Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
File: IzlKEl-jrODEem_jT0CGtNO6VYg.cer (raw, json)
Hash identifier: /kDYYGQ/qpD4t9LnJsSik+jN1nWH5Mh9Yhn6ac68BR0=
Subject key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01919D91E3FE1BC5917ECA7BD392BD315B9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 29 Aug 2024 09:57:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21229
AS: 197248
IP: 62.112.192.0/21
IP: 62.112.208.0/21
IP: 77.111.88.0/21
IP: 93.88.192.0/21
IP: 109.61.0.0/22
IP: 109.61.8.0/21
IP: 109.61.20.0 -- 109.61.31.255
IP: 109.61.48.0 -- 109.61.79.255
IP: 109.61.96.0/21
IP: 109.61.112.0/21
IP: 2a01:be00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:91:e3:fe:1b:c5:91:7e:ca:7b:d3:92:bd:31:5b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 29 09:57:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:5f:0d:17:43:5d:95:87:86:d1:7c:92:7e:
00:05:26:d0:68:9d:68:2a:f4:e2:54:4f:a7:0a:79:
3d:d1:5c:52:1a:be:5d:78:5e:63:19:95:9b:7b:53:
75:fd:5f:dd:8c:f9:e0:d5:5b:d1:e9:24:d7:67:a5:
a0:cb:1e:e9:cf:91:01:e0:9f:13:d8:41:b5:ba:34:
7d:e2:5d:a0:52:06:aa:1a:d6:b8:20:d5:38:ea:a5:
83:46:06:55:b1:de:d0:75:cc:4a:e0:ed:a9:07:b3:
33:08:8b:c6:af:b1:a1:9c:7d:bf:30:46:34:e8:64:
8c:2f:3b:1d:74:bc:27:7f:26:db:84:5f:43:42:89:
4e:af:b2:2a:21:36:7f:cf:40:48:96:d2:43:42:f9:
79:25:12:a4:61:57:60:61:26:f2:f2:26:ae:db:3d:
94:ca:6b:0b:8b:97:55:de:1d:dd:34:08:b4:e4:13:
56:6d:50:a0:d3:85:32:db:fe:44:2d:91:6d:9f:13:
95:dc:5b:98:ea:0a:d3:85:0b:b5:fc:64:b6:12:fc:
02:9a:82:a2:6e:af:a4:96:02:a5:27:09:b7:18:2d:
5c:b4:b8:6f:1e:ad:da:3e:45:0f:f3:58:78:91:c6:
f7:30:2f:27:d5:6c:0c:e5:97:75:da:c5:ec:61:4a:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.192.0/21
62.112.208.0/21
77.111.88.0/21
93.88.192.0/21
109.61.0.0/22
109.61.8.0/21
109.61.20.0-109.61.31.255
109.61.48.0-109.61.79.255
109.61.96.0/21
109.61.112.0/21
IPv6:
2a01:be00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21229
197248
Signature Algorithm: sha256WithRSAEncryption
2a:75:a9:70:bf:be:be:37:13:3a:82:cc:14:29:81:66:a0:0d:
da:b8:3d:d7:58:65:03:77:7e:41:65:c3:65:2b:56:72:b5:17:
f5:00:ad:02:1d:eb:79:c3:e5:bc:84:09:b1:d1:0a:01:e5:a6:
e8:0d:20:4d:92:9e:a1:56:20:49:59:5f:6c:68:b6:90:23:01:
fc:7e:57:ac:de:a1:39:22:6e:9b:07:5c:37:78:fe:67:9d:97:
44:9c:61:62:8b:e8:3b:54:5e:b7:c9:6c:61:74:e1:81:b5:0a:
79:f1:55:c4:40:5f:bd:42:32:86:cb:15:69:85:9e:7a:14:86:
46:2e:f7:5e:b3:8e:a9:b6:c5:61:8e:b4:7a:18:14:c8:c2:00:
8f:01:8e:63:f0:74:7a:12:62:20:73:8a:62:e6:4e:51:8c:c1:
ac:40:81:81:b6:47:ff:70:6d:ca:a5:6b:48:ef:8f:6f:06:29:
ca:3d:18:31:0e:ef:96:1d:76:63:5d:d8:b7:ff:1d:f6:8e:7a:
8e:5b:3d:50:93:d2:8f:b1:e6:ca:f9:b7:f5:51:00:48:ee:6a:
23:83:ae:67:37:56:2d:35:ed:2f:ee:00:00:b9:3e:02:0e:02:
14:04:05:8f:bc:51:c8:a9:af:21:c0:97:37:4c:d2:65:e9:05:
56:6a:94:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:25:43 2024 by rpki-client on console-fra.rpki-client.org