Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UAKjP17GaAWRwJf9tKug4Cj0CEU.cer
File: UAKjP17GaAWRwJf9tKug4Cj0CEU.cer (raw, json)
Hash identifier: 5Q9K9xfGHx+oY7StdGkSeWvlme7qgO71rGGpnYghmaY=
Subject key identifier: 50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC349430D1608C7D1EF963ED1F576C34B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58127
IP: 185.185.112.0/22
IP: 2a0b:5280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:43:0d:16:08:c7:d1:ef:96:3e:d1:f5:76:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5002a33f5ec6680591c097fdb4aba0e028f40845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:1f:1c:7e:2b:bf:61:d5:35:11:2b:71:48:
e8:69:f2:a1:02:ce:d2:45:b7:12:62:3f:f9:32:6a:
3d:91:cc:7b:cc:26:07:03:e9:fb:0b:7b:92:30:9e:
89:d0:a4:83:26:c0:ac:f5:98:29:8d:9c:0a:3d:3b:
54:07:21:5e:ce:b9:d9:90:b8:ee:01:21:5e:de:50:
da:bd:61:6e:9b:5e:d7:45:ef:c0:76:66:a2:d1:1e:
9b:70:55:30:b8:aa:bd:8a:76:87:2a:7a:98:a3:99:
1b:f1:b5:30:f1:94:41:8e:c8:59:91:1b:69:fc:66:
9d:25:9f:60:ed:66:0e:c7:de:7a:da:16:1f:b2:33:
43:b0:86:1f:f3:99:0e:c1:a5:df:94:55:6e:cb:50:
eb:1b:32:0f:6b:31:1d:01:e7:73:1d:62:4a:29:71:
0f:23:a1:74:7e:dd:cf:0b:39:42:cd:91:54:0a:8c:
6a:50:25:22:26:8f:9c:23:de:73:8b:4c:e4:77:af:
1a:14:24:70:be:57:dd:5c:9b:f9:0b:e8:b5:ee:eb:
e8:7d:30:4c:80:26:14:4c:81:f8:8f:5c:c1:36:a9:
6c:56:ad:81:b1:80:dc:d4:8b:62:ad:3e:47:66:ca:
e6:48:88:20:59:05:f2:86:30:32:fe:8d:e0:c6:26:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:02:A3:3F:5E:C6:68:05:91:C0:97:FD:B4:AB:A0:E0:28:F4:08:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67b1ec-208f-4d62-9cbc-ede1e4bb611e/1/UAKjP17GaAWRwJf9tKug4Cj0CEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.112.0/22
IPv6:
2a0b:5280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58127
Signature Algorithm: sha256WithRSAEncryption
92:b0:15:99:11:f4:9e:a8:97:c4:c3:af:5a:31:84:9d:9f:fe:
38:bd:5e:b0:54:1a:50:61:6c:aa:a2:6e:73:26:58:43:73:94:
34:d7:3e:48:3a:26:5a:c3:d1:f8:4f:06:67:59:68:3d:bd:18:
13:8c:f4:68:08:89:00:a7:12:a3:2d:5a:a8:d6:e2:1b:66:98:
54:7b:56:b6:7e:40:7c:69:01:4b:51:d0:e5:ce:82:0c:18:33:
93:09:85:76:3a:e5:56:f0:a0:89:cc:53:e1:fa:e6:e5:72:6c:
4b:7f:3a:d2:68:6b:39:80:bb:bc:1f:ec:69:ab:c0:34:87:5f:
24:39:c1:dd:cc:a7:a0:b4:c5:4f:99:0d:23:21:11:27:cb:05:
3f:9a:0b:16:35:b0:8e:cd:ab:d4:3a:ca:53:96:80:26:00:c8:
2b:95:3a:09:8e:ac:1b:4c:3d:70:67:b7:52:e2:d6:08:b1:24:
67:2b:23:26:04:87:4a:a2:8a:a1:be:b7:ef:e6:3b:bd:32:09:
04:d1:01:ab:f1:d0:f7:21:60:56:be:16:2d:61:a3:ca:2e:4c:
be:57:ca:24:bc:ff:b3:bf:3c:4e:87:b6:75:73:91:5f:e2:3f:
fc:af:05:79:8b:25:8e:51:0c:a4:82:2f:a2:56:fb:65:0f:f5:
8b:52:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:17:23 2024 by rpki-client on console-fra.rpki-client.org