Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RoWpxIcmUu55Z7pfSieCDGcVKNY.cer
File: RoWpxIcmUu55Z7pfSieCDGcVKNY.cer (raw, json)
Hash identifier: Py4iGrhiTmxu+h7g7GJG8JeO33CGyxOsvpYuhngqY/Q=
Subject key identifier: 46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EADFEFF420E15681414FB7C4A7B3F1C52
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 05 Apr 2024 11:22:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 146.19.202.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ad:fe:ff:42:0e:15:68:14:14:fb:7c:4a:7b:3f:1c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 5 11:22:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4685a9c4872652ee7967ba5f4a27820c671528d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:79:1b:9c:20:ce:c2:7e:9f:bf:62:4e:67:
6c:da:5c:0e:b7:02:9f:6a:fa:ba:b2:3b:8c:04:46:
bf:8c:06:ce:e7:ea:0f:8c:92:7f:07:9c:db:b3:de:
87:57:84:f5:96:40:5d:44:06:d0:11:37:fe:4b:a9:
21:5d:4a:b8:54:87:0f:cb:19:85:44:78:67:3b:43:
6e:1e:90:1e:48:d1:f9:e3:ef:8d:e8:81:5d:01:ca:
6d:87:29:4a:7f:80:e3:d5:12:a3:6b:38:52:23:13:
62:aa:1c:f8:60:88:2f:aa:5c:36:d0:29:02:7a:21:
4f:d3:92:be:0d:53:02:60:40:bd:49:ee:d1:3c:28:
8a:ed:99:b1:33:d1:16:b3:bd:2a:17:91:5e:26:2f:
44:95:6c:3e:a8:69:25:54:0c:f6:3c:e1:45:4d:ae:
f3:07:da:b1:67:d0:26:d4:16:f6:4a:cd:8b:fd:6f:
cb:1a:94:d2:e5:ac:0e:69:2d:69:f8:68:47:93:a7:
0e:5f:9d:a0:15:a8:93:63:95:74:e6:ab:d3:15:30:
4a:89:f0:97:d6:6d:03:1a:39:d0:13:9c:25:3e:2d:
e4:31:8e:70:10:f5:04:c1:78:3d:45:aa:f2:94:79:
a9:09:8d:e3:31:b7:78:32:e1:17:6b:ed:62:bf:6c:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:85:A9:C4:87:26:52:EE:79:67:BA:5F:4A:27:82:0C:67:15:28:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0ccc08-dd35-4051-a185-a35e2bfed608/1/RoWpxIcmUu55Z7pfSieCDGcVKNY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.202.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f0:cf:bc:e0:1c:c8:37:f8:45:da:10:db:fc:5f:a4:8d:c1:
b4:8f:8b:66:b0:2b:3c:f4:9f:a5:71:73:37:36:2d:93:4c:56:
2d:f8:71:94:07:44:37:7b:71:3c:26:89:19:cd:5a:b2:7e:78:
cd:1f:fb:84:de:db:04:91:91:76:c2:50:1a:02:f1:0f:41:b8:
99:2a:dc:79:64:c2:15:a3:26:0f:30:0a:54:5f:47:93:ae:ff:
27:a9:36:a3:62:07:6d:b7:a3:59:c0:66:a8:8c:89:5b:c1:a5:
0a:c7:b9:3b:86:3b:80:87:82:8e:20:bf:b9:d0:f2:a1:71:43:
f1:f3:0a:28:38:b4:f1:67:54:80:1d:90:ff:00:7f:ec:f4:e0:
2e:dd:ec:3b:7e:ff:49:d8:69:3e:2c:6b:43:c0:a4:93:96:be:
c0:5d:71:91:56:fe:7e:07:6a:3f:5f:53:9b:9d:e5:b0:dc:4e:
25:6f:c8:cf:55:88:d6:ce:21:e7:a4:57:67:f0:77:c5:27:f5:
9b:24:a8:fd:d3:47:73:69:d3:d1:d7:98:3f:95:92:9b:fb:76:
65:98:10:ed:36:8e:68:c6:aa:af:26:7a:84:9d:b5:20:ee:b8:
35:b7:c8:33:e3:95:f0:58:d4:eb:d2:7f:ce:f4:84:6d:16:05:
a9:ce:cb:a4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAY6t/v9CDhVoFBT7fEp7PxxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDA1MTEyMjMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njg1YTljNDg3MjY1MmVlNzk2N2JhNWY0YTI3ODIwYzY3MTUyOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw555G5wgzsJ+n79iTmds2lwOtwKf
avq6sjuMBEa/jAbO5+oPjJJ/B5zbs96HV4T1lkBdRAbQETf+S6khXUq4VIcPyxmF
RHhnO0NuHpAeSNH54++N6IFdAcpthylKf4Dj1RKjazhSIxNiqhz4YIgvqlw20CkC
eiFP05K+DVMCYEC9Se7RPCiK7ZmxM9EWs70qF5FeJi9ElWw+qGklVAz2POFFTa7z
B9qxZ9Am1Bb2Ss2L/W/LGpTS5awOaS1p+GhHk6cOX52gFaiTY5V05qvTFTBKifCX
1m0DGjnQE5wlPi3kMY5wEPUEwXg9RarylHmpCY3jMbd4MuEXa+1iv2ztaQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEaFqcSHJlLueWe6X0onggxnFSjWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzBjY2Mw
OC1kZDM1LTQwNTEtYTE4NS1hMzVlMmJmZWQ2MDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvMGNjYzA4
LWRkMzUtNDA1MS1hMTg1LWEzNWUyYmZlZDYwOC8xL1JvV3B4SWNtVXU1NVo3cGZT
aWVDREdjVktOWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAkhPKMA0GCSqGSIb3DQEBCwUAA4IBAQA38M+8
4BzIN/hF2hDb/F+kjcG0j4tmsCs89J+lcXM3Ni2TTFYt+HGUB0Q3e3E8JokZzVqy
fnjNH/uE3tsEkZF2wlAaAvEPQbiZKtx5ZMIVoyYPMApUX0eTrv8nqTajYgdtt6NZ
wGaojIlbwaUKx7k7hjuAh4KOIL+50PKhcUPx8wooOLTxZ1SAHZD/AH/s9OAu3ew7
fv9J2Gk+LGtDwKSTlr7AXXGRVv5+B2o/X1ObneWw3E4lb8jPVYjWziHnpFdn8HfF
J/WbJKj900dzadPR15g/lZKb+3ZlmBDtNo5oxqqvJnqEnbUg7rg1t8gz45XwWNTr
0n/O9IRtFgWpzsuk
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:53:24 2024 by rpki-client on console-fra.rpki-client.org