Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
File: BK0S-65UbQGDxgR9T3XojgDgcFM.cer (raw, json)
Hash identifier: vRMtAOy4rKv3S30y2tq1OdAyFpfJl+thnENM21+gDU8=
Subject key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5D4F5F08817EBF566232E8F0C554E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13148
IP: 194.153.147.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d4:f5:f0:88:17:eb:f5:66:23:2e:8f:0c:55:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:92:96:3a:4b:5a:e6:7c:fb:c8:4c:7a:70:
64:c0:e1:08:5b:a2:fd:ae:f9:81:01:f7:b3:22:79:
65:28:a6:a3:65:91:4b:6d:b5:60:26:2e:5f:a1:3a:
e3:10:c9:9f:0a:e9:97:44:b6:72:08:f3:64:ce:cb:
a1:d5:1f:61:6e:35:b6:03:e8:8d:cf:a2:22:da:e4:
4a:b8:ba:94:11:37:d8:62:b0:f9:c4:0a:bf:66:b1:
ca:37:32:05:50:59:3b:cd:9e:67:cd:92:ef:11:82:
b0:49:e2:11:f1:41:83:e3:1b:d8:74:bb:c4:3a:73:
c4:0d:b3:7f:dd:8f:45:f7:16:99:54:26:85:33:c9:
ff:1b:b5:32:06:d2:a8:5e:ee:1d:d4:a1:cb:dc:33:
e9:48:c4:29:61:31:57:0b:ce:0a:ca:c0:9c:bf:8e:
11:ff:77:59:b7:74:23:84:5a:5e:6f:17:21:f2:4c:
d3:cc:34:8c:a2:25:9b:f7:9d:f7:7c:9b:be:39:6a:
71:85:c0:7e:74:b6:76:fe:cf:04:6b:e3:42:e0:bf:
92:68:6e:1f:f4:69:0a:ab:91:61:b7:72:a3:0e:23:
2c:2c:3a:5b:43:16:ed:58:ae:42:8a:ba:37:8f:51:
13:90:bf:bd:12:a5:ed:63:5a:fb:ea:0e:bd:0b:30:
38:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.147.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13148
Signature Algorithm: sha256WithRSAEncryption
4f:b7:cc:70:2d:f3:dd:b5:fc:21:9b:32:92:60:46:c7:08:0e:
b3:af:4c:45:ab:ec:ec:46:cf:7d:f2:9c:c9:37:93:81:ab:9f:
d8:0e:7a:5a:80:e8:36:d4:c9:4d:21:c0:d7:bb:4f:f8:02:e8:
5e:42:69:e8:02:38:ff:ed:e8:47:47:95:43:31:89:e6:54:74:
00:76:38:47:60:ff:c0:2e:c9:86:91:03:e2:0a:59:ab:7c:cb:
89:8c:bb:40:99:95:5f:15:a9:af:48:e7:12:57:4c:df:13:35:
55:39:b9:4f:bb:95:2b:ce:67:2a:a2:78:c1:07:76:a2:63:bf:
72:3e:b5:de:7f:01:e6:48:4b:c8:c8:b0:e3:7f:e1:fb:a9:e3:
d1:69:8f:3b:43:27:6c:c0:ea:db:59:f5:d3:cc:ed:5f:e6:02:
da:2f:57:ee:67:00:dd:0c:cb:76:04:4e:e0:81:8f:a0:94:6f:
dc:b6:b9:2f:50:e0:5d:f0:45:ba:4f:9a:e8:cd:23:b1:b4:9b:
7d:5a:e2:4d:36:54:9d:24:22:7c:52:57:d7:00:93:42:bb:3d:
b8:41:5d:88:bc:e3:d3:5e:b1:2f:3f:4f:ae:13:22:91:7c:3e:
27:d6:c5:5b:89:3b:fa:8d:0c:5f:45:7b:09:4d:34:87:f5:2c:
b9:7f:c6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:59:34 2025 by rpki-client