Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
File: ThXfaIw66uP2he1Es5bCGYOVhh0.cer (raw, json)
Hash identifier: L0l7C9znvzrdeiuD3aYoj1KLFoJCituRFPqmDE154CY=
Subject key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B826391B870B02AE5C400E422B1802
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16340
AS: 20781
AS: 20961
AS: 21021
AS: 30824
AS: 39349
AS: 39439
AS: 44643
AS: 50312
IP: 31.6.128.0/17
IP: 31.42.16.0/20
IP: 37.131.128.0/19
IP: 37.190.128.0/17
IP: 46.186.0.0/17
IP: 46.231.56.0/21
IP: 62.61.32.0/19
IP: 62.141.192.0/18
IP: 80.244.128.0/19
IP: 80.245.176.0/20
IP: 81.190.0.0/16
IP: 82.115.64.0/19
IP: 83.68.64.0/19
IP: 84.38.80.0/20
IP: 85.117.0.0/19
IP: 87.116.192.0/18
IP: 89.17.224.0/19
IP: 89.228.0.0/14
IP: 92.42.112.0/21
IP: 93.94.184.0/21
IP: 94.78.128.0/18
IP: 94.251.128.0/17
IP: 95.129.224.0/21
IP: 95.174.32.0/19
IP: 176.107.112.0/21
IP: 176.221.96.0/19
IP: 185.31.184.0/22
IP: 193.43.240.0/22
IP: 193.106.76.0/22
IP: 193.200.118.0/23
IP: 194.116.132.0/23
IP: 194.149.240.0/24
IP: 195.93.134.0/23
IP: 195.93.222.0/23
IP: 213.136.224.0/19
IP: 217.70.48.0/20
IP: 217.75.48.0/20
IP: 217.144.192.0/19
IP: 217.172.224.0/19
IP: 2a00:1c00::/32
IP: 2a00:bde0::/32
IP: 2a02:2a40::/32
IP: 2a03:e800::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:26:39:1b:87:0b:02:ae:5c:40:0e:42:2b:18:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f0:21:ee:88:04:aa:a2:1f:a2:35:c9:85:88:
52:78:3a:80:5a:a7:80:e6:65:c0:62:1f:61:26:63:
2d:66:e5:19:aa:33:37:7d:e8:3d:3f:15:47:28:cf:
9c:9f:b9:79:3e:c6:40:f6:12:af:3b:15:47:03:06:
65:a6:1e:27:0b:e8:4a:05:97:e5:ce:4c:91:1f:08:
44:cc:ed:32:5b:a4:81:3b:03:b2:74:82:2c:6b:28:
2a:a5:f1:26:bd:48:ff:76:d1:ab:05:08:63:dc:c6:
41:b6:9d:69:c8:e2:ee:93:0d:d9:78:53:cc:f7:3d:
89:01:72:7b:c5:57:1b:c7:b8:f8:7a:bf:2b:1e:b9:
5b:35:de:41:62:f0:8f:cd:f5:e1:20:a4:b1:30:32:
69:6a:6e:a2:17:83:71:b1:1f:b6:6c:13:a3:03:97:
e4:72:12:3b:6e:65:82:f2:a6:59:81:95:a8:cb:e8:
5f:35:ac:09:77:20:cf:b9:a3:79:3f:6b:eb:f1:44:
39:da:35:d3:33:95:c5:d6:41:4b:18:04:a3:cc:0d:
a8:87:f4:0e:06:cc:59:57:8f:82:e3:a7:32:b1:bb:
e6:3c:d1:9f:32:40:74:22:41:66:c1:97:e5:ca:98:
a4:67:b4:d1:28:f3:3f:12:ab:7f:1f:19:f9:85:87:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.128.0/17
31.42.16.0/20
37.131.128.0/19
37.190.128.0/17
46.186.0.0/17
46.231.56.0/21
62.61.32.0/19
62.141.192.0/18
80.244.128.0/19
80.245.176.0/20
81.190.0.0/16
82.115.64.0/19
83.68.64.0/19
84.38.80.0/20
85.117.0.0/19
87.116.192.0/18
89.17.224.0/19
89.228.0.0/14
92.42.112.0/21
93.94.184.0/21
94.78.128.0/18
94.251.128.0/17
95.129.224.0/21
95.174.32.0/19
176.107.112.0/21
176.221.96.0/19
185.31.184.0/22
193.43.240.0/22
193.106.76.0/22
193.200.118.0/23
194.116.132.0/23
194.149.240.0/24
195.93.134.0/23
195.93.222.0/23
213.136.224.0/19
217.70.48.0/20
217.75.48.0/20
217.144.192.0/19
217.172.224.0/19
IPv6:
2a00:1c00::/32
2a00:bde0::/32
2a02:2a40::/32
2a03:e800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16340
20781
20961
21021
30824
39349
39439
44643
50312
Signature Algorithm: sha256WithRSAEncryption
05:d4:a6:e3:9d:ba:93:0e:ad:3a:41:e4:fc:8e:a9:16:ef:17:
28:48:14:11:bd:54:b3:66:79:f9:69:1c:70:cc:0a:17:3d:77:
98:ee:5a:68:0b:51:e6:64:ed:dd:d8:6c:2b:96:09:34:8a:ae:
9e:0e:ca:e9:32:62:13:3b:62:17:f7:1d:6c:1a:76:d9:87:7d:
0b:0e:91:41:78:d5:db:59:1e:d7:e8:e1:03:75:a1:6b:7a:b7:
89:01:3d:97:87:b6:ac:10:6b:9d:4c:3c:66:e8:63:da:55:4f:
ec:a6:5e:09:07:2e:53:dd:a9:a1:96:44:c2:68:cf:54:87:64:
c5:e4:8c:f4:2f:07:4d:95:fd:e1:f7:3b:a9:5b:d5:cf:29:98:
ae:51:4d:15:a8:64:d7:f2:3d:d3:6d:bf:8a:bd:82:2f:53:45:
98:32:e8:bd:4c:01:7e:7b:f2:bd:dc:5b:61:eb:84:d8:9c:ff:
96:01:f8:e2:f4:4b:b7:24:3d:f8:80:af:d1:ea:d9:d1:36:a3:
f5:39:93:b1:a3:e7:2c:cc:c0:28:40:08:d8:46:b3:f4:55:36:
ea:48:29:74:77:34:22:6e:15:7f:f6:9c:99:ce:10:3c:16:6c:
29:57:ad:73:9c:7c:11:8e:99:ad:72:7b:cb:57:7b:3b:e6:e8:
21:e3:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:01:44 2024 by rpki-client on console-ams.rpki-client.org