Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TAL5PCWH3II2a1Bgb-SFLk96Gr4.cer
File: TAL5PCWH3II2a1Bgb-SFLk96Gr4.cer (raw, json)
Hash identifier: H3eDBZdW7cKzost1RccEBUVsVeZmR+94UBaPY6MuD5M=
Subject key identifier: 4C:02:F9:3C:25:87:DC:82:36:6B:50:60:6F:E4:85:2E:4F:7A:1A:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5D6FD8ECC26AFFD13014B20B1736A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://oto.wakuwaku.ne.jp/pki/h/1/4C02F93C2587DC82366B50606FE4852E4F7A1ABE.mft
caRepository: rsync://oto.wakuwaku.ne.jp/pki/h/1/
Notify URL: https://oto.wakuwaku.ne.jp/pki/oshirase.xml
Certificate not before: Wed 01 Jan 2025 07:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51818
IP: 185.0.19.0/24
IP: 185.155.75.0/24
IP: 2001:7f8:2::/48
IP: 2a13:c000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d6:fd:8e:cc:26:af:fd:13:01:4b:20:b1:73:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c02f93c2587dc82366b50606fe4852e4f7a1abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:e0:37:8a:1b:4c:fc:41:1a:0c:38:52:f8:
4a:7c:f9:68:f4:83:46:3c:6b:0f:81:c2:db:44:d2:
e7:d7:a4:14:85:7d:4d:5f:9e:00:e9:7c:29:37:dc:
80:bb:40:05:81:6d:26:4a:3a:0b:7a:9a:83:7c:a0:
07:81:12:35:cd:43:6c:04:51:82:6c:e5:93:56:1c:
91:63:47:c6:38:9a:74:d4:f4:33:ea:4c:73:89:61:
2e:f8:44:b5:16:c3:6c:90:8b:54:93:4e:14:ef:4c:
eb:2a:e0:f4:3e:65:70:bc:b1:b8:3e:6f:9a:08:c0:
33:c7:99:59:c7:1f:9d:af:d5:51:19:f9:ff:f3:91:
11:01:ca:c3:92:4f:d3:32:1c:cf:cd:ac:17:47:b8:
e0:a8:da:bd:bd:f8:72:be:bb:cb:4d:09:16:6f:05:
76:06:d8:c2:70:1a:b8:4d:a1:25:61:99:26:31:03:
00:de:e9:77:70:77:80:09:16:32:11:87:25:12:eb:
15:82:cc:1e:50:8e:18:63:ac:a3:fa:9c:f3:8f:d4:
71:a5:a5:88:29:55:bf:06:05:f1:13:2a:63:5c:dc:
76:16:a6:e8:64:ef:1e:5f:b7:5f:a9:42:c5:d9:3b:
d1:13:6c:0a:e4:e6:61:e8:fc:37:c3:75:d3:bd:fe:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:F9:3C:25:87:DC:82:36:6B:50:60:6F:E4:85:2E:4F:7A:1A:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://oto.wakuwaku.ne.jp/pki/h/1/
RPKI Manifest - URI:rsync://oto.wakuwaku.ne.jp/pki/h/1/4C02F93C2587DC82366B50606FE4852E4F7A1ABE.mft
RPKI Notify - URI:https://oto.wakuwaku.ne.jp/pki/oshirase.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.19.0/24
185.155.75.0/24
IPv6:
2001:7f8:2::/48
2a13:c000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51818
Signature Algorithm: sha256WithRSAEncryption
2a:49:4b:58:0d:aa:40:1a:4d:41:bc:fa:b8:1e:5c:5b:4a:f8:
bb:d8:05:15:61:0e:aa:b8:2e:51:af:34:a5:0d:62:3b:19:51:
c6:60:34:f2:94:8b:af:7c:7a:90:5d:11:80:f6:12:28:4c:14:
62:de:10:60:28:07:f5:2a:4e:a8:b0:ba:65:29:54:86:fc:15:
30:20:d5:3b:b7:ec:c8:dc:bc:cc:09:d2:71:72:31:2f:b6:26:
c9:d6:ad:d8:dd:47:4d:97:28:74:a3:75:fa:b7:6c:bc:b0:1e:
17:8b:24:38:a0:96:6f:db:32:c9:35:0f:8b:e1:ee:94:8a:9a:
cd:c4:9a:75:ca:b6:6d:42:f4:57:7d:cd:5a:12:05:66:90:b9:
56:42:73:a4:ca:a2:37:16:7e:67:e2:e7:38:ca:96:44:ee:a6:
96:4f:f4:c3:32:2e:d8:d4:37:31:e2:8d:fb:50:72:ba:d8:3d:
c8:11:b0:ff:93:a4:53:98:d0:31:be:75:95:a7:c7:26:3d:94:
32:e8:25:db:5b:8a:8b:0e:d0:33:a7:c6:1d:52:93:69:80:c7:
d4:b6:e1:5a:60:38:ac:01:bc:e2:6c:22:e4:d2:72:1a:e2:1e:
76:b8:28:d3:32:ad:80:43:a1:2c:6c:c6:d5:93:fe:a5:1b:ed:
37:9e:f5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:48 2025 by rpki-client