Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
File: B6alie6EioBSI4GRuYA153USJyU.cer (raw, json)
Hash identifier: ZTcyWz4GZdrH3I54DP1+k0DK+vwcVCq6GRJrAVfRAKQ=
Subject key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49367B190D6A40975937E8BF84E8ED3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210218
IP: 2.58.93.0 -- 2.58.94.255
IP: 2.58.136.0/22
IP: 2.59.248.0/22
IP: 31.13.194.0/24
IP: 31.13.249.0 -- 31.13.255.255
IP: 45.8.74.0/23
IP: 45.12.248.0/22
IP: 45.139.100.0/22
IP: 45.143.100.0/22
IP: 45.149.232.0/24
IP: 77.75.56.0/22
IP: 78.40.160.0/21
IP: 80.249.124.0/22
IP: 87.120.46.0/23
IP: 87.120.63.0/24
IP: 87.120.85.0 -- 87.120.86.255
IP: 87.120.96.0/23
IP: 87.120.111.0/24
IP: 87.120.177.0/24
IP: 87.120.218.0/24
IP: 87.120.224.0/24
IP: 87.120.226.0/24
IP: 87.120.232.0/22
IP: 87.121.19.0/24
IP: 87.121.36.0/23
IP: 87.121.59.0/24
IP: 87.121.66.0 -- 87.121.68.255
IP: 87.121.116.0/24
IP: 87.121.148.0/23
IP: 91.92.3.0/24
IP: 91.92.24.0/23
IP: 91.197.196.0/22
IP: 91.243.184.0/22
IP: 92.249.51.0/24
IP: 93.123.68.0/22
IP: 93.123.86.0/23
IP: 93.123.108.0/24
IP: 94.154.174.0/23
IP: 94.156.16.0/22
IP: 94.156.32.0/24
IP: 94.156.48.0/21
IP: 94.156.95.0/24
IP: 94.156.108.0/22
IP: 94.156.168.0/23
IP: 94.156.182.0 -- 94.156.184.255
IP: 94.156.187.0/24
IP: 94.156.192.0/23
IP: 94.156.234.0/23
IP: 94.156.240.0/22
IP: 94.156.246.0/23
IP: 94.240.56.0/22
IP: 95.214.124.0/22
IP: 109.206.238.0/24
IP: 141.98.0.0/24
IP: 164.40.184.0/24
IP: 164.40.186.0/23
IP: 171.22.29.0/24
IP: 176.125.253.0/24
IP: 178.175.184.0/21
IP: 185.171.148.0/22
IP: 185.219.125.0 -- 185.219.126.255
IP: 185.221.66.0/24
IP: 185.225.72.0/24
IP: 185.252.178.0/24
IP: 193.19.200.0/22
IP: 193.36.232.0/22
IP: 193.37.43.0/24
IP: 193.37.46.0/24
IP: 193.43.3.0 -- 193.43.3.179
IP: 193.46.172.0/22
IP: 193.56.16.0/22
IP: 193.56.248.0/22
IP: 193.58.184.0/22
IP: 193.207.0.0 -- 193.207.23.255
IP: 194.48.249.0/24
IP: 194.76.204.0/22
IP: 194.147.8.0/22
IP: 194.180.50.0/24
IP: 195.178.120.0/24
IP: 195.225.120.0/22
IP: 212.22.128.0/19
IP: 212.24.0.0/19
IP: 212.73.135.0/24
IP: 2a09:e6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 Mar 2024 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:67:b1:90:d6:a4:09:75:93:7e:8b:f8:4e:8e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07a6a589ee848a8052238191b98035e775122725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:82:a8:d2:1d:2e:a3:b1:a3:4f:aa:5d:2a:
e7:08:9b:2b:eb:9d:03:37:0f:ec:72:20:73:25:98:
1c:2b:79:8b:6f:f5:cb:ab:2e:0e:ae:0c:24:29:d6:
26:fa:23:23:89:7c:fb:5c:9b:ea:ec:a3:1a:d4:6f:
74:0b:cf:d2:0f:52:30:d8:e5:9e:79:c3:c4:47:85:
04:e5:f0:25:dc:55:29:a0:1b:b2:df:d3:d6:e7:89:
be:65:4a:48:5c:15:72:4a:95:f1:6c:6d:67:4c:cc:
ec:e3:f3:07:16:c1:25:f0:0b:3d:a1:1b:c6:b1:fa:
ca:73:83:a0:de:f5:de:8d:ab:1a:9c:30:c7:7d:af:
86:0a:0e:d8:23:fd:15:71:8d:a8:a4:1c:4d:01:94:
16:f1:65:36:9b:10:a5:23:a7:e5:eb:da:0a:cd:a1:
22:58:7a:9b:14:3e:8f:8c:35:35:f3:75:59:3f:2e:
b2:4a:0f:ac:43:2d:da:42:61:e6:7a:fc:e1:bb:18:
52:29:09:85:36:40:6f:53:cb:e9:bf:68:8b:75:f3:
d5:94:93:80:e1:81:4c:c7:fe:ff:a7:c3:73:cc:c8:
23:05:b4:f0:c9:db:ca:ef:7b:07:3b:42:aa:ec:22:
c3:9e:ce:b5:b2:52:42:64:a7:dd:ff:ee:d2:bb:ba:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0-2.58.94.255
2.58.136.0/22
2.59.248.0/22
31.13.194.0/24
31.13.249.0-31.13.255.255
45.8.74.0/23
45.12.248.0/22
45.139.100.0/22
45.143.100.0/22
45.149.232.0/24
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
87.120.46.0/23
87.120.63.0/24
87.120.85.0-87.120.86.255
87.120.96.0/23
87.120.111.0/24
87.120.177.0/24
87.120.218.0/24
87.120.224.0/24
87.120.226.0/24
87.120.232.0/22
87.121.19.0/24
87.121.36.0/23
87.121.59.0/24
87.121.66.0-87.121.68.255
87.121.116.0/24
87.121.148.0/23
91.92.3.0/24
91.92.24.0/23
91.197.196.0/22
91.243.184.0/22
92.249.51.0/24
93.123.68.0/22
93.123.86.0/23
93.123.108.0/24
94.154.174.0/23
94.156.16.0/22
94.156.32.0/24
94.156.48.0/21
94.156.95.0/24
94.156.108.0/22
94.156.168.0/23
94.156.182.0-94.156.184.255
94.156.187.0/24
94.156.192.0/23
94.156.234.0/23
94.156.240.0/22
94.156.246.0/23
94.240.56.0/22
95.214.124.0/22
109.206.238.0/24
141.98.0.0/24
164.40.184.0/24
164.40.186.0/23
171.22.29.0/24
176.125.253.0/24
178.175.184.0/21
185.171.148.0/22
185.219.125.0-185.219.126.255
185.221.66.0/24
185.225.72.0/24
185.252.178.0/24
193.19.200.0/22
193.36.232.0/22
193.37.43.0/24
193.37.46.0/24
193.43.3.0-193.43.3.179
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.207.0.0-193.207.23.255
194.48.249.0/24
194.76.204.0/22
194.147.8.0/22
194.180.50.0/24
195.178.120.0/24
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
212.73.135.0/24
IPv6:
2a09:e6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210218
Signature Algorithm: sha256WithRSAEncryption
07:e4:ae:6c:b4:d7:2b:fe:7b:35:ee:0d:c8:54:d1:ec:66:e7:
55:42:64:11:5e:9b:6e:77:31:56:b6:f2:9a:3c:03:38:8f:1a:
e4:72:2f:46:c2:a6:51:4f:dc:e4:a7:c6:2f:f2:57:a1:a3:7c:
4e:8b:27:82:73:93:dd:49:b7:bc:46:ed:e1:47:b0:bd:7b:9a:
c9:c2:2f:16:d0:e4:2d:77:09:82:38:ed:d3:1c:f7:a7:19:2c:
9c:cf:90:15:a2:14:bf:5f:ec:a6:c2:59:58:ae:cf:cc:79:4a:
f9:a6:57:38:52:bd:2f:0d:e2:ad:90:fa:76:35:0e:d4:06:55:
1b:b9:17:73:a7:54:93:f7:c9:36:74:f2:a3:cb:9c:a7:b7:04:
e2:3d:c8:e1:2e:85:1c:eb:a0:96:da:2e:ed:dc:a9:76:7e:d0:
41:4a:a1:c0:66:9f:c9:e2:96:ef:c0:a8:f9:59:89:e9:ec:8a:
2e:fb:4b:1f:a1:da:bb:ff:5f:27:72:30:be:48:a8:bd:95:30:
3f:04:93:8b:87:7e:64:ff:47:66:9a:94:2e:f4:3d:8e:38:57:
8b:ca:d4:73:34:dd:be:c2:07:20:e3:3b:70:01:1d:3f:4d:f2:
c7:29:34:ac:ce:32:63:03:10:ab:f0:e8:b5:7b:eb:87:83:8d:
d6:76:f6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 20:35:52 2024 by rpki-client on console-fra.rpki-client.org