Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
File: GODpo9IM-sbL48z3SrV4SndoKTM.cer (raw, json)
Hash identifier: WnX9tyWuI9tUi2XjSKzEngDgkBxKQvgb0iGjQ6ur7mg=
Subject key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500AC2AF6593C7826FABE9ED37165EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12826
AS: 34993
IP: 37.148.252.0/22
IP: 89.248.208.0/24
IP: 89.248.210.0/23
IP: 91.151.64.0/20
IP: 141.98.220.0/22
IP: 185.55.164.0/22
IP: 185.57.148.0/22
IP: 185.151.188.0/22
IP: 193.25.122.0/23
IP: 193.25.168.0/23
IP: 2a00:ef60::/29
IP: 2a0a:1580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ac:2a:f6:59:3c:78:26:fa:be:9e:d3:71:65:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:12:04:b3:f5:8f:1d:36:bb:9d:95:0d:c3:
87:9e:71:e9:74:89:c4:21:cd:96:2b:9a:e3:f3:7c:
00:bd:2e:af:a5:f9:61:50:3e:ce:b9:40:f8:1d:c6:
09:bd:4a:ce:d4:37:90:7e:c8:bd:5e:ae:d9:94:42:
63:4b:c6:19:0e:c7:2c:a0:51:e2:53:5f:0c:c8:b8:
d3:cb:b9:eb:a4:cc:12:f8:df:e5:58:a6:f5:cb:0d:
1a:45:8e:b7:cb:70:b6:83:b9:36:96:c3:49:66:9c:
19:65:03:ec:ee:18:bf:cf:52:54:0a:5e:a0:3b:3c:
39:2f:96:bc:01:56:ce:5b:ea:bb:f3:e3:f6:74:41:
33:2d:ec:45:98:e3:8d:7b:b7:23:19:88:60:11:56:
3b:05:97:7b:86:98:1c:ae:cc:2e:53:26:8e:9b:2d:
09:bb:9e:d5:2e:c9:59:6a:13:10:bb:d7:99:34:8c:
c2:14:fe:2a:38:30:7e:de:45:3b:7b:07:68:e3:b3:
72:9c:43:83:68:87:df:e6:1b:4f:94:29:d0:e1:51:
1f:81:17:47:f5:83:44:34:09:2d:52:f0:4a:8b:b6:
1c:25:fb:99:ee:0c:74:a6:44:88:1e:b8:a2:6b:39:
e8:0f:03:41:08:43:3c:07:be:0c:7f:1a:7c:ba:f5:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.252.0/22
89.248.208.0/24
89.248.210.0/23
91.151.64.0/20
141.98.220.0/22
185.55.164.0/22
185.57.148.0/22
185.151.188.0/22
193.25.122.0/23
193.25.168.0/23
IPv6:
2a00:ef60::/29
2a0a:1580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12826
34993
Signature Algorithm: sha256WithRSAEncryption
66:42:29:15:a5:29:81:7d:5c:bc:4c:1d:e6:f1:f8:e6:d4:ec:
a2:8d:e1:4b:18:5d:04:9f:27:a1:91:7e:4a:52:be:97:5d:20:
1c:2a:61:d7:1a:be:63:46:c1:2f:59:50:7d:5a:94:b8:36:ec:
47:ae:c4:93:2a:3a:1a:4b:c6:5c:79:b0:a9:c4:02:30:86:3b:
1b:87:03:9b:95:7c:b9:ae:17:7d:43:03:83:e5:06:49:40:1e:
5e:7a:71:66:f0:b4:2c:4c:39:7e:97:7c:23:c0:20:aa:48:92:
6e:55:c4:48:27:66:92:0b:66:2b:14:64:03:2a:3f:34:aa:50:
c4:f4:65:67:dd:e3:96:73:f7:7a:b4:bf:2e:71:7e:cc:79:06:
cf:73:85:d7:58:a4:75:b2:16:a9:3a:f4:e5:b4:11:13:e8:51:
0f:5c:e5:83:bd:88:ab:24:6f:15:eb:20:ac:41:f4:21:40:4f:
dd:b6:8b:d9:25:a5:a2:1e:46:ca:43:ff:29:dc:6e:c6:f7:b4:
c2:63:82:a7:70:07:7d:6e:f2:d6:d0:35:e0:cf:35:08:2b:d9:
03:01:79:61:51:9d:01:b5:76:e8:af:a2:69:f7:36:4c:67:e3:
91:ef:2a:69:b5:62:9a:fd:8e:75:f6:ad:a2:45:49:28:da:ca:
84:e3:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 07:06:16 2024 by rpki-client on console-ams.rpki-client.org