Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer
File: LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.cer (raw, json)
Hash identifier: gt8y0fegG2yImbXLa+09NbQydQkJ3Tiahhi1u/sY5mQ=
Subject key identifier: 2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801980385B60386A270069363212DAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208842
IP: 91.209.4.0/24
IP: 2a12:69c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:98:03:85:b6:03:86:a2:70:06:93:63:21:2d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f102815d27e6511746d4a3e9fd1359cd982a866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:da:a6:0f:df:1c:f0:4b:cb:e3:e0:52:e8:
3d:9f:f8:97:fc:be:4d:9c:69:6c:c6:ef:3d:42:ce:
9b:08:93:ca:59:23:dd:06:5e:17:41:25:e7:f5:f9:
38:9b:4d:9b:ac:ac:32:8e:82:fd:0c:21:5c:cd:1c:
3a:f3:59:fc:3a:80:b1:59:44:11:aa:d4:0c:49:3e:
2b:3e:1c:e5:93:75:78:b3:21:d8:61:92:f0:a5:9d:
91:78:b9:2c:55:10:94:23:93:e6:45:bf:6e:b7:56:
30:b2:bd:c8:77:a5:9c:d4:0f:22:0e:4b:db:cf:16:
b3:6f:eb:7a:41:02:2b:e9:85:1a:ac:d4:6c:44:a0:
7c:44:b7:d6:ae:2b:75:4f:37:11:a2:47:f8:43:c4:
e6:12:81:5f:43:70:af:b4:4a:0a:3b:0e:04:49:9d:
41:41:21:79:57:8b:91:55:bf:55:27:c0:27:99:64:
3a:1d:6f:d0:ca:c2:6a:6f:a5:e9:25:6c:6b:a8:50:
49:71:e1:a4:3a:5d:f9:6c:ab:0c:96:53:0e:c3:6a:
09:76:b2:bb:bc:96:61:2b:ce:ae:0e:ce:3e:1f:43:
03:37:0a:c5:65:31:fd:02:a7:81:c8:fe:b2:bf:12:
91:e1:9c:4a:82:32:3d:7c:ab:58:f5:46:f8:63:19:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:10:28:15:D2:7E:65:11:74:6D:4A:3E:9F:D1:35:9C:D9:82:A8:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a33f9a-9bc3-430d-bb7c-5ec794b0e69c/1/LxAoFdJ-ZRF0bUo-n9E1nNmCqGY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.4.0/24
IPv6:
2a12:69c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208842
Signature Algorithm: sha256WithRSAEncryption
0f:a8:18:f9:1f:cc:7d:60:75:64:c7:38:d8:6d:80:ca:fd:a6:
82:a0:bc:af:e1:3b:de:58:9e:da:4d:e7:9f:18:16:1f:16:bc:
0b:51:38:c9:75:64:c4:52:a5:65:b2:d4:e0:5d:2a:17:1b:fe:
69:4b:6c:88:f5:8e:9b:60:1f:01:c9:0d:b3:73:8e:d1:61:cf:
b1:21:cb:0c:8a:6f:04:25:ae:2f:fa:38:cc:61:d0:a6:87:0a:
76:14:98:b2:62:bd:7b:57:28:14:cf:78:0f:6a:00:63:90:61:
1b:07:7c:31:ea:e4:8c:31:d8:32:d8:17:83:62:c5:c0:e3:bb:
0c:2a:6e:4e:f2:3f:dc:ea:83:2a:cd:50:cc:95:23:3e:d1:04:
4d:74:47:5e:08:5d:45:e8:bf:ef:02:b5:c0:df:ef:80:12:ca:
33:d4:bf:5d:06:78:49:fe:54:b9:5f:07:b8:dc:bc:7b:b9:a4:
bd:62:f7:b4:af:2d:4e:40:bf:37:bd:21:f9:6e:01:4d:a2:6e:
19:48:47:1a:e8:14:4d:28:11:50:d0:31:c7:fe:81:75:80:8a:
55:5f:ad:c0:c6:ee:c1:74:f4:71:4f:7b:2e:a8:44:a8:fe:e1:
d2:96:1f:2d:17:16:b3:18:d7:fd:0b:91:94:4e:52:f2:2d:13:
67:e5:73:f9
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzIAZgDhbYDhqJwBpNjIS2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjEwMjgxNWQyN2U2NTExNzQ2ZDRhM2U5ZmQxMzU5Y2Q5ODJhODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLbapg/fHPBLy+PgUug9n/iX/L5N
nGlsxu89Qs6bCJPKWSPdBl4XQSXn9fk4m02brKwyjoL9DCFczRw681n8OoCxWUQR
qtQMST4rPhzlk3V4syHYYZLwpZ2ReLksVRCUI5PmRb9ut1Ywsr3Id6Wc1A8iDkvb
zxazb+t6QQIr6YUarNRsRKB8RLfWrit1TzcRokf4Q8TmEoFfQ3CvtEoKOw4ESZ1B
QSF5V4uRVb9VJ8AnmWQ6HW/QysJqb6XpJWxrqFBJceGkOl35bKsMllMOw2oJdrK7
vJZhK86uDs4+H0MDNwrFZTH9AqeByP6yvxKR4ZxKgjI9fKtY9Ub4YxmUdwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFC8QKBXSfmURdG1KPp/RNZzZgqhmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2EzM2Y5
YS05YmMzLTQzMGQtYmI3Yy01ZWM3OTRiMGU2OWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTMzZjlh
LTliYzMtNDMwZC1iYjdjLTVlYzc5NGIwZTY5Yy8xL0x4QW9GZEotWlJGMGJVby1u
OUUxbk5tQ3FHWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW9EEMA0EAgACMAcDBQMqEmnAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMvyjANBgkqhkiG9w0BAQsFAAOCAQEAD6gY+R/MfWB1
ZMc42G2Ayv2mgqC8r+E73lie2k3nnxgWHxa8C1E4yXVkxFKlZbLU4F0qFxv+aUts
iPWOm2AfAckNs3OO0WHPsSHLDIpvBCWuL/o4zGHQpocKdhSYsmK9e1coFM94D2oA
Y5BhGwd8MerkjDHYMtgXg2LFwOO7DCpuTvI/3OqDKs1QzJUjPtEETXRHXghdRei/
7wK1wN/vgBLKM9S/XQZ4Sf5UuV8HuNy8e7mkvWL3tK8tTkC/N70h+W4BTaJuGUhH
GugUTSgRUNAxx/6BdYCKVV+twMbuwXT0cU97LqhEqP7h0pYfLRcWsxjX/QuRlE5S
8i0TZ+Vz+Q==
-----END CERTIFICATE-----
Generated at Fri May 3 09:03:54 2024 by rpki-client on console-ams.rpki-client.org