Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
File: KBeCQ6CGawkSctHh60UeceQTuZo.cer (raw, json)
Hash identifier: kSRci/Q+7tHfOCUaly1/dWG5B5KUrSiTv7Y6yMEAH8w=
Subject key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193448CC9722DFB49C661C0D5EB96C4C27B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 19 Nov 2024 13:11:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 204627
AS: 208152
IP: 45.85.220.0/22
IP: 185.61.248.0/22
IP: 2a13:86c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:44:8c:c9:72:2d:fb:49:c6:61:c0:d5:eb:96:c4:c2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 19 13:11:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28178243a0866b091272d1e1eb451e71e413b99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:d8:e0:c9:be:90:85:ba:7f:24:cc:17:09:
b0:aa:26:99:14:e7:35:54:ae:d3:58:41:0a:cc:35:
f4:20:b2:71:a5:f4:06:ac:bb:51:5f:5a:e8:12:16:
3f:03:3b:d1:fd:4d:5a:24:95:bf:19:22:6f:2a:a9:
50:78:2f:26:72:34:ee:1e:b1:21:1a:f9:09:b9:c8:
e3:b3:9a:7e:67:b7:2f:b8:6f:65:18:26:a4:20:64:
80:5b:30:76:1f:28:5a:3a:7a:e6:ed:a0:4c:10:30:
9b:22:3c:b8:08:87:87:69:7f:1a:79:d2:7d:97:fc:
62:67:da:61:dc:b4:d9:b9:74:bb:4e:c8:cf:35:bb:
8b:20:26:b3:8b:c5:c3:fc:07:40:1c:07:c8:5c:60:
f3:1c:05:1a:a5:ec:f8:be:7f:4e:58:d5:19:32:da:
0a:07:b3:51:eb:cf:67:20:b1:93:da:4e:53:ea:29:
5e:fe:aa:3b:2b:e2:64:ff:21:ad:c1:57:92:01:bd:
9e:2d:73:01:ad:90:4f:11:c4:00:73:85:fa:f1:a5:
d9:a6:43:bb:ef:be:53:ee:4a:1d:f9:ef:7c:1b:0f:
35:d8:fc:c5:50:11:11:e4:eb:fb:2c:a6:b1:cf:5f:
42:63:86:3b:79:6f:5f:57:6e:52:f9:a1:c8:93:2e:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.220.0/22
185.61.248.0/22
IPv6:
2a13:86c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204627
208152
Signature Algorithm: sha256WithRSAEncryption
4d:e1:77:71:2a:85:d3:1b:4c:5b:27:e9:8f:27:ef:af:08:0b:
2e:09:9e:28:ff:83:f2:c4:81:66:ba:22:aa:c9:48:40:f9:37:
b1:e1:b2:21:fc:af:d1:d5:04:cb:f0:ce:b5:78:19:46:c7:31:
85:e7:72:7b:3c:26:50:38:e2:25:21:8b:d8:8f:01:5e:37:14:
30:f8:dc:9b:d0:97:66:10:f5:af:85:32:c1:d1:80:91:4a:75:
08:69:98:7b:7a:9f:b4:5c:15:49:6e:37:f7:64:52:64:6f:3f:
9f:56:fd:c1:93:b2:ec:93:db:75:10:b1:be:32:c1:4d:c4:d5:
68:2a:a9:da:78:0e:d1:3b:84:2d:fd:42:bf:a5:47:e0:6c:a9:
24:a2:b2:38:11:4f:4c:8a:97:d9:24:3f:e8:56:ba:9d:e7:2f:
9e:f8:c3:13:bd:5b:60:e4:54:b8:03:03:ed:71:01:62:d8:de:
ad:1b:89:17:a6:c9:99:1a:71:b4:93:40:9f:20:83:82:63:a9:
ea:36:40:f9:b9:09:93:87:1a:ad:34:54:09:18:be:24:19:09:
ba:1e:93:dc:ff:0a:15:be:b7:00:95:b9:eb:0d:fe:5b:76:06:
04:ee:38:43:10:96:13:54:b0:a7:55:dd:cc:aa:45:96:7f:46:
77:b1:10:22
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZNEjMlyLftJxmHA1euWxMJ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMTE5MTMxMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODE3ODI0M2EwODY2YjA5MTI3MmQxZTFlYjQ1MWU3MWU0MTNiOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5PY4Mm+kIW6fyTMFwmwqiaZFOc1
VK7TWEEKzDX0ILJxpfQGrLtRX1roEhY/AzvR/U1aJJW/GSJvKqlQeC8mcjTuHrEh
GvkJucjjs5p+Z7cvuG9lGCakIGSAWzB2HyhaOnrm7aBMEDCbIjy4CIeHaX8aedJ9
l/xiZ9ph3LTZuXS7TsjPNbuLICazi8XD/AdAHAfIXGDzHAUapez4vn9OWNUZMtoK
B7NR689nILGT2k5T6ile/qo7K+Jk/yGtwVeSAb2eLXMBrZBPEcQAc4X68aXZpkO7
775T7kod+e98Gw812PzFUBER5Ov7LKaxz19CY4Y7eW9fV25S+aHIky7nrwIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFCgXgkOghmsJEnLR4etFHnHkE7maMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhLzc0N2Ri
OC1hYzU3LTQ2YTgtYjYzMi02Y2UzYzAzYTEzNGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNzQ3ZGI4
LWFjNTctNDZhOC1iNjMyLTZjZTNjMDNhMTM0Yy8xL0tCZUNRNkNHYXdrU2N0SGg2
MFVlY2VRVHVaby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCLVXcAwQCuT34MA0EAgACMAcDBQMqE4bAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMfUwIDAy0YMA0GCSqGSIb3DQEBCwUAA4IB
AQBN4XdxKoXTG0xbJ+mPJ++vCAsuCZ4o/4PyxIFmuiKqyUhA+Tex4bIh/K/R1QTL
8M61eBlGxzGF53J7PCZQOOIlIYvYjwFeNxQw+Nyb0JdmEPWvhTLB0YCRSnUIaZh7
ep+0XBVJbjf3ZFJkbz+fVv3Bk7Lsk9t1ELG+MsFNxNVoKqnaeA7RO4Qt/UK/pUfg
bKkkorI4EU9MipfZJD/oVrqd5y+e+MMTvVtg5FS4AwPtcQFi2N6tG4kXpsmZGnG0
k0CfIIOCY6nqNkD5uQmThxqtNFQJGL4kGQm6HpPc/woVvrcAlbnrDf5bdgYE7jhD
EJYTVLCnVd3MqkWWf0Z3sRAi
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:14:30 2024 by rpki-client on console-ams.rpki-client.org