Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.cer (raw, json)
Hash identifier: SbOFtB21mKHE+w8GvChzqGDxyEbn617XdeE/4jSM3x4=
Subject key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49385CF9E1E26F0314B1B2A3E638225
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201754
IP: 91.198.56.0/24
IP: 193.42.218.0/24
IP: 2001:678:fec::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:85:cf:9e:1e:26:f0:31:4b:1b:2a:3e:63:82:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:f8:48:5f:b2:78:f3:0c:d0:a5:23:80:13:
76:34:0d:4b:0f:4a:2a:2b:d0:a0:b1:24:32:27:1f:
c1:0a:25:1d:c2:02:49:c5:28:39:43:9f:92:7a:21:
59:8d:6d:f0:73:32:8a:8b:5a:58:b0:8f:d1:db:76:
b5:d0:96:18:88:30:44:9a:04:93:c6:4d:79:97:4f:
89:85:ca:b3:2e:98:50:43:e3:48:b9:eb:89:db:a2:
4e:95:29:6b:5e:d3:36:40:8f:05:aa:6d:8a:f7:7c:
cb:22:08:ca:c4:09:9e:4f:26:77:7d:b4:4c:da:7c:
ee:38:57:18:84:7a:de:d1:24:31:ac:28:c2:2b:55:
16:fc:9c:6e:fd:ec:e3:cf:98:48:11:cb:9b:e7:26:
3c:75:f9:a3:95:8d:83:72:6d:79:5e:4f:88:02:70:
98:f7:a1:1a:dd:63:47:16:84:55:35:c6:23:15:1e:
96:4c:0d:52:9f:ed:d8:7d:b6:41:e5:3c:70:70:16:
26:fb:a0:c8:5f:db:8f:46:b9:dd:f7:aa:c4:37:9c:
bd:80:61:1b:5f:b1:c3:f8:be:2a:c5:79:bc:01:41:
7d:fb:58:10:28:1b:72:e9:1b:a9:82:35:66:8b:92:
8c:38:9d:00:4d:d1:1b:03:67:c0:cc:df:21:ba:5c:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.56.0/24
193.42.218.0/24
IPv6:
2001:678:fec::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201754
Signature Algorithm: sha256WithRSAEncryption
ac:41:a1:e2:cc:de:8d:b9:8e:92:81:4b:82:79:3b:91:7b:ca:
52:33:84:23:4c:ec:08:cc:80:e0:7f:a6:6f:0a:92:b8:b7:09:
3e:96:4a:36:cb:1d:79:f3:08:f0:7a:92:6e:9b:7b:54:54:ab:
96:70:cf:e6:2c:a3:99:05:e2:54:ec:df:e6:59:33:f5:e6:2c:
ae:4a:dc:6a:e8:f4:a8:7a:48:7f:63:ee:91:b6:c1:b7:0d:9b:
0a:0d:ca:ca:83:dc:ab:7a:23:1c:b5:14:c8:a0:96:99:d4:2c:
ff:ab:1d:58:4d:75:22:ee:01:eb:14:21:de:5d:53:3d:17:53:
fa:6e:06:ca:4c:8b:54:02:16:f9:cc:7b:48:83:9b:0d:56:e2:
b6:04:4a:49:6d:af:3e:75:f8:1b:93:7b:39:23:a3:55:77:e5:
72:fa:1d:99:e0:81:d2:e1:bc:13:a1:4c:44:f3:42:61:90:1f:
93:5d:33:e9:05:ac:e3:f5:06:2b:92:30:ae:03:9b:4a:3c:e6:
6f:11:4e:80:d9:fa:ea:d4:92:55:51:54:cd:39:79:5f:fa:3a:
52:2a:5e:3e:03:b7:c7:32:b9:0a:d0:af:86:3c:d6:9d:d3:de:
4e:62:36:20:c0:6b:37:4c:2a:99:0a:35:65:2f:0f:2c:05:55:
19:63:61:ff
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAYzEk4XPnh4m8DFLGyo+Y4IlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzhhYWUxODljNjNjZWI1NjQzY2IwODAzMjdiY2FhM2IwZWY4YTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rf4SF+yePMM0KUjgBN2NA1LD0oq
K9CgsSQyJx/BCiUdwgJJxSg5Q5+SeiFZjW3wczKKi1pYsI/R23a10JYYiDBEmgST
xk15l0+JhcqzLphQQ+NIueuJ26JOlSlrXtM2QI8Fqm2K93zLIgjKxAmeTyZ3fbRM
2nzuOFcYhHre0SQxrCjCK1UW/Jxu/ezjz5hIEcub5yY8dfmjlY2Dcm15Xk+IAnCY
96Ea3WNHFoRVNcYjFR6WTA1Sn+3YfbZB5TxwcBYm+6DIX9uPRrnd96rEN5y9gGEb
X7HD+L4qxXm8AUF9+1gQKBty6RupgjVmi5KMOJ0ATdEbA2fAzN8hulwTawIDAQAB
o4ICtzCCArMwHQYDVR0OBBYEFAyKrhicY861ZDywgDJ7yqOw74pZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzUwMTVm
Ni0wYmQwLTQ5ZjktYjg1NC1iNmJhODZjZjMxZjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNTAxNWY2
LTBiZDAtNDlmOS1iODU0LWI2YmE4NmNmMzFmOS8xL0RJcXVHSnhqenJWa1BMQ0FN
bnZLbzdEdmlsay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTASBAIAATAMAwQAW8Y4AwQAwSraMA8EAgACMAkDBwAgAQZ4D+ww
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAxQaMA0GCSqGSIb3DQEBCwUAA4IBAQCs
QaHizN6NuY6SgUuCeTuRe8pSM4QjTOwIzIDgf6ZvCpK4twk+lko2yx158wjwepJu
m3tUVKuWcM/mLKOZBeJU7N/mWTP15iyuStxq6PSoekh/Y+6RtsG3DZsKDcrKg9yr
eiMctRTIoJaZ1Cz/qx1YTXUi7gHrFCHeXVM9F1P6bgbKTItUAhb5zHtIg5sNVuK2
BEpJba8+dfgbk3s5I6NVd+Vy+h2Z4IHS4bwToUxE80JhkB+TXTPpBazj9QYrkjCu
A5tKPOZvEU6A2frq1JJVUVTNOXlf+jpSKl4+A7fHMrkK0K+GPNad095OYjYgwGs3
TCqZCjVlLw8sBVUZY2H/
-----END CERTIFICATE-----
Generated at Sat Apr 20 03:45:15 2024 by rpki-client on console-ams.rpki-client.org