Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
File: Ua-8FGJFXphp1IslexjiO-d6psM.cer (raw, json)
Hash identifier: 7SAq5miZx/ZO/2BO09JB2PL+RQ91hKoVU0WEXeTmw2U=
Subject key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E9F1DA5E232FD6E569653021333C47815
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Apr 2024 14:01:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213241
IP: 87.238.226.0/24
IP: 89.42.52.0/23
IP: 89.47.38.0/23
IP: 94.139.34.0/23
IP: 94.139.38.0/24
IP: 185.39.9.0/24
IP: 185.185.230.0/24
IP: 2a13:1fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:1d:a5:e2:32:fd:6e:56:96:53:02:13:33:c4:78:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 2 14:01:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:37:6c:2b:79:27:db:19:85:5b:ab:bf:98:
c3:e2:d1:0f:3f:80:f9:06:69:4c:b6:82:86:e2:ff:
ca:aa:7d:84:81:3a:77:59:b5:89:c2:c6:6b:03:50:
d7:39:23:94:b8:7c:47:87:6d:12:ab:2b:2b:fa:5f:
85:9e:d0:59:0c:0f:b3:8b:60:22:dc:0b:39:60:09:
8a:dd:1f:cf:ed:9c:db:c4:04:1f:c3:fb:c8:ff:18:
65:86:47:f5:ee:07:0e:48:c6:63:00:e9:ce:0e:c6:
12:3d:76:6b:3e:62:c8:9d:4a:b8:c9:c6:f0:ec:ee:
85:a4:ec:dc:0d:d1:c5:b1:c0:85:9b:8c:a9:45:41:
33:f7:fe:e6:b7:22:7b:9a:74:b2:66:bc:89:15:ab:
c7:e5:9b:8f:0b:d5:ff:27:08:8e:86:b4:79:95:6c:
dc:52:be:db:7b:3c:63:bc:37:ce:57:ed:3b:70:5b:
cc:b5:8a:6f:69:30:3c:bc:50:bf:a4:d4:0e:16:80:
6d:2c:13:70:1c:5f:37:60:13:27:a8:f3:1a:29:93:
5e:ca:bf:4b:dd:15:84:93:0a:3d:68:69:76:48:7a:
51:62:90:0e:0e:24:59:11:3f:bd:f1:f4:03:0b:57:
0e:7c:99:8b:bd:72:75:a4:1c:7b:3d:18:80:cd:48:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.226.0/24
89.42.52.0/23
89.47.38.0/23
94.139.34.0/23
94.139.38.0/24
185.39.9.0/24
185.185.230.0/24
IPv6:
2a13:1fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213241
Signature Algorithm: sha256WithRSAEncryption
5c:1f:4d:a4:6e:00:71:c5:4a:38:c1:c9:f4:38:42:d4:ad:ee:
ef:9a:15:c8:7a:ef:7d:99:56:df:0a:2c:24:67:08:9d:73:d8:
ef:62:4c:32:01:50:71:3d:53:9d:99:b6:60:89:bd:d2:d1:85:
fe:17:d1:21:a2:cf:c2:8f:6d:ef:7b:db:3c:df:6d:80:2f:38:
7d:10:0f:72:47:c6:65:a0:cb:62:0e:3f:9f:86:fc:71:d2:c6:
a0:b1:a9:5c:a9:bf:fb:0a:06:db:49:65:58:b4:f2:11:1c:de:
f1:3f:25:33:6d:30:55:20:5c:e0:4f:e2:57:85:06:7b:6b:dd:
42:eb:2d:0d:9d:3c:e8:92:bb:25:b5:0c:dc:be:d7:c8:d2:fe:
e4:ff:74:c4:1d:ea:c0:49:f5:ab:7a:60:8d:03:db:24:81:d9:
4d:53:4d:34:d6:ad:62:a1:68:d1:83:71:67:dd:37:ca:3a:80:
76:e4:b2:da:f1:3d:ca:a4:56:58:48:52:6a:4c:23:40:ef:65:
a7:8e:55:5e:7c:58:0b:4f:6b:1d:cf:b2:8c:71:f9:98:8c:6d:
c7:d3:c6:a6:2d:04:71:d5:c5:a1:57:aa:a8:e5:ea:f5:cb:93:
71:4b:26:96:6c:31:d9:5e:bc:fc:5a:b4:cb:d1:73:28:60:68:
02:25:b7:f9
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgISAY6fHaXiMv1uVpZTAhMzxHgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDAyMTQwMTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWFmYmMxNDYyNDU1ZTk4NjlkNDhiMjU3YjE4ZTIzYmU3N2FhNmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F43bCt5J9sZhVurv5jD4tEPP4D5
BmlMtoKG4v/Kqn2EgTp3WbWJwsZrA1DXOSOUuHxHh20Sqysr+l+FntBZDA+zi2Ai
3As5YAmK3R/P7ZzbxAQfw/vI/xhlhkf17gcOSMZjAOnODsYSPXZrPmLInUq4ycbw
7O6FpOzcDdHFscCFm4ypRUEz9/7mtyJ7mnSyZryJFavH5ZuPC9X/JwiOhrR5lWzc
Ur7bezxjvDfOV+07cFvMtYpvaTA8vFC/pNQOFoBtLBNwHF83YBMnqPMaKZNeyr9L
3RWEkwo9aGl2SHpRYpAODiRZET+98fQDC1cOfJmLvXJ1pBx7PRiAzUgrQwIDAQAB
o4IC0zCCAs8wHQYDVR0OBBYEFFGvvBRiRV6YadSLJXsY4jvneqbDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzcwNTk5
ZC1jNDc0LTQxMjMtYTc0My1hMjAxZGZhYmRhYjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvNzA1OTlk
LWM0NzQtNDEyMy1hNzQzLWEyMDFkZmFiZGFiMS8xL1VhLThGR0pGWHBocDFJc2xl
eGppTy1kNnBzTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF
BwEHAQH/BEMwQTAwBAIAATAqAwQAV+7iAwQBWSo0AwQBWS8mAwQBXosiAwQAXosm
AwQAuScJAwQAubnmMA0EAgACMAcDBQMqEx/AMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwNA+TANBgkqhkiG9w0BAQsFAAOCAQEAXB9NpG4AccVKOMHJ9DhC1K3u75oV
yHrvfZlW3wosJGcInXPY72JMMgFQcT1TnZm2YIm90tGF/hfRIaLPwo9t73vbPN9t
gC84fRAPckfGZaDLYg4/n4b8cdLGoLGpXKm/+woG20llWLTyERze8T8lM20wVSBc
4E/iV4UGe2vdQustDZ086JK7JbUM3L7XyNL+5P90xB3qwEn1q3pgjQPbJIHZTVNN
NNatYqFo0YNxZ903yjqAduSy2vE9yqRWWEhSakwjQO9lp45VXnxYC09rHc+yjHH5
mIxtx9PGpi0EcdXFoVeqqOXq9cuTcUsmlmwx2V68/Fq0y9FzKGBoAiW3+Q==
-----END CERTIFICATE-----
Generated at Fri May 3 10:17:45 2024 by rpki-client on console-fra.rpki-client.org