Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
File: IPX_B2cEUj_2vogrh-76gHsYiqk.cer (raw, json)
Hash identifier: l43jfvuS5wSR73uePRaZrBCNNB9KUELywp9WDyBJ0Q0=
Subject key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E2B731F3A72B8CB94F3849CDB39DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42174
IP: 91.234.226.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2b:73:1f:3a:72:b8:cb:94:f3:84:9c:db:39:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:fa:9a:34:78:8d:26:bc:c1:51:45:69:d2:
3f:72:84:c1:7d:fb:02:33:fa:49:fa:26:4b:74:34:
dc:12:24:ee:64:ef:a1:56:c4:d5:ca:3c:34:37:8c:
d6:ee:73:48:59:cf:d9:21:e2:c8:c9:8c:92:ca:fd:
c0:c8:c4:ad:e4:a8:ab:cc:4f:2e:48:8b:2f:00:c3:
da:8c:67:73:ad:53:86:58:2b:f4:60:4e:b2:95:45:
9d:97:8f:05:da:c4:8a:c3:fb:47:6d:2a:49:9f:c4:
35:e7:87:d7:12:bd:59:61:cd:39:32:d3:ee:0d:2f:
9f:50:a6:de:6d:56:81:67:58:6e:bc:e0:10:1e:50:
dc:de:1f:40:a0:25:4b:44:18:6b:8a:4d:04:63:7e:
30:cb:54:a8:d5:00:82:84:ac:0b:79:2f:92:46:fd:
a2:52:1a:e2:29:40:45:22:ed:c9:74:f3:62:8d:d8:
bb:57:18:7f:93:8c:88:9e:9a:72:8e:9c:b4:c6:d3:
66:82:73:b0:db:61:6e:ed:21:bf:13:03:6f:bf:b4:
02:8e:de:57:2a:43:aa:05:9b:10:d4:e8:fe:2b:df:
a7:02:c2:8c:52:21:71:7e:4c:6c:02:ef:a2:32:05:
cc:92:1a:f7:39:db:51:bc:01:7a:08:79:43:4a:6c:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.226.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42174
Signature Algorithm: sha256WithRSAEncryption
72:bc:92:91:08:8f:41:c8:7d:54:33:29:58:96:00:af:5a:67:
f7:cf:31:eb:95:71:74:a6:ad:39:d6:54:2b:9d:9a:4a:c8:11:
30:25:60:0d:b6:76:0e:6d:a7:06:3b:f3:5b:0d:f8:7a:90:da:
1a:1b:a6:3f:6c:ce:70:51:c9:2b:a7:fc:1f:62:9f:d8:87:1b:
16:42:b4:a4:82:18:6f:c7:8c:38:ee:45:5e:d1:e4:4c:a9:a1:
26:8b:4f:5f:ce:e2:3c:61:0d:49:13:45:a5:79:2a:28:56:82:
20:ba:73:72:83:f4:aa:65:63:e6:a7:a6:05:44:2c:91:32:45:
3c:e0:86:05:60:3c:10:c6:6a:65:b1:ba:f5:a5:b0:5e:bd:e0:
fe:3a:42:e7:1c:e0:5c:68:3a:38:d8:10:b5:56:fb:bd:84:2b:
8d:0d:0f:61:5c:b6:ed:a4:f6:b4:a1:6a:4b:8a:ff:a3:45:8c:
1b:e0:a4:87:98:69:c8:bd:de:4e:06:c9:46:07:bb:29:09:99:
cf:a5:7e:70:32:3e:4f:02:2c:8a:f5:d5:fe:48:e7:33:5d:f5:
15:cf:e5:9c:f3:c5:4f:c1:6d:0e:d3:a8:a9:e2:57:d9:69:76:
0b:56:e4:2e:10:d0:54:89:d1:40:6f:66:93:e9:0a:a8:e2:d7:
ff:5f:70:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 12:26:12 2024 by rpki-client on console-ams.rpki-client.org