Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer (raw, json)
Hash identifier: cONWKbhyXnb1yoa+nwyndoIbielfVtc4/G1WuIScGWE=
Subject key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86FD97C5A8DA3E79D2D7227CE1DA76D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206543
IP: 185.44.230.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d9:7c:5a:8d:a3:e7:9d:2d:72:27:ce:1d:a7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6c:85:02:c2:bb:9a:d0:a1:7a:56:98:ef:0d:
5c:33:db:cb:93:d4:31:30:70:cf:cf:14:a0:44:78:
d1:f6:d8:8f:c5:53:df:29:ee:a8:e8:35:62:eb:35:
6e:4d:44:15:b6:be:cb:1e:87:6a:14:d8:7b:26:b5:
71:be:0a:5b:c0:8e:ec:3e:71:ad:a1:9a:c0:4f:e6:
9f:0d:ea:f4:3f:42:69:d4:4e:4b:52:90:00:6d:34:
a7:d7:04:16:d5:b8:19:4e:a7:2e:c3:df:3a:83:84:
87:9d:4c:1c:5f:be:62:b8:c4:69:19:a8:04:af:8b:
92:02:3c:7e:18:95:1d:7a:41:e8:58:3a:2d:e1:f3:
00:95:2c:4e:3e:61:a6:f4:65:66:d7:8b:3e:52:36:
76:17:1b:35:09:24:6f:a2:cb:19:35:09:6c:39:7f:
ca:88:e0:28:a2:da:cc:ee:74:7a:dc:c5:0e:37:90:
29:38:d7:5c:e1:b7:fb:58:2d:99:9a:06:da:4c:92:
5f:21:c0:a8:75:33:86:ed:54:36:2d:11:12:d5:3f:
0d:df:c6:5a:e3:d1:96:5e:22:91:a4:92:4e:c3:68:
29:61:b4:73:20:cc:04:38:bc:f2:9d:8b:a7:0c:a6:
b9:38:15:8b:bf:31:30:cf:eb:74:58:52:ca:87:79:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.230.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206543
Signature Algorithm: sha256WithRSAEncryption
88:86:ab:64:f3:f1:25:89:80:af:a9:47:52:2e:4c:29:5e:a5:
07:a5:a4:b3:67:85:21:3f:86:95:ef:6f:e7:76:25:71:4d:0c:
ca:bd:e4:c3:f8:1d:ab:86:76:b6:23:63:05:22:09:4c:a1:2b:
7b:72:7e:4b:ce:bc:26:fc:1c:5c:69:c4:07:1a:76:ea:6f:da:
2e:2b:4a:9f:9c:8c:69:e9:6a:5a:f6:a5:1d:a4:50:bb:00:83:
9a:dd:9a:ba:cd:20:2a:30:d2:b2:8d:7f:99:8a:c0:b1:9c:2c:
7e:ce:c6:e1:45:03:a2:c1:48:9e:89:0c:f8:2a:62:1a:37:e1:
1d:90:be:55:1b:64:27:3c:d9:d6:76:f6:c3:c9:20:54:54:82:
e8:02:47:55:8d:a9:0d:41:c2:ce:99:0e:b4:30:f1:fa:73:f6:
3f:dc:6c:00:7a:7a:bc:e3:d7:a7:f5:d2:eb:85:b9:17:06:5a:
83:c3:32:c6:1f:cf:8f:0f:52:94:c8:72:b1:76:d0:8d:30:00:
88:76:98:39:c2:d9:c1:da:e5:09:4e:64:f0:c2:32:17:b3:9c:
1c:5b:eb:fc:7a:f8:0a:e4:a3:f9:76:8f:3b:d4:48:a6:58:05:
c3:04:3e:95:e2:92:d3:77:ed:8c:8f:7b:49:a9:11:c4:4c:a6:
8f:35:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:52:02 2024 by rpki-client on console-ams.rpki-client.org