Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
File: K21-UZH4H_ChnxArFxirT54Oo6A.cer (raw, json)
Hash identifier: rNcjcTboHG5/OK213Kqk1E+6Mbs0q1SvRJkv0KEn4pY=
Subject key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34934E75E1FFA1D888D9DBC5DFD5641
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:04 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21416
AS: 199009
AS: 204582
IP: 45.144.44.0/22
IP: 2a0e:eac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:34:e7:5e:1f:fa:1d:88:8d:9d:bc:5d:fd:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:63:57:c0:32:5e:64:bc:9d:35:09:ce:59:
01:dc:77:5b:c6:ff:38:a4:f4:eb:1a:1f:e9:c2:9e:
8f:b6:9a:53:68:aa:3b:ce:19:8d:bd:aa:97:9b:e9:
46:c4:db:67:08:2d:30:bb:e7:2a:65:9e:43:82:da:
41:45:9b:9a:0f:4f:67:a4:ad:b9:64:97:b5:a9:1a:
c3:d8:20:dd:1d:aa:aa:23:9d:03:72:cf:c6:8d:30:
18:81:cf:be:02:76:38:9f:c3:2b:55:61:47:c7:ae:
0b:72:f8:d2:72:f9:df:85:d7:47:6e:7f:d5:50:6c:
54:c6:4f:67:b0:0b:30:9f:0a:c2:20:42:a8:bd:80:
28:92:29:34:d8:99:62:57:6c:7e:3b:64:e9:2b:af:
2d:b6:02:4c:45:3e:c1:bf:cb:fe:7f:cb:4b:ab:49:
3d:56:c3:b0:cb:f3:53:6d:ed:d5:0a:96:60:c5:e3:
9e:65:36:a5:c6:3a:e7:45:4b:f0:16:55:05:89:fa:
97:e8:78:18:41:b9:6e:ca:76:59:d7:b8:84:6d:0f:
71:38:3c:bd:f3:45:65:c0:b6:31:46:06:30:fa:f2:
61:56:54:f3:41:5c:fb:89:d6:c4:b4:92:c8:d3:21:
d8:cf:25:35:aa:e5:01:ae:fb:11:a9:b1:b1:dc:0d:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.44.0/22
IPv6:
2a0e:eac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21416
199009
204582
Signature Algorithm: sha256WithRSAEncryption
af:10:59:c2:ba:88:cf:e7:8a:c7:15:1c:f4:c5:2b:05:24:81:
dc:1d:0f:fc:28:0c:e2:7b:26:72:5f:8e:74:ca:41:54:7b:b3:
92:d6:55:15:f8:e6:ec:be:54:a4:15:fa:7c:92:08:64:d3:3c:
fa:5b:3f:92:14:f0:f2:0f:f5:2d:45:c4:56:ac:e8:04:2d:e2:
75:fe:93:e1:3f:f7:77:8e:0c:ca:83:05:8b:52:23:66:e0:b2:
70:15:c7:18:8b:98:e2:62:2d:21:0f:c0:b7:51:dc:91:4b:08:
86:4d:02:8c:4a:23:69:6e:dd:ff:54:31:9e:aa:7e:de:3a:76:
93:8f:2e:f9:aa:ad:2f:8a:8f:35:e2:ad:93:90:90:85:e2:bb:
f9:49:35:df:cf:ad:36:49:49:2d:a1:aa:d7:00:79:da:e5:d7:
6b:a6:fa:9c:7a:72:bb:fc:cd:7b:b2:fd:8b:89:93:08:8e:31:
67:5e:e6:61:7d:6b:36:24:22:63:90:ca:8b:e5:93:0e:4f:bb:
0e:7b:ff:dc:90:71:ba:51:85:9d:09:59:35:d7:a7:0d:83:df:
4c:fa:35:44:a6:4b:7b:e8:13:60:a3:de:8b:da:d4:eb:80:23:
ab:c5:dc:df:4b:63:ac:06:ca:67:4e:71:0d:c9:09:d4:0c:d6:
c0:42:f3:06
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAYzDSTTnXh/6HYiNnbxd/VZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjZkN2U1MTkxZjgxZmYwYTE5ZjEwMmIxNzE4YWI0ZjllMGVhM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAretjV8AyXmS8nTUJzlkB3Hdbxv84
pPTrGh/pwp6PtppTaKo7zhmNvaqXm+lGxNtnCC0wu+cqZZ5DgtpBRZuaD09npK25
ZJe1qRrD2CDdHaqqI50Dcs/GjTAYgc++AnY4n8MrVWFHx64LcvjScvnfhddHbn/V
UGxUxk9nsAswnwrCIEKovYAokik02JliV2x+O2TpK68ttgJMRT7Bv8v+f8tLq0k9
VsOwy/NTbe3VCpZgxeOeZTalxjrnRUvwFlUFifqX6HgYQbluynZZ17iEbQ9xODy9
80VlwLYxRgYw+vJhVlTzQVz7idbEtJLI0yHYzyU1quUBrvsRqbGx3A3bNQIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFCttflGR+B/woZ8QKxcYq0+eDqOgMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdkL2FiMzE1
Ni1iMDYxLTQ5ZmMtYjFmMC0wMGNhMzEyNmIzZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2QvYWIzMTU2
LWIwNjEtNDlmYy1iMWYwLTAwY2EzMTI2YjNmZS8xL0syMS1VWkg0SF9DaG54QXJG
eGlyVDU0T282QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLZAsMA0EAgACMAcDBQMqDurAMCMGCCsGAQUF
BwEIAQH/BBQwEqAQMA4CAlOoAgMDCWECAwMfJjANBgkqhkiG9w0BAQsFAAOCAQEA
rxBZwrqIz+eKxxUc9MUrBSSB3B0P/CgM4nsmcl+OdMpBVHuzktZVFfjm7L5UpBX6
fJIIZNM8+ls/khTw8g/1LUXEVqzoBC3idf6T4T/3d44MyoMFi1IjZuCycBXHGIuY
4mItIQ/At1HckUsIhk0CjEojaW7d/1Qxnqp+3jp2k48u+aqtL4qPNeKtk5CQheK7
+Uk138+tNklJLaGq1wB52uXXa6b6nHpyu/zNe7L9i4mTCI4xZ17mYX1rNiQiY5DK
i+WTDk+7Dnv/3JBxulGFnQlZNdenDYPfTPo1RKZLe+gTYKPei9rU64Ajq8Xc30tj
rAbKZ05xDckJ1AzWwELzBg==
-----END CERTIFICATE-----
Generated at Fri May 3 11:28:14 2024 by rpki-client on console-ams.rpki-client.org