Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
File: KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer (raw, json)
Hash identifier: dHzpLYmEa2m4XRVYtfaW6nTIw8GVT/A9jLANdNiU2Go=
Subject key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E1E91CE56F9EDC39F3D2E759A3F4848AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 08 Mar 2024 14:57:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25144
AS: 203744
IP: 31.223.128.0/19
IP: 45.131.116.0/22
IP: 46.239.0.0/18
IP: 62.101.144.0/20
IP: 81.93.64.0/19
IP: 89.111.192.0/18
IP: 94.250.0.0/17
IP: 109.165.128.0/17
IP: 185.35.156.0/22
IP: 185.125.120.0/22
IP: 217.24.128.0/20
IP: 2a00:cb00::/32
IP: 2a0e:8ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:91:ce:56:f9:ed:c3:9f:3d:2e:75:9a:3f:48:48:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 8 14:57:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:a2:85:1c:23:68:4f:6f:df:ea:d1:d6:1c:
ce:65:39:6d:ae:ec:4b:13:dd:54:11:77:fe:13:25:
bf:d5:0c:e3:5f:59:fe:6e:31:e5:37:61:b8:28:b6:
48:3e:db:18:51:82:e7:ef:16:f1:e9:30:78:cb:53:
cc:b5:cc:dd:de:6a:98:8d:fa:c5:24:56:9e:d9:0b:
e8:82:0d:86:11:4f:a5:82:34:fc:06:88:13:4c:d2:
dd:23:95:c3:71:f3:78:9f:99:75:09:3a:52:66:c6:
ad:22:1e:67:d8:8d:4d:6a:43:ef:b7:2e:89:79:e6:
6a:8d:7b:0e:9f:8e:33:ff:8f:17:32:46:9f:a5:bf:
3a:bb:ed:13:6b:0c:7e:7f:d1:8b:6a:cd:c1:f9:79:
1a:08:61:31:09:ce:61:3c:97:b8:8c:93:a1:9c:a2:
66:c8:c9:82:48:b4:1f:b6:31:71:1f:13:f0:33:fe:
96:49:91:ca:3b:89:de:19:20:28:f7:23:9d:79:93:
e1:35:35:55:d8:a7:79:34:02:2c:e1:d4:48:64:0a:
8e:15:fa:c0:d8:d2:28:5b:d0:9d:22:84:11:e1:40:
18:44:5c:50:03:23:f5:5b:53:71:f3:50:62:e3:14:
4b:2f:26:63:42:06:c3:31:50:92:e7:d0:ba:52:77:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.128.0/19
45.131.116.0/22
46.239.0.0/18
62.101.144.0/20
81.93.64.0/19
89.111.192.0/18
94.250.0.0/17
109.165.128.0/17
185.35.156.0/22
185.125.120.0/22
217.24.128.0/20
IPv6:
2a00:cb00::/32
2a0e:8ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25144
203744
Signature Algorithm: sha256WithRSAEncryption
74:ee:59:71:ee:b4:0d:66:c9:4e:ee:47:67:02:84:cc:4b:04:
95:e1:72:cd:be:3d:4e:03:ed:b0:38:f8:13:33:58:b2:a9:38:
ae:a0:01:13:73:37:d4:bc:2e:e8:44:22:61:df:12:84:ea:f7:
1e:95:3e:40:f7:1f:be:78:f6:47:64:ab:18:4b:17:94:8e:08:
34:f3:d9:60:70:c6:c2:57:68:db:9a:52:6a:20:17:18:59:50:
1d:36:c6:a2:41:57:0e:82:92:61:c6:18:14:fd:e0:a9:f7:3e:
a0:df:1d:22:2a:50:d9:61:83:e2:61:45:32:db:69:7d:77:c4:
19:b6:f7:5e:d9:e2:ce:1d:a0:0c:7f:b1:e7:63:05:5c:40:ac:
78:1a:ac:15:a3:53:2c:25:da:f9:a4:69:5a:d0:c6:90:84:64:
c4:88:0b:b2:c4:6c:66:b6:a7:77:45:27:34:0b:0e:a6:75:6e:
05:88:48:96:e2:41:44:76:00:4b:7e:8b:0f:51:3e:77:44:1e:
ba:dd:13:ee:ae:0e:ce:b5:6c:94:df:00:aa:32:d7:8b:0a:e3:
40:ea:9a:35:c7:04:cd:68:ff:85:29:4e:09:cf:d7:9f:9c:6a:
bb:4c:ec:84:35:6a:a8:f4:ff:1f:91:09:2c:55:29:3e:7c:f2:
3d:d9:da:ae
-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgISAY4ekc5W+e3Dnz0udZo/SEivMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzA4MTQ1NzM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWE5OTY0ZTBjZDM1ZmIzNjc1N2U1NjUzZmZhNzYyNmFjNWRlZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDqihRwjaE9v3+rR1hzOZTltruxL
E91UEXf+EyW/1QzjX1n+bjHlN2G4KLZIPtsYUYLn7xbx6TB4y1PMtczd3mqYjfrF
JFae2Qvogg2GEU+lgjT8BogTTNLdI5XDcfN4n5l1CTpSZsatIh5n2I1NakPvty6J
eeZqjXsOn44z/48XMkafpb86u+0Tawx+f9GLas3B+XkaCGExCc5hPJe4jJOhnKJm
yMmCSLQftjFxHxPwM/6WSZHKO4neGSAo9yOdeZPhNTVV2Kd5NAIs4dRIZAqOFfrA
2NIoW9CdIoQR4UAYRFxQAyP1W1Nx81Bi4xRLLyZjQgbDMVCS59C6UncoMwIDAQAB
o4IC9jCCAvIwHQYDVR0OBBYEFCmplk4M01+zZ1flZT/6diasXe7oMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzIxNDA2
My1mODhmLTQ5NTgtYWU1Mi1kOWI1MzNmN2ZiYzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvMjE0MDYz
LWY4OGYtNDk1OC1hZTUyLWQ5YjUzM2Y3ZmJjMy8xL0thbVdUZ3pUWDdOblYtVmxQ
X3AySnF4ZDd1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHEGCCsGAQUF
BwEHAQH/BGIwYDBIBAIAATBCAwQFH9+AAwQCLYN0AwQGLu8AAwQEPmWQAwQFUV1A
AwQGWW/AAwQHXvoAAwQHbaWAAwQCuSOcAwQCuX14AwQE2RiAMBQEAgACMA4DBQAq
AMsAAwUDKg6KwDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJiOAIDAxvgMA0GCSqG
SIb3DQEBCwUAA4IBAQB07llx7rQNZslO7kdnAoTMSwSV4XLNvj1OA+2wOPgTM1iy
qTiuoAETczfUvC7oRCJh3xKE6vcelT5A9x++ePZHZKsYSxeUjgg089lgcMbCV2jb
mlJqIBcYWVAdNsaiQVcOgpJhxhgU/eCp9z6g3x0iKlDZYYPiYUUy22l9d8QZtvde
2eLOHaAMf7HnYwVcQKx4GqwVo1MsJdr5pGla0MaQhGTEiAuyxGxmtqd3RSc0Cw6m
dW4FiEiW4kFEdgBLfosPUT53RB663RPurg7OtWyU3wCqMteLCuNA6po1xwTNaP+F
KU4Jz9efnGq7TOyENWqo9P8fkQksVSk+fPI92dqu
-----END CERTIFICATE-----
Generated at Fri May 3 06:56:08 2024 by rpki-client on console-ams.rpki-client.org