Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer (raw, json)
Hash identifier: tqtZcZ0dAeK2oYLFJlIbXH6oDU1aGTKolHihXHFpCuQ=
Subject key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500DFD2D5DABC5E4126CB24D008754E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29522
AS: 34360
AS: 41079
AS: 43758
AS: 47383
AS: 48760
AS: 198414
IP: 91.198.146.0/24
IP: 91.199.22.0/24
IP: 91.213.206.0/24
IP: 91.224.38.0/23
IP: 91.225.28.0/22
IP: 91.228.196.0/22
IP: 91.234.146.0/24
IP: 91.237.52.0/24
IP: 91.239.66.0/23
IP: 93.157.96.0/21
IP: 94.152.0.0/16
IP: 178.250.40.0/21
IP: 185.5.96.0/22
IP: 185.11.100.0/22
IP: 185.25.148.0/22
IP: 185.84.136.0/22
IP: 185.123.160.0/22
IP: 185.140.120.0/22
IP: 185.142.204.0/22
IP: 185.180.204.0 -- 185.180.211.255
IP: 185.193.112.0/22
IP: 185.201.112.0/22
IP: 185.204.216.0/22
IP: 185.208.164.0/22
IP: 185.212.132.0/22
IP: 185.243.52.0/22
IP: 193.17.184.0/24
IP: 193.218.152.0/22
IP: 194.60.251.0/24
IP: 194.169.227.0/24
IP: 195.2.254.0/23
IP: 195.62.12.0/23
IP: 195.78.66.0/23
IP: 195.114.0.0/23
IP: 195.149.224.0/21
IP: 195.242.116.0/23
IP: 213.108.56.0/21
IP: 2001:67c:2e0::/48
IP: 2a00:76a0::/32
IP: 2a00:e940::/32
IP: 2a01:4660::/32
IP: 2a02:1778::/32
IP: 2a02:7240::/32
IP: 2a07:1cc0::/29
IP: 2a0a:b180::/29
IP: 2a0a:c2c0::/29
IP: 2a0a:fe40::/29
IP: 2a0b:3ac0::/29
IP: 2a0b:77c0::/29
IP: 2a0d:680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:df:d2:d5:da:bc:5e:41:26:cb:24:d0:08:75:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:7a:b3:8f:d4:eb:59:69:01:cf:33:3f:8f:
10:5e:2c:69:d5:8c:d8:97:0d:93:77:f8:4b:c9:59:
11:5c:63:66:52:48:90:8c:ae:f2:b2:26:81:8c:90:
02:59:da:d6:ed:2f:88:26:d7:c8:01:2b:c0:19:b4:
7b:e4:1d:76:ee:66:b0:ae:7c:fc:24:6b:0c:ba:ae:
71:b9:90:5a:cb:eb:d9:fe:f7:60:de:18:d0:33:72:
65:19:29:8c:87:2b:a4:9c:66:fa:ff:56:2d:90:fc:
83:58:ba:5d:4e:48:ef:27:e4:d8:02:df:08:96:04:
af:54:23:9e:54:a2:be:d1:24:fe:56:e2:14:47:9b:
a8:8b:ca:0a:e3:e5:a7:58:ce:7a:07:1a:d2:f1:ed:
c4:08:92:7e:a0:93:21:16:06:46:4c:39:ef:e1:d2:
ce:77:ff:ad:1f:f4:b0:ef:9e:9d:c2:83:a9:d6:08:
ad:ae:b9:da:ca:5f:b0:33:24:d2:9c:a0:a9:d9:33:
50:b5:c0:1b:40:d3:0f:d6:59:98:16:bf:ec:8b:75:
62:45:cb:62:c4:1f:f0:80:c5:bb:e7:61:af:68:f3:
29:05:12:87:98:8a:a0:1a:21:e2:0b:cd:fe:69:70:
49:e1:3a:fe:a3:d2:b0:2b:bb:3c:10:08:56:4f:d0:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.146.0/24
91.199.22.0/24
91.213.206.0/24
91.224.38.0/23
91.225.28.0/22
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
93.157.96.0/21
94.152.0.0/16
178.250.40.0/21
185.5.96.0/22
185.11.100.0/22
185.25.148.0/22
185.84.136.0/22
185.123.160.0/22
185.140.120.0/22
185.142.204.0/22
185.180.204.0-185.180.211.255
185.193.112.0/22
185.201.112.0/22
185.204.216.0/22
185.208.164.0/22
185.212.132.0/22
185.243.52.0/22
193.17.184.0/24
193.218.152.0/22
194.60.251.0/24
194.169.227.0/24
195.2.254.0/23
195.62.12.0/23
195.78.66.0/23
195.114.0.0/23
195.149.224.0/21
195.242.116.0/23
213.108.56.0/21
IPv6:
2001:67c:2e0::/48
2a00:76a0::/32
2a00:e940::/32
2a01:4660::/32
2a02:1778::/32
2a02:7240::/32
2a07:1cc0::/29
2a0a:b180::/29
2a0a:c2c0::/29
2a0a:fe40::/29
2a0b:3ac0::/29
2a0b:77c0::/29
2a0d:680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29522
34360
41079
43758
47383
48760
198414
Signature Algorithm: sha256WithRSAEncryption
8c:34:c8:98:86:35:eb:df:99:20:51:39:41:a4:fd:d5:5c:0b:
8e:0f:b9:8f:5b:50:56:19:51:bb:e0:31:63:23:40:e2:b5:2f:
d6:36:df:40:7d:bb:f8:7e:e7:36:da:92:e9:9f:57:32:4e:67:
1b:1b:b8:44:8b:c9:65:0e:5e:99:a7:1b:b8:f6:21:f3:13:fc:
c4:69:ac:9e:3a:f0:e3:92:20:2e:38:23:3d:cd:2c:76:9f:4a:
76:4c:26:10:2c:fe:7a:0c:79:14:18:ab:1d:72:cc:0e:10:fd:
6d:00:f8:ed:08:1d:35:8b:ac:12:d7:ce:ae:18:4a:f4:5d:db:
7e:86:98:c7:11:00:38:33:cf:84:9e:48:e6:e9:18:a9:0d:11:
62:a4:35:1d:b9:2a:eb:96:b2:ec:b7:aa:72:b5:1b:fe:6f:54:
6a:74:25:ee:d4:53:22:0d:38:cc:30:b1:06:4c:8d:32:da:f4:
1e:f7:03:86:8b:b1:3e:5d:25:23:a6:cc:9b:30:b1:3d:49:15:
3f:35:c9:72:19:6e:f0:b0:ee:99:ec:bb:8b:81:f7:0b:26:3f:
3f:5f:f7:8d:f7:84:ce:3f:66:0b:ff:23:fa:29:38:a0:0c:15:
b4:d9:84:9b:b2:40:bd:2e:c3:2b:69:4f:20:eb:cb:91:58:e9:
00:6a:08:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:28:08 2024 by rpki-client on console-ams.rpki-client.org