Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
File: Ka2L_getXSzLQ7DR26axkstR2-o.cer (raw, json)
Hash identifier: g+plrF1WFg0WrMDq94eLEgJEUx4msyu1LfBixb+RYTI=
Subject key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEAE1AF69BF7DCD62511D0B1B14E04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48337
IP: 80.85.84.0/22
IP: 85.90.244.0/22
IP: 85.159.208.0/21
IP: 88.80.184.0/21
IP: 109.74.192.0/20
IP: 109.237.24.0/22
IP: 151.236.216.0/21
IP: 176.58.96.0/19
IP: 178.79.128.0/18
IP: 185.3.92.0/22
IP: 192.46.208.0 -- 192.46.239.255
IP: 192.53.112.0/20
IP: 192.53.160.0/20
IP: 194.195.112.0/20
IP: 194.195.208.0/20
IP: 194.195.240.0/20
IP: 194.233.160.0/19
IP: 212.71.232.0/21
IP: 212.71.244.0 -- 212.71.255.255
IP: 212.111.40.0/22
IP: 213.52.128.0/22
IP: 213.168.248.0/22
IP: 213.219.36.0/22
IP: 2001:678:34c::/48
IP: 2a01:7e00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:ae:1a:f6:9b:f7:dc:d6:25:11:d0:b1:b1:4e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:af:06:76:20:ab:bd:f8:9e:b0:47:38:60:18:
9a:25:b6:8d:f5:3e:e0:e6:c6:b5:20:4b:aa:18:da:
8b:ea:42:e3:9d:d9:54:d3:01:ff:94:ac:c3:a9:08:
75:1c:b6:0d:e0:a1:87:7a:c7:24:f3:22:39:94:0d:
92:9e:aa:89:2c:d5:db:a4:10:15:4a:b6:8f:ab:cc:
ab:91:96:bb:21:38:95:b9:52:6c:41:3b:8b:8f:ed:
dc:b3:2d:f7:09:9a:88:53:ab:ac:ed:59:c1:21:df:
bc:89:3d:5a:c2:50:25:ca:2a:77:4c:2a:e0:3c:7b:
30:fe:6f:65:c6:67:bf:3c:cd:8f:95:3c:7e:49:6c:
8d:f3:26:88:47:e2:56:67:00:2f:e9:d6:a8:6c:eb:
7d:d5:ca:cd:52:d4:0c:8a:e7:41:8b:03:a2:21:70:
4c:ed:fe:ca:35:32:53:73:06:8a:06:ab:3c:a2:3f:
c7:89:c3:ca:cf:03:cc:42:fc:a6:1b:7c:85:cb:62:
eb:ff:83:7e:a1:a1:45:40:be:c7:bb:62:3f:20:8b:
dc:6a:eb:06:4b:f7:89:c6:9f:3e:e7:cf:37:7c:4f:
38:d1:29:58:cf:9a:f4:d2:26:2f:82:f0:cd:14:88:
df:15:c7:77:6e:65:a1:16:ff:34:41:93:90:2d:11:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.84.0/22
85.90.244.0/22
85.159.208.0/21
88.80.184.0/21
109.74.192.0/20
109.237.24.0/22
151.236.216.0/21
176.58.96.0/19
178.79.128.0/18
185.3.92.0/22
192.46.208.0-192.46.239.255
192.53.112.0/20
192.53.160.0/20
194.195.112.0/20
194.195.208.0/20
194.195.240.0/20
194.233.160.0/19
212.71.232.0/21
212.71.244.0-212.71.255.255
212.111.40.0/22
213.52.128.0/22
213.168.248.0/22
213.219.36.0/22
IPv6:
2001:678:34c::/48
2a01:7e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48337
Signature Algorithm: sha256WithRSAEncryption
5e:f3:e6:5b:ff:b4:89:0e:6a:25:0d:79:40:b0:81:b0:49:a7:
cd:1f:00:f5:1e:d1:c1:d0:16:b4:0b:67:dc:a6:7e:b9:1c:2b:
4c:0a:3d:c6:b8:df:95:00:f3:8e:85:90:77:21:d8:47:96:d8:
61:df:94:9b:b6:61:55:fb:b1:48:4f:73:f1:da:6d:49:b6:88:
10:26:d0:7c:5c:0d:a1:0f:e7:70:5b:83:1b:06:3a:51:c4:66:
88:ae:ca:29:f4:a9:03:c5:9d:16:23:22:53:fa:ff:e9:7b:32:
b0:66:7d:1e:54:ab:39:13:71:3f:1d:7e:e5:fd:aa:5e:21:d3:
20:29:a7:8f:43:e9:f9:41:cd:f3:3c:76:3a:0e:6a:71:11:56:
6a:65:2b:70:b7:4d:d9:7c:73:db:90:9b:e3:4b:64:f2:4d:35:
1b:74:ab:c3:3c:fa:69:4e:be:71:4a:62:7d:7f:cc:69:1c:f0:
99:0d:3a:2e:e9:5a:d1:cc:17:fe:fd:1f:f1:9b:0b:ee:0a:c8:
34:a1:8c:2f:69:cd:25:5f:ee:df:30:39:01:6f:e9:02:c8:e1:
3b:16:6d:23:e5:75:40:09:d8:af:68:b8:1c:53:f2:50:bf:04:
c9:17:ce:9f:53:2b:31:08:63:29:af:ee:46:c0:8b:0c:6f:ca:
d7:b2:d4:76
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgISAYzI3q4a9pv33NYlEdCxsU4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWFkOGJmZTA3YWQ1ZDJjY2I0M2IwZDFkYmE2YjE5MmNiNTFkYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK8GdiCrvfiesEc4YBiaJbaN9T7g
5sa1IEuqGNqL6kLjndlU0wH/lKzDqQh1HLYN4KGHesck8yI5lA2SnqqJLNXbpBAV
SraPq8yrkZa7ITiVuVJsQTuLj+3csy33CZqIU6us7VnBId+8iT1awlAlyip3TCrg
PHsw/m9lxme/PM2PlTx+SWyN8yaIR+JWZwAv6daobOt91crNUtQMiudBiwOiIXBM
7f7KNTJTcwaKBqs8oj/HicPKzwPMQvymG3yFy2Lr/4N+oaFFQL7Hu2I/IIvcausG
S/eJxp8+5883fE840SlYz5r00iYvgvDNFIjfFcd3bmWhFv80QZOQLRHFcwIDAQAB
o4IDUDCCA0wwHQYDVR0OBBYEFCmti/4HrV0sy0Ow0dumsZLLUdvqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzIzNWQy
Ni03MDk0LTRmZWItOWNhOS0zNzg0OTkzOThmMTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvMjM1ZDI2
LTcwOTQtNGZlYi05Y2E5LTM3ODQ5OTM5OGYxOC8xL0thMkxfZ2V0WFN6TFE3RFIy
NmF4a3N0UjItby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHOBggrBgEF
BQcBBwEB/wSBvjCBuzCBoAQCAAEwgZkDBAJQVVQDBAJVWvQDBANVn9ADBANYULgD
BARtSsADBAJt7RgDBAOX7NgDBAWwOmADBAayT4ADBAK5A1wwDAMEBMAu0AMEBMAu
4AMEBMA1cAMEBMA1oAMEBMLDcAMEBMLD0AMEBMLD8AMEBcLpoAMEA9RH6DALAwQC
1Ef0AwMD1EADBALUbygDBALVNIADBALVqPgDBALV2yQwFgQCAAIwEAMHACABBngD
TAMFAyoBfgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALzRMA0GCSqGSIb3DQEB
CwUAA4IBAQBe8+Zb/7SJDmolDXlAsIGwSafNHwD1HtHB0Ba0C2fcpn65HCtMCj3G
uN+VAPOOhZB3IdhHlthh35SbtmFV+7FIT3Px2m1JtogQJtB8XA2hD+dwW4MbBjpR
xGaIrsop9KkDxZ0WIyJT+v/pezKwZn0eVKs5E3E/HX7l/apeIdMgKaePQ+n5Qc3z
PHY6DmpxEVZqZStwt03ZfHPbkJvjS2TyTTUbdKvDPPppTr5xSmJ9f8xpHPCZDTou
6VrRzBf+/R/xmwvuCsg0oYwvac0lX+7fMDkBb+kCyOE7Fm0j5XVACdivaLgcU/JQ
vwTJF86fUysxCGMpr+5GwIsMb8rXstR2
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:22:29 2024 by rpki-client on console-ams.rpki-client.org