Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
File: IzlKEl-jrODEem_jT0CGtNO6VYg.cer (raw, json)
Hash identifier: I/Kc1hqiltVwJMzD1SjspidAJ/hsxhB5Qh1xD4uZXFY=
Subject key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D8E43A56D41A45CFF438DCA50DD69D12B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 09 Feb 2024 14:26:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21229
AS: 197248
IP: 62.112.192.0/21
IP: 62.112.208.0/21
IP: 77.111.88.0 -- 77.111.111.255
IP: 93.88.192.0/21
IP: 109.61.0.0/22
IP: 109.61.8.0/21
IP: 109.61.20.0 -- 109.61.31.255
IP: 109.61.48.0 -- 109.61.79.255
IP: 109.61.96.0/21
IP: 109.61.112.0/21
IP: 2a01:be00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:43:a5:6d:41:a4:5c:ff:43:8d:ca:50:dd:69:d1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 9 14:26:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:5f:0d:17:43:5d:95:87:86:d1:7c:92:7e:
00:05:26:d0:68:9d:68:2a:f4:e2:54:4f:a7:0a:79:
3d:d1:5c:52:1a:be:5d:78:5e:63:19:95:9b:7b:53:
75:fd:5f:dd:8c:f9:e0:d5:5b:d1:e9:24:d7:67:a5:
a0:cb:1e:e9:cf:91:01:e0:9f:13:d8:41:b5:ba:34:
7d:e2:5d:a0:52:06:aa:1a:d6:b8:20:d5:38:ea:a5:
83:46:06:55:b1:de:d0:75:cc:4a:e0:ed:a9:07:b3:
33:08:8b:c6:af:b1:a1:9c:7d:bf:30:46:34:e8:64:
8c:2f:3b:1d:74:bc:27:7f:26:db:84:5f:43:42:89:
4e:af:b2:2a:21:36:7f:cf:40:48:96:d2:43:42:f9:
79:25:12:a4:61:57:60:61:26:f2:f2:26:ae:db:3d:
94:ca:6b:0b:8b:97:55:de:1d:dd:34:08:b4:e4:13:
56:6d:50:a0:d3:85:32:db:fe:44:2d:91:6d:9f:13:
95:dc:5b:98:ea:0a:d3:85:0b:b5:fc:64:b6:12:fc:
02:9a:82:a2:6e:af:a4:96:02:a5:27:09:b7:18:2d:
5c:b4:b8:6f:1e:ad:da:3e:45:0f:f3:58:78:91:c6:
f7:30:2f:27:d5:6c:0c:e5:97:75:da:c5:ec:61:4a:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.192.0/21
62.112.208.0/21
77.111.88.0-77.111.111.255
93.88.192.0/21
109.61.0.0/22
109.61.8.0/21
109.61.20.0-109.61.31.255
109.61.48.0-109.61.79.255
109.61.96.0/21
109.61.112.0/21
IPv6:
2a01:be00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21229
197248
Signature Algorithm: sha256WithRSAEncryption
65:25:58:e5:d4:3d:bf:69:dd:67:ca:b5:4c:7f:92:94:ad:31:
27:cb:91:21:d1:13:07:eb:06:a5:4c:ab:61:d8:08:ba:9d:2d:
f2:fd:ae:bc:66:72:a7:cb:f8:f0:f7:3d:cc:4b:97:86:29:94:
36:1c:69:5d:56:6b:d0:3e:0a:a2:9f:be:b6:b0:81:10:d1:89:
7f:da:a1:3a:93:22:da:ce:8c:f8:ca:8f:ab:77:74:0b:28:c3:
11:96:fe:fa:8b:76:43:0d:35:3d:30:58:7a:80:41:d8:37:d8:
3d:fb:c5:43:4a:6a:96:ef:69:2f:25:31:1e:1c:23:e1:4f:df:
44:ae:8d:9a:a3:bd:90:52:c6:90:ae:68:bc:f1:21:d2:ef:12:
8e:56:a6:74:1c:fc:0a:db:0b:60:f6:47:74:59:43:08:f9:3f:
51:20:15:84:23:4b:70:96:a8:48:4b:57:00:91:95:3a:c2:2e:
b2:5a:6a:1c:a0:f3:6d:5b:c8:2b:f9:de:f5:b4:47:67:ca:48:
87:59:9c:75:96:3f:49:74:de:fb:04:8c:f9:23:b7:31:2e:01:
a4:f9:61:09:63:5d:57:9b:92:a7:90:0f:00:23:6f:d5:a8:72:
ef:9a:9f:5d:57:a7:22:0d:ea:01:fa:ac:b3:c5:e4:37:64:7d:
9a:81:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:02:13 2024 by rpki-client on console-ams.rpki-client.org