Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
File: GzaOcCad5mDLwU35x2OwGHiKH_w.cer (raw, json)
Hash identifier: QCISvkzTpMTaLWLhrJNFGmlxLDV9pl/UPXhlK7BBjoA=
Subject key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA98F84B413294BEDA4B5D615E2E4959
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:34:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204824
IP: 185.218.48.0/22
IP: 2a0b:d340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:98:f8:4b:41:32:94:be:da:4b:5d:61:5e:2e:49:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:34:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:38:2e:19:15:b6:ba:04:25:3e:87:59:1c:8c:
e8:de:79:5d:b1:60:3b:64:ed:93:02:b8:b2:d1:32:
90:1a:e7:07:aa:1c:9b:6d:33:64:39:b8:70:33:53:
74:57:d8:4a:80:21:58:d5:40:8b:d6:28:53:b7:d7:
8e:de:e2:79:c1:27:e7:c9:ae:11:2e:3a:ac:3e:be:
79:b2:06:9d:ac:6a:7f:a9:1c:e7:d7:1b:52:96:80:
eb:2f:ed:ef:70:09:97:ae:c6:26:a9:0a:f0:d6:c2:
46:09:04:f5:3b:bc:bd:0b:de:fd:98:c1:08:59:21:
79:05:5b:f6:b8:42:02:e5:fb:36:f3:d6:0f:48:0e:
09:ab:a9:4b:40:2a:e7:e9:d3:73:2c:c8:76:f5:12:
5d:fe:bd:d7:73:b1:c4:1a:8c:82:2d:96:98:96:ed:
99:71:59:ac:b0:ed:62:3f:ef:c2:f5:cf:25:88:23:
c8:a4:c4:96:11:3a:ed:4b:60:f7:45:84:c3:fd:7c:
ab:44:9a:a5:03:d0:5a:f1:18:0f:ba:0b:8d:f9:ed:
d7:e2:f8:8c:1c:95:c1:9a:a0:79:4d:2c:2b:e4:aa:
a2:52:e5:65:e5:be:5a:67:30:48:50:67:84:2c:77:
f4:4a:10:2b:ea:e0:43:56:d0:d7:d3:23:69:52:83:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.48.0/22
IPv6:
2a0b:d340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204824
Signature Algorithm: sha256WithRSAEncryption
94:8d:f5:ff:d9:a5:17:35:33:92:31:fd:24:07:23:7d:d5:04:
27:c9:82:80:23:6a:09:ad:a8:e7:4c:7f:10:de:c2:e6:d0:48:
ee:59:b8:e5:af:a7:6a:0d:fc:d9:db:e7:bb:9c:21:5e:e4:af:
bd:aa:cf:03:20:a7:c6:ba:b1:72:25:09:d9:21:c0:75:f9:97:
bc:72:3c:07:f3:ff:86:e7:9f:5d:81:10:be:83:f7:45:2f:fe:
86:60:b3:59:af:e3:9d:22:b3:29:70:db:d3:98:9a:25:a2:1b:
99:34:c8:95:5f:a9:04:a8:c8:2d:44:22:19:c2:cb:31:94:c5:
80:d4:96:c8:00:c5:d6:75:81:9e:99:97:b7:27:46:d0:48:dd:
90:ae:5d:ea:07:38:ea:0f:9b:15:d2:a4:c9:58:ff:c6:70:b6:
13:1f:53:d2:d4:f1:8b:13:de:48:bc:40:87:45:f3:9c:3b:fe:
af:bb:60:f4:32:92:21:8c:14:f6:83:8f:da:a0:00:ff:2d:a6:
00:5e:68:e4:18:5b:6e:dc:91:5f:97:c9:d1:78:8e:85:d5:43:
08:43:13:7d:93:ce:02:69:fc:4a:38:4c:f9:cd:ad:ce:42:c5:
02:b2:c6:04:c9:65:da:50:c8:8b:e4:f8:44:79:35:16:98:37:
41:44:9f:b8
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzKmPhLQTKUvtpLXWFeLklZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjM2OGU3MDI2OWRlNjYwY2JjMTRkZjljNzYzYjAxODc4OGExZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TguGRW2ugQlPodZHIzo3nldsWA7
ZO2TAriy0TKQGucHqhybbTNkObhwM1N0V9hKgCFY1UCL1ihTt9eO3uJ5wSfnya4R
LjqsPr55sgadrGp/qRzn1xtSloDrL+3vcAmXrsYmqQrw1sJGCQT1O7y9C979mMEI
WSF5BVv2uEIC5fs289YPSA4Jq6lLQCrn6dNzLMh29RJd/r3Xc7HEGoyCLZaYlu2Z
cVmssO1iP+/C9c8liCPIpMSWETrtS2D3RYTD/XyrRJqlA9Ba8RgPuguN+e3X4viM
HJXBmqB5TSwr5KqiUuVl5b5aZzBIUGeELHf0ShAr6uBDVtDX0yNpUoOuDQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFBs2jnAmneZgy8FN+cdjsBh4ih/8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2Y2NTk2
MC1iMDNjLTQ5OGMtYjZkNS02MDk1MWU5NzU4OGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvZjY1OTYw
LWIwM2MtNDk4Yy1iNmQ1LTYwOTUxZTk3NTg4Yy8xL0d6YU9jQ2FkNW1ETHdVMzV4
Mk93R0hpS0hfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCudowMA0EAgACMAcDBQMqC9NAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMgGDANBgkqhkiG9w0BAQsFAAOCAQEAlI31/9mlFzUz
kjH9JAcjfdUEJ8mCgCNqCa2o50x/EN7C5tBI7lm45a+nag382dvnu5whXuSvvarP
AyCnxrqxciUJ2SHAdfmXvHI8B/P/huefXYEQvoP3RS/+hmCzWa/jnSKzKXDb05ia
JaIbmTTIlV+pBKjILUQiGcLLMZTFgNSWyADF1nWBnpmXtydG0EjdkK5d6gc46g+b
FdKkyVj/xnC2Ex9T0tTxixPeSLxAh0XznDv+r7tg9DKSIYwU9oOP2qAA/y2mAF5o
5BhbbtyRX5fJ0XiOhdVDCEMTfZPOAmn8SjhM+c2tzkLFArLGBMll2lDIi+T4RHk1
Fpg3QUSfuA==
-----END CERTIFICATE-----
Generated at Sat Apr 20 10:28:18 2024 by rpki-client on console-ams.rpki-client.org