Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
File: LuliCJJdg2-NA30XmYCoOhsME0I.cer (raw, json)
Hash identifier: ktTVthykT3XkoZud1ZdCOh6TBzo1bCivfFbOOM7tFlE=
Subject key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA34F1D03A5BEFF636A7AC16FE5B02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201107
IP: 193.30.96.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:34:f1:d0:3a:5b:ef:f6:36:a7:ac:16:fe:5b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ee96208925d836f8d037d179980a83a1b0c1342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:be:ce:67:c9:86:8d:53:78:9d:6f:3b:93:
88:e2:0b:32:36:7e:7a:7e:53:bc:e3:fa:e7:5b:8b:
fd:53:11:5a:4c:9d:be:17:4b:81:f3:fe:41:69:b7:
80:dc:b8:4d:98:01:07:98:40:b1:86:14:5f:36:b5:
df:0d:04:6a:fa:b2:b6:1c:11:86:14:6d:0c:ec:0c:
29:64:d5:62:64:cd:9b:04:b9:27:3e:21:6a:79:44:
d6:24:fe:aa:36:bc:22:d0:40:d0:46:13:05:79:40:
11:65:d1:e0:96:15:da:9b:61:5c:2e:6d:d8:2f:b3:
43:82:46:a1:af:e6:ad:7d:30:ff:9a:63:91:c9:4f:
d2:74:42:b5:85:7c:e8:dc:dc:a5:5c:f9:58:cf:48:
21:f3:c8:64:bd:e1:02:51:f2:0c:2f:25:21:ca:c4:
7a:98:03:1b:5b:8e:7e:e0:04:9b:f0:11:24:a8:4a:
02:ca:06:61:f4:a8:ed:82:f8:97:cb:3b:7c:ee:29:
dd:c7:32:0b:c5:39:d7:40:5b:5f:d1:4b:fc:90:82:
00:48:e1:c1:1f:68:8c:34:f6:05:e8:a4:ab:b6:cb:
f8:ca:af:2b:ff:5d:03:8d:50:51:fb:10:60:c0:a6:
d1:21:b8:a7:7a:c3:bb:8a:af:de:50:7e:db:d9:08:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.96.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201107
Signature Algorithm: sha256WithRSAEncryption
49:24:37:06:d1:92:d0:a9:59:a6:cd:82:24:a1:19:a7:9f:14:
b4:79:97:36:16:c9:5b:18:56:5e:50:80:9c:21:14:58:49:20:
71:c1:ae:86:07:96:84:6f:26:46:9d:4c:2b:33:cc:e4:df:fe:
4d:5b:70:99:dd:38:80:5e:80:90:ad:a1:2b:dd:d8:8d:54:bc:
a5:12:a2:33:73:46:e2:41:a7:a7:69:88:91:13:3b:81:c9:df:
56:36:6a:da:32:a3:40:b1:52:7a:09:67:52:34:0c:1b:8c:39:
3a:eb:6a:4f:e0:f2:14:c3:ce:e8:b8:c6:3d:88:4a:5a:e2:27:
6a:7c:f5:0d:2f:1d:d4:ff:89:f5:d0:44:1b:25:77:42:c7:ac:
7b:6d:1c:6c:5b:8d:69:31:b0:ac:cb:75:97:9b:1f:7d:40:78:
d6:47:0c:37:9a:d3:6a:1e:59:16:39:7d:6d:2f:da:1c:c5:28:
12:31:fd:5c:aa:f4:f7:fb:53:9c:af:e5:b3:f2:70:15:7a:5e:
40:06:c5:c7:cf:f4:8d:a9:e1:1f:3a:53:5b:b5:2c:18:72:c2:
82:fa:98:60:9d:ee:14:98:d5:7e:b5:97:37:cd:3d:d7:a9:ec:
36:f4:cb:8f:a3:35:8b:7f:77:83:7c:19:ea:3a:05:df:d8:2b:
96:22:99:37
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQf+jTx0Dpb7/Y2p6wW/lsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWU5NjIwODkyNWQ4MzZmOGQwMzdkMTc5OTgwYTgzYTFiMGMxMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGi+zmfJho1TeJ1vO5OI4gsyNn56
flO84/rnW4v9UxFaTJ2+F0uB8/5BabeA3LhNmAEHmECxhhRfNrXfDQRq+rK2HBGG
FG0M7AwpZNViZM2bBLknPiFqeUTWJP6qNrwi0EDQRhMFeUARZdHglhXam2FcLm3Y
L7NDgkahr+atfTD/mmORyU/SdEK1hXzo3NylXPlYz0gh88hkveECUfIMLyUhysR6
mAMbW45+4ASb8BEkqEoCygZh9KjtgviXyzt87indxzILxTnXQFtf0Uv8kIIASOHB
H2iMNPYF6KSrtsv4yq8r/10DjVBR+xBgwKbRIbinesO7iq/eUH7b2Qh+cQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFC7pYgiSXYNvjQN9F5mAqDobDBNCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzcxYzYw
OC0xY2MyLTQ4OTktYTVmYS04NDZhYWYwZWIxYWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvNzFjNjA4
LTFjYzItNDg5OS1hNWZhLTg0NmFhZjBlYjFhZC8xL0x1bGlDSkpkZzItTkEzMFht
WUNvT2hzTUUwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwR5gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMRkzANBgkqhkiG9w0BAQsFAAOCAQEASSQ3BtGS0KlZps2CJKEZp58UtHmXNhbJ
WxhWXlCAnCEUWEkgccGuhgeWhG8mRp1MKzPM5N/+TVtwmd04gF6AkK2hK93YjVS8
pRKiM3NG4kGnp2mIkRM7gcnfVjZq2jKjQLFSeglnUjQMG4w5OutqT+DyFMPO6LjG
PYhKWuInanz1DS8d1P+J9dBEGyV3Qsese20cbFuNaTGwrMt1l5sffUB41kcMN5rT
ah5ZFjl9bS/aHMUoEjH9XKr09/tTnK/ls/JwFXpeQAbFx8/0janhHzpTW7UsGHLC
gvqYYJ3uFJjVfrWXN80916nsNvTLj6M1i393g3wZ6joF39grliKZNw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:59:30 2025 by rpki-client