Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
File: RKqBMTnAax3PG_6DMrm4Aas-swI.cer (raw, json)
Hash identifier: UM0j45J5EeYc4JQE/96g7gzb/Wyp8KTPKD3C9HNoUAQ=
Subject key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CEE1B192729CE24289A0CE8D9505C488F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Jan 2024 12:03:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202693
IP: 80.75.220.0/24
IP: 2a06:c640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:1b:19:27:29:ce:24:28:9a:0c:e8:d9:50:5c:48:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 12:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:97:1c:91:93:64:98:14:3b:68:15:5f:ee:
09:38:9d:e7:fd:0e:95:9b:db:f9:86:67:65:2e:7d:
a7:89:0d:3e:04:00:42:94:64:8f:ab:33:23:8b:73:
b8:7e:9a:ee:e8:62:55:29:84:bb:a5:9d:d3:ae:13:
53:85:b3:8d:a5:13:6b:17:59:a8:29:a7:81:6d:b4:
7b:c4:3d:0c:9b:a8:69:41:eb:e9:23:17:7f:5e:0d:
ba:a2:61:a7:de:0e:94:e0:91:59:0b:3b:f4:40:2e:
51:38:73:72:de:e9:46:43:1a:f6:20:fd:9e:18:bc:
e5:95:05:91:22:a5:33:11:ae:4e:59:b3:fa:7a:07:
a5:3b:a2:b7:6e:85:ee:ac:ce:77:68:41:ad:b6:2f:
9d:31:a1:a4:ce:02:5a:14:72:14:ae:ba:e7:47:67:
5f:81:33:dd:3a:25:0e:a8:2e:ba:ab:dd:24:78:f7:
8d:9a:6a:14:4e:b1:b3:9a:a4:1b:42:23:f1:10:ff:
4c:02:88:50:a0:e0:4a:e9:bd:e2:d1:34:f1:3f:53:
a9:fe:53:42:23:4e:ae:7d:8d:09:84:6f:af:f8:82:
7c:38:2d:d7:95:fe:54:c1:d6:10:29:da:e7:34:f1:
0b:66:63:03:93:a5:cf:c5:91:89:4a:f7:c4:4e:a2:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.220.0/24
IPv6:
2a06:c640::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202693
Signature Algorithm: sha256WithRSAEncryption
29:40:36:2c:2e:ab:3b:e1:7a:d0:63:a9:7c:5e:a7:54:fd:9a:
58:ea:17:bf:ff:2c:a6:7d:f7:7f:d0:77:46:7d:7b:4a:a3:50:
e9:89:61:e1:86:ba:71:73:65:1e:72:cd:1c:46:e6:e7:9d:40:
e0:a5:7b:22:26:e7:65:35:73:ab:55:11:7f:72:ce:2c:f4:1c:
3f:d5:47:7e:b4:37:33:60:a5:a3:3e:bb:f6:87:ae:6a:0e:95:
72:98:d1:2e:2b:e6:d3:64:60:f7:ba:86:45:43:e3:e2:21:e7:
15:00:40:57:b1:20:fe:31:22:cb:05:75:f2:18:f4:0d:29:7c:
b9:ab:da:fa:c6:3f:01:93:63:40:5c:52:42:1c:b0:13:39:78:
b5:9b:44:86:32:b6:ee:c3:66:fd:cb:32:d4:51:56:d4:14:93:
10:4a:46:ca:e7:77:1c:0e:f5:e0:45:a2:ab:5f:a3:ae:6c:0b:
a7:88:10:ce:67:0d:12:aa:b1:29:4d:48:83:f7:08:ee:4d:03:
fe:1f:f5:dc:3d:b6:a4:ff:38:f5:12:2c:e7:de:62:13:0e:12:
9a:98:95:7d:27:16:50:5d:4e:a2:99:85:d7:71:54:cb:23:0b:
7d:cc:c8:12:36:1c:f2:cc:c8:08:a9:98:91:8a:80:84:9c:f0:
e9:86:ba:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:34:26 2024 by rpki-client on console-fra.rpki-client.org