Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer
File: KS0SCXBRWEY2DqIj6aDmo8OJaTQ.cer (raw, json)
Hash identifier: dKvo+iHkdUpgXNHQG3nvY7WBP+X643tO72odUJfavjU=
Subject key identifier: 29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D35FCC2CD006E07C40DFFFFD3D8AC0BB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 23 Jan 2024 11:02:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 42658
AS: 56550
AS: 211886
IP: 31.14.28.0/24
IP: 31.177.40.0/21
IP: 31.214.153.0/24
IP: 46.102.188.0/23
IP: 85.204.119.0/24
IP: 85.204.147.0/24
IP: 86.105.177.0/24
IP: 89.32.168.0/23
IP: 89.32.186.0/23
IP: 89.33.133.0/24
IP: 89.34.161.0/24
IP: 89.36.228.0/24
IP: 89.42.25.0/24
IP: 93.115.62.0/23
IP: 93.117.152.0/23
IP: 93.117.172.0/23
IP: 94.177.127.0/24
IP: 95.142.208.0/21
IP: 109.230.212.0/24
IP: 128.0.122.0 -- 128.0.127.255
IP: 185.8.24.0/22
IP: 185.157.52.0/22
IP: 185.163.172.0/22
IP: 185.196.48.0/22
IP: 185.207.184.0/22
IP: 185.208.24.0/22
IP: 188.241.154.0/24
IP: 2a03:1140::/32
IP: 2a0a:6640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:35:fc:c2:cd:00:6e:07:c4:0d:ff:ff:d3:d8:ac:0b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 23 11:02:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=292d120970515846360ea223e9a0e6a3c3896934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:66:84:32:b4:c9:86:0b:38:1a:5a:ea:2e:
7a:1f:f4:cd:21:75:14:61:26:60:53:33:81:c2:c9:
5d:be:11:b6:03:ca:d5:8a:de:86:f0:2b:22:7e:e1:
df:fd:72:8d:73:f6:15:f2:30:e1:9c:f3:d3:ae:c4:
f3:de:3a:58:97:25:eb:3a:4a:34:cb:4a:f0:67:bb:
19:2b:e1:f2:36:2f:10:8b:e0:b6:03:4c:5b:a2:9e:
5f:75:28:23:3e:f7:7f:0b:4e:b8:81:66:54:45:a0:
3a:b7:a1:aa:1c:1f:fa:9f:bb:40:25:16:98:9f:a6:
7a:a0:b4:14:2d:17:f1:ac:50:dc:20:5c:cc:e5:de:
cc:70:40:0b:1a:bf:88:45:22:26:d8:e2:da:5c:41:
63:b0:e1:46:99:0a:46:28:22:2a:e1:ae:10:a9:fd:
28:27:c8:7a:29:39:fa:73:0b:19:1b:a9:52:38:66:
60:3c:f4:18:10:7a:aa:1d:f8:26:24:81:d7:f4:62:
ef:70:9c:89:f7:61:9d:da:5d:3c:fa:76:f7:86:01:
e7:72:a2:c0:c5:22:bf:38:fc:92:9d:46:cc:57:ff:
23:8d:4d:d3:13:e6:a6:95:25:37:e9:18:53:67:ef:
2e:72:47:4a:47:07:5a:ac:80:40:d8:4d:58:07:28:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2D:12:09:70:51:58:46:36:0E:A2:23:E9:A0:E6:A3:C3:89:69:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/de9139-a9d0-493a-9260-ed0f256a5fe3/1/KS0SCXBRWEY2DqIj6aDmo8OJaTQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.28.0/24
31.177.40.0/21
31.214.153.0/24
46.102.188.0/23
85.204.119.0/24
85.204.147.0/24
86.105.177.0/24
89.32.168.0/23
89.32.186.0/23
89.33.133.0/24
89.34.161.0/24
89.36.228.0/24
89.42.25.0/24
93.115.62.0/23
93.117.152.0/23
93.117.172.0/23
94.177.127.0/24
95.142.208.0/21
109.230.212.0/24
128.0.122.0-128.0.127.255
185.8.24.0/22
185.157.52.0/22
185.163.172.0/22
185.196.48.0/22
185.207.184.0/22
185.208.24.0/22
188.241.154.0/24
IPv6:
2a03:1140::/32
2a0a:6640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42658
56550
211886
Signature Algorithm: sha256WithRSAEncryption
6c:27:83:01:70:0c:ce:75:c0:d0:ca:02:b5:c6:1f:07:91:40:
1c:b5:01:52:a2:9c:ba:46:40:16:99:92:91:21:f9:aa:f5:e4:
41:70:3f:29:1f:0b:c7:4a:ee:9c:3d:ba:4f:68:c0:61:49:80:
16:0b:ee:96:65:98:e6:a8:42:61:b6:84:05:2f:e2:85:44:ab:
eb:c5:36:dc:38:71:2c:b2:95:fd:cf:54:36:34:c1:47:d1:f3:
0a:a0:56:43:80:08:d5:7b:94:25:43:7f:ef:67:3a:81:66:3f:
aa:24:6c:b0:2c:0b:d1:c9:e0:f9:4b:fe:9a:66:96:7c:86:4b:
3e:79:ef:f5:08:b4:30:97:55:1b:4e:4f:f0:56:78:6b:0b:df:
99:52:55:3e:3f:5f:56:83:b7:20:60:60:fa:dd:03:6e:eb:f5:
7c:41:f6:e2:2d:2c:a2:8b:40:23:6b:c2:9c:74:c3:5e:09:2a:
ab:8d:e9:00:88:cb:45:17:05:29:d9:3d:4b:3d:29:c7:24:a0:
95:64:7f:30:32:34:49:22:21:22:72:3e:be:82:de:a3:20:da:
b4:26:91:76:ee:3b:bd:b9:2c:60:9c:4b:cf:a4:57:43:a8:5e:
5b:fe:a3:cd:d3:76:8d:31:58:46:a1:78:54:85:ab:10:56:a3:
83:17:db:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:28:28 2024 by rpki-client on console-ams.rpki-client.org