Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
File: SAGluBYVjweoyorLN-l-LyCwaRE.cer (raw, json)
Hash identifier: tmMTVMWEIf6OvD/G2ut67ocXar4Tum37l6FFpQKjOvM=
Subject key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EC2525E2AC87B1B8DC13DE53ADC192FD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Apr 2024 10:06:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206388
AS: 206495
AS: 207897
AS: 208005
IP: 91.199.9.0/24
IP: 91.199.18.0/24
IP: 91.199.27.0/24
IP: 91.199.30.0/24
IP: 109.95.60.0/22
IP: 185.186.240.0/22
IP: 185.187.86.0/23
IP: 194.9.56.0/23
IP: 194.9.80.0/23
IP: 194.150.68.0/22
IP: 2a04:1080::/29
IP: 2a04:6980::/29
IP: 2a0f:f1c0::/29
IP: 2a11:7700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:52:5e:2a:c8:7b:1b:8d:c1:3d:e5:3a:dc:19:2f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 9 10:06:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:79:54:46:b3:3b:c1:07:7e:fe:08:d1:12:
c4:fb:fb:8f:48:72:03:8b:7d:1c:44:ce:ca:fc:3b:
f1:ab:83:23:9a:00:b5:5a:ed:89:19:6e:fc:e7:cd:
a7:95:79:63:ca:42:19:9d:86:a2:55:95:c4:e2:08:
5b:3a:9c:ef:81:c4:49:75:ba:73:58:cf:3e:65:d3:
dd:95:c2:80:da:f3:84:98:64:10:c2:4e:46:6b:78:
32:a9:53:fe:23:f1:2d:e7:b6:73:b5:3e:e0:a4:a1:
e1:bf:5c:33:e8:ac:98:ac:26:45:24:d8:2f:42:a6:
ca:1b:e2:1b:0b:99:9e:2f:15:23:13:d3:2c:11:4a:
fc:cc:f7:72:9b:b5:36:fb:b0:55:f4:1a:d2:f5:d7:
db:76:31:5b:0b:d7:1e:ad:39:e5:35:2c:ee:19:5c:
54:dd:99:47:69:6f:97:61:85:aa:23:3c:87:70:32:
09:fc:3f:dd:16:19:71:15:ce:a3:74:c8:36:94:8f:
4e:dc:30:2a:11:ad:1d:3f:1a:06:17:52:27:72:4a:
63:e0:2f:b2:7f:92:f4:d3:25:d0:26:a0:08:cb:59:
75:ea:3f:3a:3e:50:f6:39:55:e6:85:ed:ac:d6:cb:
7a:1c:b3:68:04:e1:61:a8:99:ea:83:ef:71:67:94:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.9.0/24
91.199.18.0/24
91.199.27.0/24
91.199.30.0/24
109.95.60.0/22
185.186.240.0/22
185.187.86.0/23
194.9.56.0/23
194.9.80.0/23
194.150.68.0/22
IPv6:
2a04:1080::/29
2a04:6980::/29
2a0f:f1c0::/29
2a11:7700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206388
206495
207897
208005
Signature Algorithm: sha256WithRSAEncryption
ac:4a:c1:f6:0a:36:6f:36:4c:ab:f9:91:06:1c:5a:6f:92:20:
bc:c3:b9:89:e7:fd:85:8d:e2:3f:c7:32:94:07:40:43:79:d5:
54:66:5a:bf:b4:18:b2:62:52:f6:58:a6:14:51:e2:ef:12:37:
17:05:ae:09:6e:fe:12:9d:78:03:6f:7f:37:f1:ba:9c:37:a0:
2f:28:ff:97:ee:df:c6:0d:33:e8:c5:a5:fc:09:f7:b6:a2:df:
a8:ba:d1:22:9e:77:36:5c:12:70:5c:c2:5a:13:f1:1c:a7:fa:
64:03:0b:bf:af:f6:ea:05:57:fc:18:75:59:5b:cf:99:58:76:
e7:56:b8:57:5a:f1:3a:ca:bf:9a:e4:fd:cc:11:77:34:a2:7f:
80:22:ea:64:88:9c:92:fc:32:a2:e2:87:ca:81:18:9d:71:09:
eb:bf:eb:17:64:fd:bb:53:c1:5d:2c:e3:c7:d6:9b:53:2a:9b:
5c:08:ca:cd:04:29:22:ae:16:4e:f2:16:33:b6:50:7b:62:93:
b7:a5:85:6c:7b:77:57:42:02:ac:45:59:4a:20:7a:2f:c2:ae:
d3:6d:2d:07:bb:8c:53:94:36:bf:d4:74:f7:30:aa:d3:2f:69:
58:c5:bb:f4:26:13:47:22:2f:cc:9c:20:d0:f2:9a:cf:48:88:
6e:d5:cc:7f
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgISAY7CUl4qyHsbjcE95TrcGS/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDA5MTAwNjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODAxYTViODE2MTU4ZjA3YThjYThhY2IzN2U5N2UyZjIwYjA2OTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUl5VEazO8EHfv4I0RLE+/uPSHID
i30cRM7K/Dvxq4MjmgC1Wu2JGW78582nlXljykIZnYaiVZXE4ghbOpzvgcRJdbpz
WM8+ZdPdlcKA2vOEmGQQwk5Ga3gyqVP+I/Et57ZztT7gpKHhv1wz6KyYrCZFJNgv
QqbKG+IbC5meLxUjE9MsEUr8zPdym7U2+7BV9BrS9dfbdjFbC9cerTnlNSzuGVxU
3ZlHaW+XYYWqIzyHcDIJ/D/dFhlxFc6jdMg2lI9O3DAqEa0dPxoGF1Inckpj4C+y
f5L00yXQJqAIy1l16j86PlD2OVXmhe2s1st6HLNoBOFhqJnqg+9xZ5S/GQIDAQAB
o4IDCTCCAwUwHQYDVR0OBBYEFEgBpbgWFY8HqMqKyzfpfi8gsGkRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzcwOTBh
OS1mZWVkLTRlYTEtODQ1OS1lZTgxMGI4M2FkY2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvNzA5MGE5
LWZlZWQtNGVhMS04NDU5LWVlODEwYjgzYWRjZC8xL1NBR2x1QllWandlb3lvckxO
LWwtTHlDd2FSRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHkGCCsGAQUF
BwEHAQH/BGowaDBCBAIAATA8AwQAW8cJAwQAW8cSAwQAW8cbAwQAW8ceAwQCbV88
AwQCubrwAwQBubtWAwQBwgk4AwQBwglQAwQCwpZEMCIEAgACMBwDBQMqBBCAAwUD
KgRpgAMFAyoP8cADBQMqEXcAMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwMmNAID
AyafAgMDLBkCAwMshTANBgkqhkiG9w0BAQsFAAOCAQEArErB9go2bzZMq/mRBhxa
b5IgvMO5ief9hY3iP8cylAdAQ3nVVGZav7QYsmJS9limFFHi7xI3FwWuCW7+Ep14
A29/N/G6nDegLyj/l+7fxg0z6MWl/An3tqLfqLrRIp53NlwScFzCWhPxHKf6ZAML
v6/26gVX/Bh1WVvPmVh251a4V1rxOsq/muT9zBF3NKJ/gCLqZIickvwyouKHyoEY
nXEJ67/rF2T9u1PBXSzjx9abUyqbXAjKzQQpIq4WTvIWM7ZQe2KTt6WFbHt3V0IC
rEVZSiB6L8Ku020tB7uMU5Q2v9R09zCq0y9pWMW79CYTRyIvzJwg0PKaz0iIbtXM
fw==
-----END CERTIFICATE-----
Generated at Fri May 3 10:15:28 2024 by rpki-client on console-fra.rpki-client.org