/19
IP: 217.31.224.0/19
IP: 2a00:1880::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:78:38:64:65:3a:b0:58:e7:11:47:88:be:e6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:ea:09:40:67:80:19:c6:bf:4e:aa:87:01:
b3:f5:79:ab:32:c0:cd:11:f6:b0:bd:bd:38:ed:95:
2d:16:cf:d5:89:62:82:34:ef:35:26:b5:94:2c:d3:
a0:20:5a:8f:09:23:97:23:98:86:ca:5a:dc:e9:da:
ee:83:9f:61:f7:75:7d:3d:d7:1e:18:d4:80:22:f3:
3e:69:4f:ed:d0:bb:76:eb:f5:8b:c9:86:ef:d7:25:
7e:85:3c:af:85:ba:7f:33:73:8f:9d:77:75:15:9a:
22:69:ff:3e:e1:1f:c2:54:13:cb:2d:60:6b:f8:f8:
f5:1c:db:fd:b4:8d:a0:38:73:0c:46:54:9a:d9:c1:
ce:ae:85:3c:b7:61:d8:89:aa:ef:c6:02:0f:5a:2b:
2c:df:6a:9c:67:ad:6b:38:d7:bd:a8:2e:cd:b4:63:
e6:f6:cd:79:85:89:ab:f6:90:fb:f1:d2:ad:d9:b9:
83:b5:38:21:86:a7:e1:76:3f:36:ba:ff:7a:e2:db:
23:82:58:f4:5c:e5:2d:f3:3a:02:a9:02:c6:85:1d:
20:75:0a:33:39:04:a3:1d:e4:2a:77:cc:db:ac:56:
23:bc:d5:3e:11:71:d1:3f:17:5f:0b:9a:3f:6e:11:
4e:1b:da:aa:4c:22:01:26:3c:6e:52:46:8c:dd:5d:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.192.0/18
5.229.0.0/16
31.177.128.0/17
46.106.0.0/16
46.154.0.0/15
46.221.0.0/16
81.6.64.0/18
149.0.0.0/16
149.140.0.0/16
176.54.0.0/15
176.216.0.0/14
185.11.12.0/22
188.38.0.0/16
212.65.128.0/19
217.31.224.0/19
IPv6:
2a00:1880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15897
Signature Algorithm: sha256WithRSAEncryption
94:f8:e8:60:53:38:0a:7c:79:90:42:58:09:72:35:c9:00:27:
df:eb:59:90:f2:f3:d8:c1:c8:b4:fa:25:47:ff:43:b8:35:dd:
da:0a:63:b0:d7:d3:9e:9d:4b:ef:07:4b:ad:e2:e9:1a:e9:85:
98:86:64:a6:94:ed:48:2c:61:d9:4e:20:25:5a:a4:c3:bb:45:
06:2d:83:70:bf:3f:4c:03:61:77:88:5c:f2:e4:4e:41:21:2b:
dd:1f:e0:0c:2c:3c:d0:33:12:c4:9c:37:c4:20:be:f0:8b:99:
98:d4:b6:73:1e:74:a9:fd:20:79:1f:6f:ef:12:5c:fc:c2:f9:
28:c1:8e:19:c9:b3:53:af:a2:1d:8c:2a:ed:07:27:9e:a1:e5:
7c:10:6b:79:22:6e:3e:74:c3:ec:8b:92:8d:23:2f:29:23:2d:
55:58:68:7d:2a:bb:6d:85:60:99:c1:7c:c8:8a:4a:80:f0:17:
6d:87:94:1e:ab:dc:29:62:35:6e:19:b2:d7:f2:e6:af:6e:cb:
6d:bd:14:42:f3:3b:f4:90:b1:19:64:4c:7d:87:0c:93:eb:c5:
0b:15:ad:57:01:49:05:1a:44:a1:c3:e4:3b:08:67:70:ac:b8:
0e:ee:2e:16:5e:d8:03:fe:ff:94:f7:61:9b:d3:80:81:32:38:
1a:bb:5f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 12:14:39 2024 by rpki-client on console-ams.rpki-client.org