Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NaG0hYfEMM89i_11mMWVvaHGaHQ.cer
File: NaG0hYfEMM89i_11mMWVvaHGaHQ.cer (raw, json)
Hash identifier: M3q141xHBPCoBr7Jykf00iT9isBue6bf0CX1CwSHU7c=
Subject key identifier: 35:A1:B4:85:87:C4:30:CF:3D:8B:FD:75:98:C5:95:BD:A1:C6:68:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CF90FB50F4FD9F14FD66B401D4A98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210911
AS: 212314
IP: 80.73.245.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:f9:0f:b5:0f:4f:d9:f1:4f:d6:6b:40:1d:4a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35a1b48587c430cf3d8bfd7598c595bda1c66874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a2:e2:5f:a1:ea:25:47:1f:da:fd:ba:30:b8:
b0:fd:63:52:52:92:81:16:7c:e4:0b:4d:91:ca:2d:
b0:e0:b1:f8:06:fb:29:64:10:46:cb:a4:cb:7d:5a:
d4:b2:47:b9:cd:c7:2a:12:1a:92:61:b5:38:9e:6b:
13:69:a8:69:10:55:fe:4d:e6:82:98:7a:ae:f6:28:
82:83:95:9b:b8:d8:23:fb:f4:89:bb:bc:ba:b5:5e:
cc:eb:3a:45:9a:fa:2f:55:5a:73:ca:0a:ec:89:45:
98:46:9a:1d:49:88:b9:54:6b:91:ae:94:83:47:72:
d5:88:f5:54:c2:e8:01:5b:49:72:5a:83:1b:c5:8f:
f6:ab:37:dc:ff:4d:1d:d3:d9:d8:0b:17:0a:1f:b6:
f0:7b:90:1a:9d:b7:f2:c6:a6:51:85:ba:3a:62:dd:
89:c0:da:3b:59:07:6e:28:23:a4:31:35:92:a9:c7:
c5:da:48:ed:7e:68:64:8d:fb:43:18:92:94:d0:14:
9c:30:1f:cc:68:37:6f:fb:e2:e3:6e:32:be:23:51:
15:4a:44:39:c4:4c:a3:b7:2d:0c:8b:84:eb:5c:08:
ee:52:1c:74:c8:bf:87:88:79:f9:c8:40:eb:7a:ba:
c5:45:5d:8b:96:a3:a0:be:1f:63:2e:27:b3:2a:d9:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:B4:85:87:C4:30:CF:3D:8B:FD:75:98:C5:95:BD:A1:C6:68:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4f46c1-20b4-4249-881e-ffbc0a979b20/1/NaG0hYfEMM89i_11mMWVvaHGaHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.245.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210911
212314
Signature Algorithm: sha256WithRSAEncryption
44:83:95:b0:bf:1d:63:c1:b3:43:8f:f5:f0:2e:38:7f:d5:07:
7a:7e:d2:05:91:b5:a2:ba:1a:36:b7:25:01:d3:24:c6:e9:52:
3c:75:93:dc:7b:38:8f:b6:71:9c:08:05:fe:c8:1d:86:70:66:
ca:23:2d:91:88:91:36:a0:7a:3d:ca:9d:b9:ab:f5:bc:b2:5c:
8c:49:76:4c:cf:da:0a:c7:af:ff:b2:85:99:77:50:49:5f:2b:
05:da:16:63:a8:8b:75:56:df:30:ff:72:20:90:67:e2:b0:05:
da:2f:0a:45:93:ea:54:30:01:db:f5:df:95:28:44:0c:8b:8e:
3f:78:1d:15:ed:87:d9:f2:70:0e:e5:82:c5:12:eb:1d:ae:b0:
a8:5f:72:b8:bf:1c:0e:c0:5c:0f:2c:84:f3:25:80:05:eb:ad:
11:81:cb:da:78:52:35:4b:e8:c5:0d:02:fc:d8:85:62:5d:32:
46:75:6c:35:15:ba:d3:64:d9:de:e9:aa:84:fb:00:48:af:0f:
5c:1e:a0:18:68:d5:1c:f0:cd:51:cf:e2:67:58:ab:72:0a:56:
5f:2c:f9:61:15:04:fa:ed:41:b6:16:9f:16:06:42:b4:b5:b8:
c6:10:7b:37:3e:de:c2:32:b9:8e:4f:62:a1:4d:22:10:19:3c:
96:d8:32:f8
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAYzJTPkPtQ9P2fFP1mtAHUqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDgzMTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWExYjQ4NTg3YzQzMGNmM2Q4YmZkNzU5OGM1OTViZGExYzY2ODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKLiX6HqJUcf2v26MLiw/WNSUpKB
FnzkC02Ryi2w4LH4BvspZBBGy6TLfVrUske5zccqEhqSYbU4nmsTaahpEFX+TeaC
mHqu9iiCg5WbuNgj+/SJu7y6tV7M6zpFmvovVVpzygrsiUWYRpodSYi5VGuRrpSD
R3LViPVUwugBW0lyWoMbxY/2qzfc/00d09nYCxcKH7bwe5AanbfyxqZRhbo6Yt2J
wNo7WQduKCOkMTWSqcfF2kjtfmhkjftDGJKU0BScMB/MaDdv++LjbjK+I1EVSkQ5
xEyjty0Mi4TrXAjuUhx0yL+HiHn5yEDrerrFRV2LlqOgvh9jLiezKtmCIwIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFDWhtIWHxDDPPYv9dZjFlb2hxmh0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzRmNDZj
MS0yMGI0LTQyNDktODgxZS1mZmJjMGE5NzliMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvNGY0NmMx
LTIwYjQtNDI0OS04ODFlLWZmYmMwYTk3OWIyMC8xL05hRzBoWWZFTU04OWlfMTFt
TVdWdmFIR2FIUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAUEn1MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoC
AwM33wIDAz1aMA0GCSqGSIb3DQEBCwUAA4IBAQBEg5Wwvx1jwbNDj/XwLjh/1Qd6
ftIFkbWiuho2tyUB0yTG6VI8dZPceziPtnGcCAX+yB2GcGbKIy2RiJE2oHo9yp25
q/W8slyMSXZMz9oKx6//soWZd1BJXysF2hZjqIt1Vt8w/3IgkGfisAXaLwpFk+pU
MAHb9d+VKEQMi44/eB0V7YfZ8nAO5YLFEusdrrCoX3K4vxwOwFwPLITzJYAF660R
gcvaeFI1S+jFDQL82IViXTJGdWw1FbrTZNne6aqE+wBIrw9cHqAYaNUc8M1Rz+Jn
WKtyClZfLPlhFQT67UG2Fp8WBkK0tbjGEHs3Pt7CMrmOT2KhTSIQGTyW2DL4
-----END CERTIFICATE-----
Generated at Fri May 3 02:55:31 2024 by rpki-client on console-fra.rpki-client.org