Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
File: OroRckcuqAJl0SmCln3gqLC8WQE.cer (raw, json)
Hash identifier: gCUoIsX4S7xVqGX5GoC3Jzy1xpRDLu81jZkUzflssMw=
Subject key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4924260358C5B2259A0B4483F292CCE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200320
AS: 201426
AS: 201942
IP: 45.130.16.0/22
IP: 46.31.68.0/24
IP: 46.226.144.0/21
IP: 46.253.138.0/24
IP: 91.205.220.0/24
IP: 91.246.52.0/24
IP: 109.205.60.0/24
IP: 185.21.135.0/24
IP: 185.58.196.0/22
IP: 185.119.112.0/22
IP: 185.204.102.0/24
IP: 185.219.7.0/24
IP: 185.232.41.0/24
IP: 185.243.152.0/22
IP: 188.93.117.0/24
IP: 193.46.216.0/22
IP: 193.56.3.0/24
IP: 193.57.146.0/23
IP: 193.57.164.0/23
IP: 193.163.117.0/24
IP: 194.26.143.0/24
IP: 195.96.132.0/24
IP: 195.182.204.0/23
IP: 195.184.72.0/23
IP: 212.23.223.0/24
IP: 2a02:6520::/32
IP: 2a0c:8e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:42:60:35:8c:5b:22:59:a0:b4:48:3f:29:2c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:9b:4f:7c:a6:e1:ba:3f:ee:88:eb:a8:e6:
08:1f:2e:27:7b:f1:63:84:50:1b:96:4b:a8:62:c6:
6d:f7:72:d4:6a:12:19:47:4a:df:d1:0f:df:d2:33:
e8:64:87:de:01:05:bd:06:1d:ba:d8:db:d2:9a:14:
d2:0b:e0:58:86:c2:fa:c9:72:80:88:9c:74:bf:93:
e3:b7:ba:4b:07:cf:18:f0:ae:88:96:0c:b3:30:47:
46:c6:8e:cc:ea:c7:5e:71:0e:24:28:ae:a3:5d:25:
97:86:31:3e:56:4b:59:14:09:e7:e2:66:1d:25:84:
43:90:c1:a7:83:6a:ed:3f:22:23:df:95:74:de:fb:
b1:4f:e5:30:c4:c3:9c:0a:99:46:af:fa:12:d7:e8:
cf:7b:d2:30:95:d3:25:5d:fb:5d:ed:d1:8a:32:cc:
8c:fa:10:97:9b:18:3c:b9:f6:21:38:8a:09:90:82:
0c:be:6e:ba:68:2b:a5:0e:01:49:7e:a6:67:83:49:
6a:df:25:45:dc:22:81:52:7e:ac:b3:45:f7:1e:64:
67:b7:a1:2e:54:8b:80:04:99:b9:84:18:f6:17:2d:
01:4f:c3:e3:5c:65:ba:31:d2:f3:c5:ed:54:8c:6e:
60:4b:15:2f:c5:cd:fa:7c:da:59:53:2b:a1:11:66:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.16.0/22
46.31.68.0/24
46.226.144.0/21
46.253.138.0/24
91.205.220.0/24
91.246.52.0/24
109.205.60.0/24
185.21.135.0/24
185.58.196.0/22
185.119.112.0/22
185.204.102.0/24
185.219.7.0/24
185.232.41.0/24
185.243.152.0/22
188.93.117.0/24
193.46.216.0/22
193.56.3.0/24
193.57.146.0/23
193.57.164.0/23
193.163.117.0/24
194.26.143.0/24
195.96.132.0/24
195.182.204.0/23
195.184.72.0/23
212.23.223.0/24
IPv6:
2a02:6520::/32
2a0c:8e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200320
201426
201942
Signature Algorithm: sha256WithRSAEncryption
7c:de:d9:97:3f:56:f8:41:15:58:f8:28:12:fa:6f:5b:e2:35:
6e:3e:be:d1:be:60:a4:70:a4:ba:c6:20:2a:df:76:60:b9:89:
b5:34:d7:7b:db:fe:6d:b6:de:b5:65:be:cb:ea:c9:5f:7d:f9:
5b:c8:8c:87:35:c3:f9:f1:06:3c:5e:c8:7a:0e:fb:05:7d:70:
5a:a6:32:45:94:1c:18:b9:bf:3d:c9:80:13:c6:a0:40:8a:29:
f3:8a:a8:e8:b5:bf:bf:7d:73:fb:b0:f9:9e:23:b1:f4:ac:3f:
0e:ee:34:6a:72:5b:6a:82:4b:35:74:1f:45:42:ad:1b:51:24:
8f:cd:a1:ac:17:3e:9b:29:ac:6d:dc:5f:b7:1e:b1:c2:c1:c8:
8c:d3:63:58:6f:0d:2d:c8:30:ff:16:8a:a7:73:0f:04:87:b2:
91:e4:90:8f:49:94:21:ce:b3:2e:3b:13:17:fc:cd:c6:e8:49:
14:d5:c2:bd:0c:af:df:ab:0b:4b:71:b4:86:2b:cc:af:b7:f2:
49:fe:7e:7d:b0:ee:13:be:f6:a0:b0:88:a9:60:ff:17:e2:9f:
a0:49:f2:67:f4:b8:84:74:01:6c:f1:c8:3c:d2:ff:37:fe:1a:
cd:7a:cb:e7:a3:58:5d:13:b1:6c:ea:c6:01:b6:71:03:40:10:
a3:4b:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:05:35 2024 by rpki-client on console-ams.rpki-client.org