Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
File: JlhzriNQ0OPow1U7-QZGESdk4cA.cer (raw, json)
Hash identifier: ne1i79YunxeeyVy0/svbiu4gQw2KLUHASVArX0jE1/8=
Subject key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC1DE13A86C0E37F92DE694DD84EB6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 52177
IP: 194.26.208.0/24
IP: 2a12:5800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1d:e1:3a:86:c0:e3:7f:92:de:69:4d:d8:4e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:d3:11:d3:24:b6:af:92:25:46:f6:f1:8e:
8a:74:9c:4c:1e:e9:16:be:6e:9e:97:e6:e8:eb:47:
fe:5a:7e:c5:18:b7:48:48:a4:6b:9a:25:45:cc:8e:
5b:e5:69:5e:ec:94:95:c7:3c:ff:92:52:78:e8:91:
e1:2e:40:c2:ef:59:b6:54:c9:77:19:97:78:53:b7:
43:e5:20:a0:08:7e:f0:8a:0d:08:fe:b1:42:85:1e:
4d:78:d7:ba:93:f7:d9:93:bb:f0:b5:3b:24:5b:e4:
f8:2a:ca:5d:7a:00:e0:a8:6a:64:cf:75:26:60:42:
8e:c4:ec:cb:75:d3:44:b5:a0:60:ad:cb:6f:5d:10:
e9:91:6d:cd:c0:c1:f0:3a:fe:e7:28:20:19:82:21:
74:45:c0:37:c3:10:9f:dd:63:e5:63:64:04:b4:01:
5a:51:05:f9:a7:25:fc:8c:10:8a:c7:11:6c:a8:4b:
90:c3:9d:73:78:b8:81:40:4f:75:93:d4:c4:f5:0f:
83:30:67:62:ec:3a:ff:64:30:b2:fe:ec:6b:a0:8a:
52:0c:2b:9b:f4:cf:51:fb:84:5b:79:75:49:89:f8:
df:f0:a0:3e:dd:e4:f6:d6:0b:0f:59:5b:b1:84:23:
a3:bd:2d:2a:5d:11:52:14:68:f1:f8:0c:d7:7e:61:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.208.0/24
IPv6:
2a12:5800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52177
Signature Algorithm: sha256WithRSAEncryption
49:16:3a:3e:5c:f1:02:7d:8f:2b:e5:d0:5a:21:c2:bf:20:bc:
9c:cb:8e:5b:39:cd:31:94:bd:24:35:2b:1f:68:39:7e:0e:cd:
4f:38:ba:5b:1b:4f:aa:0c:b5:5f:88:2d:ba:74:99:ba:89:46:
f2:6e:37:fd:1b:26:18:ef:91:d4:49:c8:6e:aa:e8:df:83:10:
f5:08:59:e8:af:f0:4c:87:04:1a:18:42:5e:b0:1c:20:d3:4d:
27:a4:ad:7e:ea:08:af:51:20:9a:e7:ef:a4:2a:93:31:92:2e:
e8:12:98:69:e7:d2:2b:c5:21:ff:a3:7c:a4:58:bb:c1:62:33:
72:ca:ab:27:ec:e4:82:ac:a9:98:56:21:7b:fc:9d:35:f2:05:
2b:59:25:95:ef:b1:70:8a:a6:49:8b:85:2c:4c:f7:94:8f:72:
f8:a6:34:0b:c2:d4:b4:34:43:a7:fa:68:78:3a:8e:16:56:74:
6d:06:3f:0c:78:5e:b6:45:b0:85:b4:00:c7:0d:30:ad:44:24:
6c:d1:65:79:33:78:e8:92:9d:60:d1:be:b5:a9:cd:9d:ff:73:
b2:37:0e:e0:3a:2b:be:e1:9f:f3:d6:9b:df:cf:c6:47:2b:f8:
87:d9:d3:82:53:d7:1f:dc:0b:de:c1:2b:94:9a:93:3c:00:b3:
91:a1:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:13:14 2025 by rpki-client