Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
File: UtycIYtRDAe8Zlmwn70yr-aKv9I.cer (raw, json)
Hash identifier: hTynbwY7B9nsW58teElH1Tho6dwRYDUJal4/jhnDzJA=
Subject key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190BA4B6930D9E3BD2D1F312ADC09D30A9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jul 2024 06:47:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6206
AS: 44259
AS: 62349
IP: 31.171.128.0/21
IP: 37.46.192.0/21
IP: 45.154.4.0/22
IP: 91.199.50.0/24
IP: 91.230.225.0/24
IP: 94.185.80.0/21
IP: 94.228.208.0/20
IP: 109.235.48.0/21
IP: 185.153.188.0/22
IP: 185.196.92.0/22
IP: 194.110.67.0/24
IP: 195.191.144.0/23
IP: 2a00:dd0::/32
IP: 2a07:6580::/29
IP: 2a07:8840::/29
IP: 2a0a:6b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:4b:69:30:d9:e3:bd:2d:1f:31:2a:dc:09:d3:0a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 06:47:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:9a:18:40:d3:4a:17:c3:49:bc:f3:9c:2a:
59:31:d6:0b:29:b4:3a:87:19:a1:91:ed:fb:01:36:
22:09:88:1a:0a:b6:ce:e6:a2:6f:5a:65:2b:b4:d0:
93:8c:8d:4f:1b:06:cc:96:3e:f5:50:76:52:cc:1a:
67:6d:35:8d:32:dd:48:de:51:91:5b:c3:2c:ec:43:
8b:be:5f:74:77:53:8f:0d:80:a0:2e:ae:8f:61:7d:
8a:fd:ec:91:5e:3b:86:81:4b:a8:30:4b:14:47:f8:
e6:6a:a5:04:74:7b:e9:6f:af:2e:13:af:00:d4:68:
38:3b:f7:e7:d4:1c:0f:3f:57:38:86:9a:8f:77:e2:
e7:e0:50:71:eb:7b:04:08:dc:60:7b:de:ff:f9:40:
cc:21:1a:a3:ff:21:d6:68:d7:50:06:98:0c:5d:2a:
64:ea:05:82:d4:49:64:ed:ce:e5:da:c1:44:52:a4:
53:cc:47:40:03:c4:f1:a1:3a:50:00:62:e4:23:84:
40:6e:18:05:87:af:24:f3:64:d1:c3:54:d5:b4:46:
a4:49:ef:3d:4c:00:f9:f1:1c:af:af:17:e7:b2:d7:
79:31:19:77:87:80:2c:7d:18:80:53:c1:be:90:9f:
b7:29:40:47:8a:13:50:13:75:63:97:46:ff:a4:49:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.128.0/21
37.46.192.0/21
45.154.4.0/22
91.199.50.0/24
91.230.225.0/24
94.185.80.0/21
94.228.208.0/20
109.235.48.0/21
185.153.188.0/22
185.196.92.0/22
194.110.67.0/24
195.191.144.0/23
IPv6:
2a00:dd0::/32
2a07:6580::/29
2a07:8840::/29
2a0a:6b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6206
44259
62349
Signature Algorithm: sha256WithRSAEncryption
45:ea:77:ec:9b:26:0c:e7:b5:d8:32:1e:a7:0f:97:96:64:00:
3b:ca:d8:89:61:d6:22:5f:a4:3f:db:3e:07:80:f7:ff:48:d1:
38:9f:69:ae:e4:2a:28:0b:42:04:2f:93:ab:70:7a:59:ad:70:
67:c1:64:ee:d6:6a:3d:d2:6b:1b:69:b1:12:2c:2b:77:9b:e1:
b3:8a:74:69:f0:8e:e0:67:c6:9d:4e:e6:e1:13:b2:18:7c:0c:
af:79:2d:d1:39:6d:02:aa:8e:36:c4:01:0a:1f:41:c2:10:6e:
09:4a:ca:51:db:96:a5:ba:73:47:6c:5b:5f:67:f3:42:ea:01:
e4:02:03:ab:ed:2c:78:4d:0e:34:1d:ed:e9:04:e7:98:ff:14:
4d:04:2a:4a:e0:d2:7f:f7:04:ea:47:d3:74:8e:e5:13:77:8a:
52:f4:e8:50:75:54:64:2f:e9:61:68:0c:f7:0f:d0:3f:08:35:
59:03:50:92:17:8e:cf:df:e6:fc:6d:0c:4a:c7:b6:33:59:25:
94:0e:c1:8d:cf:d7:35:b4:2d:59:00:d9:17:59:e2:ea:cc:23:
ea:48:6a:13:78:5d:5c:28:60:3a:17:ea:df:73:19:38:7b:1b:
29:13:f9:70:f3:08:02:1c:60:a1:10:5b:fb:ac:36:e9:77:3d:
f6:ae:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:09 2024 by rpki-client on console-fra.rpki-client.org