Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer (raw, json)
Hash identifier: YPg4bzZf1aGy9cJgX3ov7uieRo+cPwXq4qt987TXei0=
Subject key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7276BCE26CB0932529E933E542BF3DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202025
AS: 204602
IP: 5.8.252.0/22
IP: 37.98.204.0/22
IP: 93.119.16.0/22
IP: 185.66.44.0/22
IP: 185.72.112.0/22
IP: 185.125.28.0/22
IP: 188.240.192.0/22
IP: 195.189.208.0/23
IP: 2a04:7540::/29
IP: 2a05:340::/29
IP: 2a05:3900::/29
IP: 2a0c:ee80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6b:ce:26:cb:09:32:52:9e:93:3e:54:2b:f3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:06:f2:e1:f3:5d:16:c1:84:49:84:5a:21:
f0:04:39:74:bd:7a:2a:6a:03:f2:f3:3f:65:6c:d8:
21:4e:9a:97:0d:bc:3a:14:6d:29:c7:7e:74:6f:33:
15:a4:0e:d7:a2:77:8f:bb:9f:41:ed:22:c5:23:4e:
5c:67:85:3f:93:57:37:d9:bc:0b:91:1a:68:be:5a:
24:17:95:90:97:74:9e:72:14:4c:f5:e1:a5:09:d3:
12:0e:57:3b:46:51:53:aa:0b:13:fc:08:c7:9f:b3:
a5:7f:08:c8:d2:02:31:a9:45:29:09:5b:55:49:4d:
24:f5:5f:a7:37:bf:0d:8b:a2:f3:72:01:2e:2a:ad:
35:a0:6f:94:d4:d0:57:ef:1f:46:5d:a0:b9:25:ad:
f4:03:c2:84:94:01:1f:40:88:25:04:b6:8a:50:f3:
0e:4c:44:d2:29:ff:72:40:c3:f9:5b:a1:14:1f:dd:
a8:b9:ee:22:33:df:b7:88:58:d7:1d:40:49:0b:ab:
11:04:05:92:f7:73:71:37:8a:65:d1:a5:82:fe:db:
a7:aa:6b:8f:9c:c7:0b:6e:5d:c1:06:4d:78:ce:08:
35:51:b1:e2:f1:45:40:c1:4d:a4:14:06:3e:32:45:
80:3f:85:81:0d:bf:6d:0f:1a:87:b7:d1:16:69:ca:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.252.0/22
37.98.204.0/22
93.119.16.0/22
185.66.44.0/22
185.72.112.0/22
185.125.28.0/22
188.240.192.0/22
195.189.208.0/23
IPv6:
2a04:7540::/29
2a05:340::/29
2a05:3900::/29
2a0c:ee80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202025
204602
Signature Algorithm: sha256WithRSAEncryption
53:1c:ea:a0:c0:f8:46:bc:f7:12:32:a7:fd:ad:a3:04:ab:a2:
3e:34:15:19:64:37:32:85:2a:5b:49:bf:b9:51:83:f2:56:b5:
53:fe:32:6f:f2:1a:41:fa:55:4e:7e:22:22:16:39:51:bc:c1:
c8:30:56:a3:a0:1c:59:f8:85:ef:52:79:21:ee:bf:64:f9:5c:
03:8d:3d:aa:aa:c0:0d:12:0a:0e:c5:3c:e3:d5:3b:62:3b:c2:
66:23:e0:8b:71:b5:d1:0f:c3:ef:7d:21:bd:d5:df:54:fd:78:
48:81:dc:3b:5b:49:bd:0c:37:57:a1:60:0f:b9:93:c2:9f:ea:
f6:01:ed:eb:01:de:d3:dc:d0:93:4e:59:99:cb:bd:50:75:db:
68:17:91:16:dd:02:ec:db:2b:65:20:78:eb:c7:0f:f4:3c:47:
c7:a7:31:6c:cb:44:86:5b:6e:44:17:e9:66:b3:6b:02:a1:12:
03:d8:fe:54:58:fe:0b:00:c9:71:62:34:aa:6e:ab:73:35:47:
c8:24:1a:7b:5f:01:41:77:dc:e2:6a:18:8a:3e:ea:96:2e:de:
85:e8:94:4f:e7:94:24:c3:0b:83:23:db:79:36:0b:b0:68:9e:
5a:00:72:fe:39:a9:15:98:01:c0:a5:ac:cc:92:14:44:ee:e9:
c8:14:d3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:17:58 2024 by rpki-client on console-fra.rpki-client.org