Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.cer (raw, json)
Hash identifier: 37ucDCqXri8r8Xgj9tjGDk/GZqlyNYEXkwRG6ZAzmio=
Subject key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7953D7B3D63A56383E5BA2D6DAFC925
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 44322
IP: 185.83.240.0/22
IP: 2a05:a000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3d:7b:3d:63:a5:63:83:e5:ba:2d:6d:af:c9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:85:a8:fc:bc:7c:d0:1a:3a:ca:cf:2d:74:
7a:19:3e:25:ce:51:ee:0f:7a:15:89:82:79:de:f6:
66:72:6f:dc:9c:ed:8f:ad:5d:b8:51:04:1c:f3:07:
13:b1:d6:41:35:d6:b1:03:b1:2b:24:4c:e4:a6:20:
4c:24:db:1a:3a:63:d1:5c:46:32:0f:83:f3:5d:fa:
11:f9:5f:16:23:12:98:d9:0c:35:bd:b1:4f:3f:24:
a8:52:00:29:2a:f2:8f:c2:65:1d:d5:83:ee:5d:65:
aa:3a:e2:6f:26:b1:0b:3e:56:30:13:c6:40:3e:f1:
22:f7:b7:89:2e:85:b3:52:c9:9e:5b:17:b2:1a:3c:
40:fe:13:b6:86:81:ae:7a:8b:28:99:ee:d2:8e:b0:
02:c8:79:f5:74:58:e9:a2:a8:a6:6c:66:8f:ae:c7:
f8:13:21:c6:f4:9a:a4:8d:69:fe:c2:47:15:6d:15:
24:26:9d:22:f5:ba:f6:fa:5f:a0:d2:5d:fa:7f:63:
65:c1:0a:9a:c8:ad:60:a3:cc:81:25:8f:e4:39:29:
75:70:63:c2:89:af:55:15:5b:b3:00:0b:4a:1b:50:
64:89:e5:d5:98:10:34:41:14:83:29:7c:4a:7d:1f:
35:0f:c9:65:b5:53:31:12:df:a7:fd:07:25:3a:42:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.240.0/22
IPv6:
2a05:a000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44322
Signature Algorithm: sha256WithRSAEncryption
1b:98:c2:6e:d7:cc:13:9f:a3:8c:84:86:ec:b6:ef:5d:d9:66:
7f:2f:74:5d:1e:e9:4d:ff:2e:f1:ed:0a:b0:50:60:14:b1:c1:
dc:29:58:1a:7a:2f:6a:4a:8a:ee:85:2d:ca:37:6e:15:1a:7d:
4f:03:ec:30:ff:8f:6a:6a:9b:9d:be:16:c2:27:8b:eb:7b:9d:
31:0b:dc:20:f8:8e:74:e0:e6:79:e8:c1:74:1d:3e:e1:d8:44:
cd:d7:34:e0:d1:fe:1a:58:6d:b5:d1:17:2c:e6:48:ab:d7:94:
86:29:85:31:55:4f:f6:7b:68:a9:6d:42:e0:6b:80:38:8d:cf:
b9:ad:7a:d3:d2:b4:40:ce:bc:7d:c6:17:55:dd:be:db:8f:bf:
e9:6f:e6:52:34:84:e1:66:5c:d8:58:85:e5:21:76:69:9e:fd:
23:f6:f3:ef:8c:40:d0:b8:92:f1:bb:b0:06:64:a4:27:be:45:
47:bf:4f:90:75:5a:ed:89:40:65:af:77:01:7a:81:75:76:f2:
cb:a5:c5:5d:e5:34:b5:1b:af:cf:e2:87:e4:e5:26:f6:1b:3d:
85:2a:44:81:91:cd:d8:e0:c2:59:43:11:ba:22:c8:a0:3e:ae:
de:47:e1:a2:47:d9:08:91:cc:62:9e:73:a1:ae:ba:21:15:03:
aa:0f:0c:f1
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzHlT17PWOlY4Plui1tr8klMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODEyYzk3ZGJkMzIxOTViNmFmYTkxMTQwYjU1MjBiNWUwYzJjNWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O+FqPy8fNAaOsrPLXR6GT4lzlHu
D3oViYJ53vZmcm/cnO2PrV24UQQc8wcTsdZBNdaxA7ErJEzkpiBMJNsaOmPRXEYy
D4PzXfoR+V8WIxKY2Qw1vbFPPySoUgApKvKPwmUd1YPuXWWqOuJvJrELPlYwE8ZA
PvEi97eJLoWzUsmeWxeyGjxA/hO2hoGueosome7SjrACyHn1dFjpoqimbGaPrsf4
EyHG9JqkjWn+wkcVbRUkJp0i9br2+l+g0l36f2NlwQqayK1go8yBJY/kOSl1cGPC
ia9VFVuzAAtKG1BkieXVmBA0QRSDKXxKfR81D8lltVMxEt+n/QclOkKdrwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFDgSyX29MhlbavqRFAtVILXgwsW+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwL2NiNTNm
Yy03MDk2LTQ1OTQtOTFiMS1kOTI3ODVhNjEyMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvY2I1M2Zj
LTcwOTYtNDU5NC05MWIxLWQ5Mjc4NWE2MTIxOS8xL09CTEpmYjB5R1Z0cS1wRVVD
MVVndGVEQ3hiNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVPwMA0EAgACMAcDBQMqBaAAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCtIjANBgkqhkiG9w0BAQsFAAOCAQEAG5jCbtfME5+j
jISG7LbvXdlmfy90XR7pTf8u8e0KsFBgFLHB3ClYGnovakqK7oUtyjduFRp9TwPs
MP+Pamqbnb4WwieL63udMQvcIPiOdODmeejBdB0+4dhEzdc04NH+GlhttdEXLOZI
q9eUhimFMVVP9ntoqW1C4GuAOI3Pua1609K0QM68fcYXVd2+24+/6W/mUjSE4WZc
2FiF5SF2aZ79I/bz74xA0LiS8buwBmSkJ75FR79PkHVa7YlAZa93AXqBdXbyy6XF
XeU0tRuvz+KH5OUm9hs9hSpEgZHN2ODCWUMRuiLIoD6u3kfhokfZCJHMYp5zoa66
IRUDqg8M8Q==
-----END CERTIFICATE-----
Generated at Fri May 3 11:30:39 2024 by rpki-client on console-ams.rpki-client.org