Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
File: IYLNOsXE22fqcxprcZi31uT_EVw.cer (raw, json)
Hash identifier: ACYdN17IT97bDOs97HtfkYTd3smnzDaNql2N2kd5/Ns=
Subject key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34961DE8FFB33033E7C6E134FA875A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211262
IP: 37.252.220.0/24
IP: 2a05:5180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:61:de:8f:fb:33:03:3e:7c:6e:13:4f:a8:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:2d:7f:eb:2c:30:9f:d0:a3:40:2c:93:d9:
0e:b1:99:5c:19:71:2e:90:1d:fd:5b:9c:f5:31:f4:
40:98:d7:a0:8d:a1:b5:07:bd:67:cc:44:88:1d:5c:
3f:f4:41:38:7d:17:a3:bd:ed:e8:8d:1b:00:50:99:
64:b6:b7:08:cb:dc:8b:bd:8c:7d:c8:19:60:4a:8f:
4e:be:77:f5:a4:8d:6c:22:e1:56:a9:9c:1a:8e:56:
c3:1c:75:6b:22:f1:08:de:38:9b:4e:3f:00:ae:e0:
6b:be:55:73:35:08:8a:68:e8:9b:cb:6b:a8:21:33:
43:17:f3:fb:09:b3:4f:56:21:82:a6:70:b4:b7:16:
93:5d:41:7f:b2:88:a6:98:59:0a:61:a0:a2:f2:87:
2c:cc:f9:3e:7e:4a:b3:9e:17:9f:0f:97:3f:74:9a:
2e:37:28:f6:c0:2b:cf:bf:8e:11:92:25:ae:17:b3:
17:59:eb:ef:71:45:28:3e:01:1a:7d:55:dc:84:08:
47:5f:f0:17:be:06:b5:e5:21:f1:2a:a0:14:e9:b1:
af:45:be:66:ba:21:a4:6d:70:4c:a8:2c:cd:f7:f1:
7f:e1:0f:e9:96:b8:09:c0:19:e6:2b:de:6b:a4:59:
3a:6c:cb:8e:77:27:98:5e:d6:58:27:60:e8:d2:af:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.220.0/24
IPv6:
2a05:5180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211262
Signature Algorithm: sha256WithRSAEncryption
3d:c9:06:f6:dd:77:48:26:5f:18:20:3d:b7:4d:ce:c6:41:e7:
ec:88:98:3a:43:99:cd:45:48:5e:55:51:1f:5a:fd:f4:68:5f:
28:30:32:a2:3b:b7:a2:ab:96:c0:c5:b0:59:ae:8d:0a:67:67:
c9:33:6a:c7:84:36:7c:1f:9f:2e:cc:eb:54:e2:d8:a6:d8:89:
f1:27:a4:cf:40:75:81:5f:5c:68:81:42:e2:22:52:69:f0:0d:
7f:0a:76:c3:5f:ca:d8:13:b3:1f:44:85:63:24:cb:b4:6b:52:
c7:a6:fd:61:7b:e8:4f:98:06:c4:e2:b6:34:10:57:ed:79:d4:
a7:dd:81:16:89:9b:31:4b:32:54:4e:d2:c9:ef:79:99:7e:9f:
de:c5:04:bd:2d:85:ce:aa:2c:7d:ca:55:41:ce:c2:da:4a:2b:
cd:fb:b6:c4:e2:b1:cf:5c:f6:e7:c9:1f:e3:56:ef:54:7d:2b:
ae:9a:a2:66:be:4d:8f:a3:53:d0:b5:b5:f4:65:b4:28:17:1f:
07:6b:84:a4:85:d2:4e:c1:3a:9a:01:5c:d4:48:06:62:4a:83:
ef:08:bb:e0:0d:01:cd:06:89:01:9b:e5:4c:b9:83:3d:3e:9d:
52:f3:df:d2:e0:60:fd:d3:52:59:f4:46:69:5c:25:ff:d6:79:
3f:9c:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 17:58:25 2024 by rpki-client on console-fra.rpki-client.org