Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.cer (raw, json)
Hash identifier: uDThITFZ7zgv8FlUnciqHNt/pNVPf0ovUo3jjn+dHfw=
Subject key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192228E49955582F1F53A274948244C0208
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Sep 2024 05:43:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 214224
IP: 121.127.38.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:22:8e:49:95:55:82:f1:f5:3a:27:49:48:24:4c:02:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 05:43:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:95:32:d0:35:4f:6e:bd:1f:78:4a:3f:e5:
2e:9b:87:3b:38:47:d9:6a:cf:78:00:79:6e:5f:e1:
cf:7c:7d:c6:d4:16:42:23:97:e8:4a:a7:e3:87:f0:
7c:4e:6e:fd:5a:47:7e:b6:ba:af:3e:ab:1c:8a:91:
b0:ed:f8:db:16:04:e4:84:c0:d1:97:dd:40:2e:3c:
18:a1:13:c9:6d:e6:76:73:23:a4:12:0a:19:fb:9a:
e8:60:54:7d:c7:84:ed:c4:ba:1f:b8:12:1a:5f:a3:
aa:24:e7:12:ca:98:61:9e:a8:71:8c:b0:ce:69:18:
60:19:90:4f:46:c9:bb:58:ab:a7:46:35:75:63:7f:
7c:40:f0:bb:be:77:55:cd:b0:53:02:82:27:8b:36:
f9:e4:94:84:18:7a:f4:9d:30:09:cc:0f:eb:7a:14:
b9:d7:ad:ce:84:a7:69:d8:1a:69:37:47:fb:d5:50:
da:77:ee:57:b7:93:87:5f:98:84:a2:a8:69:03:6f:
6b:7f:6b:fa:a9:df:db:17:96:1a:71:ba:ae:e8:17:
d2:b9:46:32:14:02:a0:5a:27:38:63:e8:e1:a1:78:
fa:e8:13:e0:b8:e8:21:ea:c4:59:4f:68:f3:04:99:
84:2d:15:18:3a:8c:63:9f:23:0e:2e:ad:7e:0e:c5:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.127.38.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214224
Signature Algorithm: sha256WithRSAEncryption
a0:73:ee:b5:dd:40:0c:ae:c0:d7:42:75:99:7e:b7:10:b3:ed:
52:0f:7e:9c:20:49:c0:84:44:fb:79:ef:52:ab:be:1f:c3:a3:
63:e2:10:9e:ee:84:cd:b2:e7:eb:ad:49:c1:7b:83:92:b8:b9:
0e:3a:f4:6c:09:a6:76:3a:84:79:a4:77:21:f6:74:9a:87:93:
3d:be:0b:63:fe:36:d2:98:10:cf:27:68:4d:90:cd:2c:61:eb:
b2:f6:c5:e9:90:a9:3e:30:83:d9:e2:89:0c:1c:57:cd:43:17:
e0:53:95:f0:91:c4:74:5d:1e:b5:ff:96:c7:ea:2b:1f:13:34:
22:70:e3:89:9d:54:e4:24:e8:68:cf:f4:5a:36:0d:50:0e:e0:
b9:96:52:40:ff:8d:34:b9:11:46:38:84:97:16:92:dc:c9:2b:
d7:22:5a:02:2e:d8:9a:50:ec:2f:1f:50:5c:4b:ec:58:99:2f:
03:54:9a:7d:63:ec:a1:ee:50:33:f2:39:ec:cf:ce:ff:7d:d0:
4b:26:4f:33:90:74:3b:59:fe:a1:5c:2a:99:83:28:46:b0:f0:
48:78:c0:75:9d:b2:65:7a:3f:6b:2b:8f:a1:86:ea:94:f7:86:
9f:6d:41:95:e8:b5:13:99:ce:3c:a5:43:dd:2a:b0:07:41:2c:
e4:90:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 17:30:45 2024 by rpki-client on console-ams.rpki-client.org