Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OExnnLr4wq171-FZCG_fCifSooQ.cer
File: OExnnLr4wq171-FZCG_fCifSooQ.cer (raw, json)
Hash identifier: hzlVPcRTlU335FUdl2i1ZHXMw0e0qCe2T74Fp+9r1n8=
Subject key identifier: 38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206847F9A4E84910F2819966711AECC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51816
IP: 91.220.107.0/24
IP: 2001:67c:2014::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:47:f9:a4:e8:49:10:f2:81:99:66:71:1a:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=384c679cbaf8c2ad7bd7e159086fdf0a27d2a284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:33:41:d5:1b:d8:99:bb:5f:a0:85:52:2d:
1f:36:00:db:4c:d4:1b:eb:c8:34:79:83:0c:b5:aa:
67:1a:80:50:96:48:c5:09:4c:5b:57:8e:ce:90:b2:
ac:6e:a8:9a:6e:d4:53:88:6a:aa:85:14:63:8a:c0:
83:42:e2:98:b0:63:c7:4b:58:85:bd:09:71:f6:51:
89:b2:18:64:6c:a2:70:2c:26:93:75:fe:ae:c0:94:
64:53:e8:b3:f9:a7:79:7f:ac:8c:f6:51:ba:72:75:
d7:49:6c:11:60:98:71:9d:43:80:1e:00:b2:a5:c1:
4d:05:38:fa:ba:c5:52:c1:6b:eb:cd:b7:a0:3d:c6:
37:af:3f:6b:84:fb:87:f9:52:eb:1a:f3:90:07:d2:
04:00:96:21:b1:68:7e:e7:c4:09:d9:c4:1d:14:e5:
57:36:e1:99:99:6e:42:ad:f5:ed:09:5b:4f:73:92:
26:26:11:79:ca:1c:43:ec:62:c7:35:04:81:05:63:
de:dd:74:c5:8d:3c:58:46:9f:f3:51:2a:fb:9f:f9:
b7:03:1f:74:52:d8:8d:ef:f0:12:4c:1f:ed:86:aa:
8f:59:93:55:09:aa:40:19:8b:b1:c4:e7:54:5b:a7:
0a:0d:1a:16:c9:b2:64:84:bb:02:35:ae:ab:98:6e:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4C:67:9C:BA:F8:C2:AD:7B:D7:E1:59:08:6F:DF:0A:27:D2:A2:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32eaa2-ccb9-48e1-962d-e3ea6494d4ea/1/OExnnLr4wq171-FZCG_fCifSooQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.107.0/24
IPv6:
2001:67c:2014::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51816
Signature Algorithm: sha256WithRSAEncryption
1c:2a:ba:51:22:cf:96:45:9a:76:87:a6:44:c0:ac:ea:53:32:
33:d1:f4:93:09:5f:5e:19:75:40:1b:2e:d2:6d:d6:59:3b:ec:
c1:1b:5d:b6:b8:49:9d:40:08:fc:ab:df:f1:c7:31:a5:87:c0:
bc:bb:f1:2d:41:bc:7e:f2:99:0f:ea:aa:12:77:82:d3:c0:16:
fe:11:b3:03:77:8a:18:a7:60:ea:21:9b:41:8d:f3:8c:0a:f0:
58:1e:fc:70:1c:cc:41:02:89:56:69:4e:aa:38:cb:3b:ed:6e:
15:93:31:c5:6d:8a:ab:fe:cf:8e:fa:88:3f:14:20:a8:f3:50:
8b:17:76:ff:79:62:0c:6e:e7:c2:d3:b1:05:6d:d7:01:b2:f4:
a8:e4:cb:64:d9:83:e2:ab:24:90:22:8d:22:b2:a9:ac:70:c9:
2c:18:b1:fc:3a:5e:df:d3:40:dc:ef:65:89:3b:95:93:30:90:
5b:b7:51:8c:bf:c8:84:ee:7a:b3:87:a9:dc:fa:f1:6d:82:af:
24:f0:6c:4f:30:68:4e:c5:d9:83:be:4e:1b:60:87:28:86:2d:
7f:d6:fd:61:2e:cf:5a:c2:33:c8:df:82:d3:3d:cf:3e:9e:f9:
bf:15:74:88:da:62:93:97:00:3a:1e:a1:7b:ad:b4:09:69:05:
1d:d4:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:03 2025 by rpki-client