Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OkGxVaq20SKf00jqoD0PeQPxJno.cer
File: OkGxVaq20SKf00jqoD0PeQPxJno.cer (raw, json)
Hash identifier: X4KNFpF2YIelEEnlQ5EVQhsi3hIwpTZbiNCjIT0qvuw=
Subject key identifier: 3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F11C1F783C4FBA2950AFA87CC0251
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211783
IP: 185.197.136.0/22
IP: 2a0a:7a40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:11:c1:f7:83:c4:fb:a2:95:0a:fa:87:cc:02:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a41b155aab6d1229fd348eaa03d0f7903f1267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:a0:19:c9:b3:ba:5f:e9:7b:5a:5c:4f:ef:
1d:86:6f:a6:1f:4d:6d:a6:68:53:0f:3e:01:3b:19:
f5:16:c6:4f:4d:b4:77:c5:6d:3a:86:71:07:f9:46:
31:da:22:ea:c9:63:cb:b1:ab:5d:fd:15:00:be:b5:
4b:96:ec:6b:81:de:58:e3:96:ce:26:f6:ea:75:16:
be:4f:b5:09:76:80:11:16:76:bd:06:c0:5a:f0:69:
2b:9a:e8:bc:63:14:a8:da:4c:90:90:49:42:10:d0:
7c:72:59:48:e9:c4:c6:82:58:73:18:78:36:da:e8:
37:37:71:a5:70:cc:c2:9c:eb:66:a7:9b:cf:a6:39:
2d:c0:47:7a:49:71:61:f6:69:c5:30:a6:7a:d4:dc:
1e:09:50:8c:76:17:5a:3c:39:8b:c3:ca:0f:90:0c:
b5:32:a0:0e:a8:ba:15:c9:1f:94:25:86:63:d2:47:
19:43:84:c0:5d:da:05:c5:59:8d:29:30:c4:ed:7e:
b6:4c:57:94:00:77:ae:28:31:55:46:78:bb:c7:be:
0f:50:98:6f:1d:f1:65:d2:15:aa:c7:6f:b2:9a:44:
9d:85:dc:b5:fa:35:98:cb:0c:a4:8b:90:2e:25:fb:
17:1d:7d:ac:f9:aa:98:ed:78:14:11:a5:7b:e7:f8:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:41:B1:55:AA:B6:D1:22:9F:D3:48:EA:A0:3D:0F:79:03:F1:26:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bccaea-68ce-4224-97a5-2b3b4c780419/1/OkGxVaq20SKf00jqoD0PeQPxJno.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.136.0/22
IPv6:
2a0a:7a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211783
Signature Algorithm: sha256WithRSAEncryption
57:14:83:e6:0f:e8:3e:c9:f9:df:e6:da:ec:c8:0f:31:6b:79:
87:f4:51:04:42:c8:ab:7e:ac:e5:86:a4:5e:8f:f5:e4:23:48:
0e:98:60:ce:34:e4:f8:71:de:bb:da:ba:8b:f9:53:bc:ed:1a:
6f:5b:b1:59:40:a2:cf:6a:40:22:a6:9e:cb:96:60:79:7c:ae:
2d:34:b8:c6:8d:43:0f:f5:76:40:36:ad:d2:3d:c2:9d:bf:31:
53:bc:fc:ba:87:0f:b8:8e:72:86:c2:6e:b5:d1:c4:2f:e0:b1:
65:84:9a:21:53:a0:c1:a1:f8:26:98:9d:3d:e6:3f:87:cc:23:
44:ef:aa:a6:d8:cc:2e:0e:c3:a7:31:37:1f:f5:5c:fc:d3:4e:
1e:09:8f:cc:68:9a:ba:d9:2c:bd:8a:99:f2:29:94:89:bc:63:
ff:4e:51:e2:09:ba:08:4f:53:92:5d:36:29:03:0c:31:c9:e7:
6c:f7:82:fa:9b:a9:ae:2c:54:a1:71:8f:2d:40:25:ec:89:9e:
f8:ac:34:05:65:64:e6:09:42:70:0c:be:df:7e:a0:b9:11:f2:
31:f8:ca:99:8e:34:88:5e:17:e5:ce:65:4d:b8:f1:48:fe:88:
1c:b3:61:7a:13:5c:db:57:52:b3:ac:f7:8e:6a:48:8d:93:9f:
17:4d:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:45 2025 by rpki-client