Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer (raw, json)
Hash identifier: cyssqMlvZyNLQJi3vbR0dNElJyHMuXsBHMImPuZVexY=
Subject key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAA017A750642E132C974BA9025D9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213868
IP: 45.130.47.0/24
IP: 2a10:2740::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a0:17:a7:50:64:2e:13:2c:97:4b:a9:02:5d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=280c3860fb96a823971e2ee62f8abff093861604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:9f:3b:15:03:bd:5e:88:f7:8d:02:b0:fc:
9f:9c:13:30:f0:47:76:61:c2:41:e2:1f:e6:c4:96:
ed:64:b1:bb:11:b4:70:4a:85:1d:46:ff:77:ee:f4:
5a:9b:10:59:db:5a:e7:ac:00:0e:d4:5e:3f:f3:ca:
16:c3:e3:e4:47:4d:67:75:c9:00:ab:77:c9:31:ea:
d9:c8:cd:80:58:5b:ee:27:e6:79:8e:53:27:ab:64:
b2:6b:7c:1d:b9:8f:42:da:3f:22:ee:3c:98:42:55:
ca:02:db:2e:bb:c2:e3:ca:f4:1c:54:ce:40:f7:c5:
62:1d:37:b8:5e:c0:3b:5f:4d:76:cc:59:3a:ba:19:
82:43:e7:73:bb:c9:48:15:47:b4:73:68:be:11:45:
ff:18:7e:bc:62:2b:84:ef:b3:67:86:03:47:83:21:
4b:6c:ac:90:5c:32:4b:1d:93:e5:95:d4:e9:8b:fd:
cd:6e:09:3a:09:e8:e6:4b:8f:49:df:01:cf:45:3e:
c3:7a:07:81:9a:a7:a6:f2:ff:be:d4:ba:85:9f:bf:
cf:60:ce:27:a2:af:d2:52:c9:11:99:55:7a:2a:04:
0e:f9:16:39:a0:09:67:d3:76:87:36:78:0b:64:96:
f7:02:d6:7e:0d:ed:b6:17:a7:b0:ca:80:74:cf:c3:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.47.0/24
IPv6:
2a10:2740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213868
Signature Algorithm: sha256WithRSAEncryption
97:43:43:1a:26:0e:fd:31:c3:c6:13:e4:d7:75:89:be:2f:6c:
4c:dc:37:3f:09:bb:d8:b9:bb:cd:13:8b:b8:b9:e5:b8:f6:82:
5a:9e:24:49:d4:92:16:8f:9a:30:7d:5c:8a:71:05:94:af:d3:
e4:96:53:3f:21:01:27:97:33:d4:6d:c1:de:0f:67:96:b8:93:
6e:ba:ff:63:85:e9:17:7d:d2:29:b7:6c:85:be:5b:7c:51:9b:
e5:d5:d4:c4:48:a5:55:43:fd:bc:25:be:52:9d:10:7d:0b:f4:
ef:7e:10:3e:df:04:4c:41:f6:48:d0:bb:ec:01:3d:96:3b:6b:
ed:d4:bd:5a:c0:e0:fb:64:3e:27:9f:e2:f5:62:57:26:c2:3e:
bf:21:f7:2f:8a:67:9d:a8:7d:e7:59:70:49:97:f5:ec:ae:64:
84:1b:0f:7c:fb:68:63:73:5f:68:f9:b7:9e:3d:ad:b1:81:48:
a9:c6:06:50:5a:de:0e:de:4b:f5:fe:54:02:f4:53:42:48:81:
91:0d:d4:57:af:73:3a:63:e1:bb:44:0f:d1:e8:bb:0f:4f:c9:
73:c2:c0:0a:46:dd:3b:5e:d6:02:d8:b6:83:29:61:a5:a7:4f:
22:8f:75:56:cd:47:2c:b1:a4:59:e9:7a:88:24:81:da:a1:b1:
3e:ba:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:18 2025 by rpki-client