Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
File: B6alie6EioBSI4GRuYA153USJyU.cer (raw, json)
Hash identifier: O33PAnGBx6Whz0HS4xcOJ66QEwXPovDHbvkeHSzFOjo=
Subject key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190C48A6D440BA9CB55F5F656BD39BB3732
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 18 Jul 2024 06:32:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210218
IP: 2.58.93.0 -- 2.58.94.255
IP: 2.58.136.0/22
IP: 2.59.248.0/22
IP: 31.13.194.0/24
IP: 31.13.249.0 -- 31.13.255.255
IP: 37.139.129.0/24
IP: 37.221.120.0/22
IP: 45.8.74.0/23
IP: 45.12.248.0/22
IP: 45.66.229.0/24
IP: 45.81.241.0 -- 45.81.242.255
IP: 45.139.100.0/22
IP: 45.143.100.0/22
IP: 45.144.152.0/23
IP: 45.149.232.0/23
IP: 45.151.88.0/24
IP: 77.75.56.0/22
IP: 78.40.160.0/21
IP: 80.249.124.0/22
IP: 82.115.208.0/24
IP: 87.120.32.0/24
IP: 87.120.34.0/23
IP: 87.120.46.0/23
IP: 87.120.63.0 -- 87.120.66.255
IP: 87.120.85.0 -- 87.120.86.255
IP: 87.120.96.0/23
IP: 87.120.111.0/24
IP: 87.120.177.0/24
IP: 87.120.218.0/24
IP: 87.120.220.0/23
IP: 87.120.224.0/24
IP: 87.120.226.0/24
IP: 87.120.232.0/22
IP: 87.121.19.0/24
IP: 87.121.36.0/23
IP: 87.121.56.0/23
IP: 87.121.59.0/24
IP: 87.121.66.0 -- 87.121.68.255
IP: 87.121.100.0/23
IP: 87.121.116.0/24
IP: 87.121.148.0/23
IP: 91.92.3.0/24
IP: 91.92.24.0/23
IP: 91.197.196.0/22
IP: 91.243.184.0/22
IP: 92.249.51.0/24
IP: 93.123.68.0/22
IP: 93.123.86.0/23
IP: 93.123.108.0/24
IP: 94.103.126.0/24
IP: 94.154.174.0/23
IP: 94.156.16.0/22
IP: 94.156.32.0/24
IP: 94.156.48.0/21
IP: 94.156.95.0/24
IP: 94.156.108.0/22
IP: 94.156.124.0/22
IP: 94.156.168.0/23
IP: 94.156.182.0 -- 94.156.184.255
IP: 94.156.187.0/24
IP: 94.156.192.0/23
IP: 94.156.234.0/23
IP: 94.156.240.0/22
IP: 94.156.246.0/23
IP: 94.240.56.0/22
IP: 95.214.124.0/22
IP: 109.206.238.0/24
IP: 141.98.0.0/24
IP: 164.40.184.0/24
IP: 164.40.186.0/23
IP: 171.22.17.0/24
IP: 171.22.29.0/24
IP: 176.125.252.0/23
IP: 178.175.184.0/21
IP: 178.215.225.0 -- 178.215.226.255
IP: 185.171.148.0/22
IP: 185.219.125.0 -- 185.219.126.255
IP: 185.221.66.0/24
IP: 185.225.72.0/23
IP: 185.252.178.0/24
IP: 185.254.38.0/23
IP: 193.19.200.0/22
IP: 193.36.232.0/22
IP: 193.37.43.0/24
IP: 193.37.46.0/24
IP: 193.43.3.0 -- 193.43.3.179
IP: 193.46.172.0/22
IP: 193.56.16.0/22
IP: 193.56.248.0/22
IP: 193.58.184.0/22
IP: 193.149.2.0/23
IP: 193.207.0.0 -- 193.207.23.255
IP: 194.48.249.0/24
IP: 194.76.204.0/22
IP: 194.147.8.0/22
IP: 194.169.174.0/24
IP: 194.180.50.0/24
IP: 195.178.120.0/24
IP: 195.225.120.0/22
IP: 212.22.128.0/19
IP: 212.24.0.0/19
IP: 212.73.135.0/24
IP: 2a09:e6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:8a:6d:44:0b:a9:cb:55:f5:f6:56:bd:39:bb:37:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 18 06:32:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07a6a589ee848a8052238191b98035e775122725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:82:a8:d2:1d:2e:a3:b1:a3:4f:aa:5d:2a:
e7:08:9b:2b:eb:9d:03:37:0f:ec:72:20:73:25:98:
1c:2b:79:8b:6f:f5:cb:ab:2e:0e:ae:0c:24:29:d6:
26:fa:23:23:89:7c:fb:5c:9b:ea:ec:a3:1a:d4:6f:
74:0b:cf:d2:0f:52:30:d8:e5:9e:79:c3:c4:47:85:
04:e5:f0:25:dc:55:29:a0:1b:b2:df:d3:d6:e7:89:
be:65:4a:48:5c:15:72:4a:95:f1:6c:6d:67:4c:cc:
ec:e3:f3:07:16:c1:25:f0:0b:3d:a1:1b:c6:b1:fa:
ca:73:83:a0:de:f5:de:8d:ab:1a:9c:30:c7:7d:af:
86:0a:0e:d8:23:fd:15:71:8d:a8:a4:1c:4d:01:94:
16:f1:65:36:9b:10:a5:23:a7:e5:eb:da:0a:cd:a1:
22:58:7a:9b:14:3e:8f:8c:35:35:f3:75:59:3f:2e:
b2:4a:0f:ac:43:2d:da:42:61:e6:7a:fc:e1:bb:18:
52:29:09:85:36:40:6f:53:cb:e9:bf:68:8b:75:f3:
d5:94:93:80:e1:81:4c:c7:fe:ff:a7:c3:73:cc:c8:
23:05:b4:f0:c9:db:ca:ef:7b:07:3b:42:aa:ec:22:
c3:9e:ce:b5:b2:52:42:64:a7:dd:ff:ee:d2:bb:ba:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.93.0-2.58.94.255
2.58.136.0/22
2.59.248.0/22
31.13.194.0/24
31.13.249.0-31.13.255.255
37.139.129.0/24
37.221.120.0/22
45.8.74.0/23
45.12.248.0/22
45.66.229.0/24
45.81.241.0-45.81.242.255
45.139.100.0/22
45.143.100.0/22
45.144.152.0/23
45.149.232.0/23
45.151.88.0/24
77.75.56.0/22
78.40.160.0/21
80.249.124.0/22
82.115.208.0/24
87.120.32.0/24
87.120.34.0/23
87.120.46.0/23
87.120.63.0-87.120.66.255
87.120.85.0-87.120.86.255
87.120.96.0/23
87.120.111.0/24
87.120.177.0/24
87.120.218.0/24
87.120.220.0/23
87.120.224.0/24
87.120.226.0/24
87.120.232.0/22
87.121.19.0/24
87.121.36.0/23
87.121.56.0/23
87.121.59.0/24
87.121.66.0-87.121.68.255
87.121.100.0/23
87.121.116.0/24
87.121.148.0/23
91.92.3.0/24
91.92.24.0/23
91.197.196.0/22
91.243.184.0/22
92.249.51.0/24
93.123.68.0/22
93.123.86.0/23
93.123.108.0/24
94.103.126.0/24
94.154.174.0/23
94.156.16.0/22
94.156.32.0/24
94.156.48.0/21
94.156.95.0/24
94.156.108.0/22
94.156.124.0/22
94.156.168.0/23
94.156.182.0-94.156.184.255
94.156.187.0/24
94.156.192.0/23
94.156.234.0/23
94.156.240.0/22
94.156.246.0/23
94.240.56.0/22
95.214.124.0/22
109.206.238.0/24
141.98.0.0/24
164.40.184.0/24
164.40.186.0/23
171.22.17.0/24
171.22.29.0/24
176.125.252.0/23
178.175.184.0/21
178.215.225.0-178.215.226.255
185.171.148.0/22
185.219.125.0-185.219.126.255
185.221.66.0/24
185.225.72.0/23
185.252.178.0/24
185.254.38.0/23
193.19.200.0/22
193.36.232.0/22
193.37.43.0/24
193.37.46.0/24
193.43.3.0-193.43.3.179
193.46.172.0/22
193.56.16.0/22
193.56.248.0/22
193.58.184.0/22
193.149.2.0/23
193.207.0.0-193.207.23.255
194.48.249.0/24
194.76.204.0/22
194.147.8.0/22
194.169.174.0/24
194.180.50.0/24
195.178.120.0/24
195.225.120.0/22
212.22.128.0/19
212.24.0.0/19
212.73.135.0/24
IPv6:
2a09:e6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210218
Signature Algorithm: sha256WithRSAEncryption
a5:3b:5c:68:dc:b8:49:d1:aa:06:24:18:9e:78:b5:de:8d:57:
16:c0:9f:ff:91:8b:fc:6d:3e:b3:b6:ef:bb:e2:11:a5:ac:98:
b4:9c:3b:63:2d:f0:66:27:34:b2:cc:50:51:07:f5:4a:d6:04:
7c:99:26:6d:f3:0d:65:c9:fc:15:e0:1a:a0:a2:11:15:43:57:
9e:89:6e:0c:63:b4:9b:cf:d5:a6:4f:bd:81:c0:ef:c8:46:a0:
45:f2:35:0f:92:7f:7d:6f:7f:4c:59:db:53:4b:de:90:b5:93:
39:44:45:b4:10:4f:75:f9:3c:59:45:d4:04:5a:32:89:82:94:
6d:0e:e0:ca:0a:6a:a0:c3:ee:ac:e6:26:91:06:ac:91:0d:57:
c9:bf:8c:db:e6:5f:f3:0e:ab:ec:99:75:f6:eb:06:15:ae:e9:
22:93:a9:c0:1a:3b:a3:0c:85:c7:70:76:5b:9c:3e:78:3e:39:
d9:69:16:d3:44:cd:41:7c:22:23:3b:bb:d2:d2:c0:f5:32:f1:
9e:d9:bf:80:2d:2c:c4:66:a0:f4:fd:8b:f2:fd:42:a4:d9:46:
35:cb:0d:f3:9f:36:ba:7f:15:38:f2:27:b6:ec:f9:af:eb:8b:
30:0e:82:b6:06:25:a3:a6:3a:aa:6c:99:cf:e7:ae:cb:00:7e:
7f:2a:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:53 2024 by rpki-client on console-fra.rpki-client.org