Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
File: Og6YCIquzFusI9Wg5intsMVT5y4.cer (raw, json)
Hash identifier: VTlrCNqBEGmTlwJPEVIPT8l4Tb9M6MUPBqNbXgEcb28=
Subject key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5DC86F502A8FC251CBE1CC97D5C22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212310
IP: 185.237.192.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:dc:86:f5:02:a8:fc:25:1c:be:1c:c9:7d:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:b0:e7:b1:e9:82:66:6b:38:34:10:a8:da:
f7:95:3a:16:ac:e9:c4:b4:e3:ab:52:d7:4f:e1:03:
86:a8:e3:f1:2b:a3:e4:06:7a:1e:ec:9c:be:3c:0f:
04:55:a1:12:ec:d8:14:2c:09:b9:cf:3f:06:41:ac:
03:a4:ab:3b:db:f3:79:a2:5d:73:04:29:71:bd:12:
2b:06:4e:1c:e9:8e:8d:37:10:fd:50:ae:38:5c:69:
66:8b:30:35:fb:71:ff:f6:93:d4:f3:76:ca:45:b9:
da:97:c2:87:f3:cb:8b:0c:06:85:ce:a7:9d:fb:e2:
81:9a:7a:f5:4b:c6:f5:bf:1f:5d:31:62:4e:3c:09:
fe:68:6a:70:80:51:50:b6:fa:a4:b1:3a:bd:48:28:
d6:27:46:bb:87:5a:ea:6b:3a:ce:55:ad:e6:1b:10:
b7:b7:13:07:10:1c:85:f3:3b:41:9a:f7:1d:5e:8a:
3b:de:f1:95:4f:29:3f:72:5e:f1:f6:5d:48:0e:f9:
a7:32:26:1d:df:90:bb:e3:90:12:c8:4e:c2:6f:97:
4b:79:39:25:c4:8a:33:65:af:d4:da:cb:60:18:c5:
48:84:c8:dd:a2:db:f3:9d:b0:e2:0f:91:07:3e:07:
8d:8f:80:25:4c:73:76:f5:1a:e6:43:45:b2:0e:fb:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.192.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212310
Signature Algorithm: sha256WithRSAEncryption
3c:27:c4:85:fc:4e:50:8e:09:08:9f:fe:c2:86:90:f3:56:23:
70:f8:54:be:ab:72:c1:ae:c2:09:bf:64:ec:30:81:08:02:81:
c9:2d:0c:db:67:4c:b6:08:2a:3a:88:e3:ce:91:28:d3:df:7a:
bb:54:eb:e9:f2:2a:7c:54:90:ca:b0:37:7b:b7:da:1b:03:0d:
74:0d:08:0c:4d:4d:71:47:4c:0a:0e:92:71:67:c7:de:47:e6:
0f:e3:f6:84:aa:4d:df:ab:73:e8:57:8f:f3:38:28:ab:8a:ba:
55:e1:01:22:df:ac:72:9e:a2:7c:fb:70:33:99:f1:1e:c5:48:
94:77:c6:45:e2:a7:88:38:b8:ed:07:ce:cd:e4:4f:7d:c0:7c:
fe:eb:a3:d7:c4:42:5a:ef:40:13:b8:5e:ec:94:ac:39:27:36:
98:0b:df:9f:58:6b:9c:53:3d:10:4c:cc:15:a6:cd:70:4a:04:
0e:fa:6f:a7:af:d4:64:9b:4b:71:79:08:61:2a:80:58:2f:33:
3e:3b:fa:86:d0:dd:b9:d2:c9:0e:3e:52:8d:86:89:e5:b5:9c:
0a:4b:58:8a:2f:5f:e0:71:6b:68:09:ab:65:cb:24:10:34:37:
89:63:cb:50:0a:0e:38:9e:f5:91:23:42:5a:87:96:90:d4:79:
ed:33:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 22:13:50 2025 by rpki-client