Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
File: F7UEL8INm6sWduCa9_8bpb-trnU.cer (raw, json)
Hash identifier: y+91TKssRBO5BHEVVZxdI+swXWNiKuKOBYs3fi1I7VI=
Subject key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193538442E81DF5E78F8BF26F3024615143
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 22 Nov 2024 10:56:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213823
IP: 5.180.179.0/24
IP: 31.217.248.0/24
IP: 46.254.108.0/24
IP: 62.68.66.0/24
IP: 84.54.35.0/24
IP: 87.236.148.0/24
IP: 91.198.200.0/24
IP: 91.205.223.0/24
IP: 91.242.242.0/24
IP: 94.247.138.0/24
IP: 146.19.7.0/24
IP: 146.19.155.0/24
IP: 178.212.142.0/24
IP: 178.212.224.0/24
IP: 185.65.70.0/24
IP: 185.137.164.0/24
IP: 185.184.219.0/24
IP: 185.249.53.0/24
IP: 193.3.175.0/24
IP: 193.35.228.0/24
IP: 193.163.200.0/24
IP: 194.9.181.0/24
IP: 194.62.162.0/24
IP: 212.23.198.0/24
IP: 217.119.143.0/24
IP: 2a03:cc40::/29
IP: 2a0c:e500::/29
IP: 2a10:1d80::/29
IP: 2a11:1300::/29
IP: 2a11:1ac0::/29
IP: 2a11:3140::/29
IP: 2a11:3c80::/29
IP: 2a11:5340::/29
IP: 2a11:53c0::/29
IP: 2a11:5440::/29
IP: 2a11:5500::/29
IP: 2a11:7a00::/29
IP: 2a11:7dc0::/29
IP: 2a11:8380::/29
IP: 2a11:ac00::/29
IP: 2a11:b040::/29
IP: 2a11:b300::/29
IP: 2a11:c000::/29
IP: 2a11:ec80::/29
IP: 2a12:600::/29
IP: 2a12:2580::/29
IP: 2a12:2900::/29
IP: 2a12:5000::/29
IP: 2a12:b880::/29
IP: 2a12:d300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:84:42:e8:1d:f5:e7:8f:8b:f2:6f:30:24:61:51:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 22 10:56:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:b6:a7:95:3b:8d:2b:70:6d:30:bc:b3:c7:
93:c2:ef:be:ad:8b:da:63:eb:f8:fe:d7:bd:fe:a0:
ca:97:e0:61:bd:cd:04:a9:f8:6b:0a:85:e6:ff:2d:
4b:4b:9f:5d:ce:47:37:38:91:88:b3:d0:7a:1e:17:
70:a8:eb:54:41:34:7c:73:40:6c:b7:f6:1d:64:fd:
27:06:1e:7a:18:eb:1f:e6:67:fb:73:51:28:ea:23:
e2:6d:c5:2f:4f:c1:fb:74:d9:2f:ea:80:46:dc:c0:
33:42:f4:54:e9:4a:ed:71:a2:43:5b:4c:95:46:30:
4d:0f:64:ae:a8:a8:02:04:aa:b1:74:9e:9a:f9:86:
ad:39:08:e3:8c:4c:53:e7:e0:b2:69:1b:b0:1e:bf:
4b:35:1e:a1:f1:fc:db:13:2a:16:c2:a1:1d:94:cd:
5a:e5:0a:ee:de:9a:3f:d7:7f:40:5c:3c:59:3a:86:
9d:5b:c0:dd:0f:c8:27:a8:61:6d:53:8a:f6:67:bd:
c8:7a:7c:e3:82:f4:d9:a2:b1:a5:7b:cf:f3:09:9e:
72:bc:00:f5:cf:20:eb:71:9f:cc:77:a5:0c:2a:42:
7d:06:27:63:c0:fc:a3:f8:5c:32:b4:12:a6:52:51:
87:7a:25:b1:b4:34:8d:73:ef:cd:c3:eb:39:f3:2e:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.179.0/24
31.217.248.0/24
46.254.108.0/24
62.68.66.0/24
84.54.35.0/24
87.236.148.0/24
91.198.200.0/24
91.205.223.0/24
91.242.242.0/24
94.247.138.0/24
146.19.7.0/24
146.19.155.0/24
178.212.142.0/24
178.212.224.0/24
185.65.70.0/24
185.137.164.0/24
185.184.219.0/24
185.249.53.0/24
193.3.175.0/24
193.35.228.0/24
193.163.200.0/24
194.9.181.0/24
194.62.162.0/24
212.23.198.0/24
217.119.143.0/24
IPv6:
2a03:cc40::/29
2a0c:e500::/29
2a10:1d80::/29
2a11:1300::/29
2a11:1ac0::/29
2a11:3140::/29
2a11:3c80::/29
2a11:5340::/29
2a11:53c0::/29
2a11:5440::/29
2a11:5500::/29
2a11:7a00::/29
2a11:7dc0::/29
2a11:8380::/29
2a11:ac00::/29
2a11:b040::/29
2a11:b300::/29
2a11:c000::/29
2a11:ec80::/29
2a12:600::/29
2a12:2580::/29
2a12:2900::/29
2a12:5000::/29
2a12:b880::/29
2a12:d300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213823
Signature Algorithm: sha256WithRSAEncryption
7e:92:12:6c:cd:52:63:bb:ef:dc:8c:37:ba:bf:d0:2a:7f:6c:
57:ec:d8:08:20:99:83:f6:d2:88:fd:34:52:f5:b1:07:5d:69:
54:4a:e1:2e:ef:23:17:3b:25:a2:53:1b:79:36:21:00:45:d2:
15:df:b4:11:52:34:81:68:ea:3f:79:46:4c:9d:86:5c:06:b8:
8a:2c:f3:0a:3a:8a:69:4d:fb:0a:27:88:76:50:17:41:4c:58:
40:9b:e2:83:22:c6:4f:b7:03:67:26:9c:18:97:fa:fe:82:81:
53:95:ff:b5:22:f4:34:36:65:8e:8d:e0:35:f4:54:35:78:14:
72:fe:8a:07:76:9d:f1:8b:06:55:51:2e:58:3b:0e:13:3f:13:
45:7a:47:b1:f3:82:e1:a1:b5:9b:ac:9a:ed:a8:ab:cd:d9:3e:
d6:b5:e3:d6:3b:c6:98:24:31:2d:8d:2d:e8:45:73:02:ec:d3:
47:ef:e8:71:48:7c:55:55:68:ba:79:89:04:b2:e2:25:0a:c9:
8b:7e:6b:70:b8:1a:85:f0:eb:88:83:09:95:85:e5:7f:39:70:
9f:96:2a:a8:46:f4:d8:44:f6:e9:bd:a1:9b:fd:d0:83:57:07:
e2:69:a5:ca:f6:f5:90:db:89:df:ce:d1:1e:37:9a:bd:89:dc:
67:19:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:53:52 2024 by rpki-client on console-fra.rpki-client.org