Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.cer (raw, json)
Hash identifier: c+Esj5orj2Gqeco/Y05rp8saXFmUznoEppSQedjU0sI=
Subject key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0191FB34A8D1D401FB9269C0858C15195012
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Sep 2024 14:20:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214294
IP: 123.100.225.0/24
IP: 2a01:ee80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fb:34:a8:d1:d4:01:fb:92:69:c0:85:8c:15:19:50:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 16 14:20:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f025fa357c20abbf118426234658e62d7dc7076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:01:72:53:74:79:c5:e4:cb:99:a1:e7:3a:
85:ca:f7:33:62:42:93:cc:34:fa:44:67:f1:ca:98:
eb:04:6d:78:89:50:28:0d:77:5e:8c:ed:fd:d3:34:
54:db:b1:1b:43:93:33:e9:bf:64:1b:16:30:fe:6b:
78:f3:59:92:a9:d7:5a:6f:46:01:9e:75:f4:5a:e2:
13:3e:d1:bd:88:29:3d:54:68:9e:ca:82:cb:6e:0e:
26:6d:71:6a:69:64:63:b7:95:5f:72:bb:e2:91:ee:
fc:5e:d0:0d:21:23:93:11:ee:f3:6d:65:01:30:90:
78:93:c6:bc:25:02:7b:52:0c:ca:01:9a:87:55:fe:
72:25:45:e6:c1:4f:b2:6d:72:8d:be:80:68:59:07:
a9:54:a5:a2:b7:e7:5a:c5:a4:5c:62:4a:0f:1a:d5:
48:72:50:30:7d:63:f8:d7:79:25:2c:37:be:42:e8:
b3:8a:ca:75:57:9d:a8:6c:79:f4:1d:bb:16:c1:d2:
c7:91:e1:b2:d5:0e:1c:b0:c1:c9:86:20:90:5b:a5:
15:a2:ef:13:ca:39:8f:f0:a0:c4:02:42:7f:2c:a2:
21:e1:f3:af:76:41:a0:47:6c:88:6c:7b:72:34:db:
bd:8e:fd:34:a9:29:35:30:ec:b0:0b:77:83:cd:b2:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.100.225.0/24
IPv6:
2a01:ee80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214294
Signature Algorithm: sha256WithRSAEncryption
3b:10:28:de:0c:1c:27:e2:d2:77:0c:e0:cb:f3:18:10:77:29:
c5:29:8e:89:ad:4f:1b:81:cb:f2:e6:08:36:d5:4e:70:23:07:
79:c6:5a:f3:fe:9c:f9:5e:ff:cf:e5:7b:94:eb:b8:be:77:ac:
3f:00:50:0f:b3:f9:ca:d6:eb:fc:18:0d:1b:d4:98:76:4f:f6:
81:77:6e:b9:3a:60:7f:d0:79:2d:c3:43:19:c1:a9:a9:90:2e:
a2:ee:bd:05:2e:1f:6a:53:c1:3d:7c:87:fe:cf:29:f6:9f:29:
c1:50:9a:06:d1:cc:24:1a:20:76:b8:19:58:69:d2:d6:0b:d8:
55:5f:54:26:b0:e8:e0:8a:af:b0:6c:cb:dc:63:ad:e6:9c:59:
c6:cb:9f:b0:94:6d:07:57:ee:fd:43:a7:45:1a:2e:d7:7c:71:
02:63:ce:9f:e5:4e:b6:d2:c3:60:3a:fe:28:ef:3e:2e:49:c6:
08:5c:8c:1d:ed:f9:9b:6f:45:44:a9:c5:69:f2:b7:ab:b5:3c:
1a:05:c5:72:49:f6:c7:38:ec:0f:83:49:50:26:01:c6:e2:03:
bd:8b:86:64:f1:f0:02:4d:01:cc:99:e5:b5:f0:0e:f2:f3:f8:
03:44:15:bf:ee:06:98:46:0f:7a:c9:cb:f3:f1:91:5f:4c:7a:
6e:b8:d3:95
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZH7NKjR1AH7kmnAhYwVGVASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwOTE2MTQyMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjAyNWZhMzU3YzIwYWJiZjExODQyNjIzNDY1OGU2MmQ3ZGM3MDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CABclN0ecXky5mh5zqFyvczYkKT
zDT6RGfxypjrBG14iVAoDXdejO390zRU27EbQ5Mz6b9kGxYw/mt481mSqddab0YB
nnX0WuITPtG9iCk9VGieyoLLbg4mbXFqaWRjt5Vfcrvike78XtANISOTEe7zbWUB
MJB4k8a8JQJ7UgzKAZqHVf5yJUXmwU+ybXKNvoBoWQepVKWit+daxaRcYkoPGtVI
clAwfWP413klLDe+Quizisp1V52obHn0HbsWwdLHkeGy1Q4csMHJhiCQW6UVou8T
yjmP8KDEAkJ/LKIh4fOvdkGgR2yIbHtyNNu9jv00qSk1MOywC3eDzbKSEwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFA8CX6NXwgq78RhCYjRljmLX3HB2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzExNGEx
MC04ZWY3LTQ5MDMtOTYzZS1kNGQ1OWEwOTVjN2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMTE0YTEw
LThlZjctNDkwMy05NjNlLWQ0ZDU5YTA5NWM3Zi8xL0R3SmZvMWZDQ3J2eEdFSmlO
R1dPWXRmY2NIWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAe2ThMA0EAgACMAcDBQAqAe6AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNFFjANBgkqhkiG9w0BAQsFAAOCAQEAOxAo3gwcJ+LS
dwzgy/MYEHcpxSmOia1PG4HL8uYINtVOcCMHecZa8/6c+V7/z+V7lOu4vnesPwBQ
D7P5ytbr/BgNG9SYdk/2gXduuTpgf9B5LcNDGcGpqZAuou69BS4falPBPXyH/s8p
9p8pwVCaBtHMJBogdrgZWGnS1gvYVV9UJrDo4IqvsGzL3GOt5pxZxsufsJRtB1fu
/UOnRRou13xxAmPOn+VOttLDYDr+KO8+LknGCFyMHe35m29FRKnFafK3q7U8GgXF
ckn2xzjsD4NJUCYBxuIDvYuGZPHwAk0BzJnltfAO8vP4A0QVv+4GmEYPesnL8/GR
X0x6brjTlQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:12:52 2024 by rpki-client on console-ams.rpki-client.org