Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
File: WOBoeiTWo-QU15jZsvtsUlkcuyM.cer (raw, json)
Hash identifier: CGjZ24aPKJjF/Mqpkum4UgMIF41jqRSPvyD2UbVTREE=
Subject key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B285807FE12D0DD8E8DA65F1675C1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208149
IP: 185.89.96.0/24
IP: 2a10:1200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:85:80:7f:e1:2d:0d:d8:e8:da:65:f1:67:5c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:92:2b:58:4d:72:3b:49:b6:31:73:49:1e:
24:47:25:f8:5b:45:a5:d1:8c:53:4a:10:18:6a:31:
14:dc:7a:9c:64:e4:a3:0f:93:bc:8b:2e:05:69:85:
ad:b7:4d:b2:69:89:c5:49:6e:01:23:96:23:4e:53:
06:e3:3d:98:f2:8e:b1:3c:6b:f4:31:b2:5c:a7:a8:
30:fa:db:a2:3c:d6:ff:e0:49:62:ab:1d:ec:21:e6:
f6:6e:2b:d9:5f:f0:41:dc:c9:cf:3a:20:2c:45:bd:
96:91:bb:58:77:ab:da:3e:bd:19:2a:28:2d:19:b3:
bd:34:3b:43:ce:ca:32:7a:6e:3b:f0:47:17:41:c7:
50:54:14:f0:40:92:4d:b8:c5:f7:72:9d:0b:12:55:
ab:33:2f:38:4a:8c:3f:d0:19:74:02:54:f9:f6:e1:
32:d0:f7:6e:f0:47:16:4c:b8:fe:dc:20:9f:41:3f:
20:a4:53:f3:ad:42:3e:4a:73:2d:da:7f:65:15:c6:
30:5c:f2:e5:46:6e:f5:e2:dd:fa:97:e1:3f:e1:3f:
90:8c:cc:ea:89:ec:6d:1f:be:d8:19:6a:3e:86:6a:
3a:bb:db:42:33:13:09:ad:bd:73:53:cd:85:a5:3d:
86:47:d4:49:16:aa:46:fe:3d:9a:50:9c:d3:94:ec:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.96.0/24
IPv6:
2a10:1200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208149
Signature Algorithm: sha256WithRSAEncryption
37:d4:39:c0:f9:2e:9d:49:33:7b:b9:2f:ce:b7:6d:6b:8d:8d:
57:30:18:74:21:61:91:75:97:71:a3:1a:f9:79:24:d0:51:8d:
19:db:92:36:0d:fc:0d:aa:ac:ef:d2:c8:a2:ea:c9:40:c7:44:
29:87:d6:b4:f8:b3:4a:e8:7e:ab:2c:02:2e:90:de:ca:39:3b:
66:3a:d2:7b:f9:c6:07:2c:2f:92:e6:45:10:69:9a:3b:09:26:
5b:b1:87:a4:01:f1:56:76:19:44:de:0a:c5:20:10:2e:03:87:
79:95:3c:d5:80:e2:56:c5:60:e6:e1:3d:35:0b:f0:ae:df:35:
0b:7e:92:5a:9d:9b:41:c7:70:79:4f:0d:b2:23:54:b8:eb:42:
95:b9:91:3d:20:0a:45:3f:43:d2:dd:9f:6e:db:58:ef:5e:18:
3a:01:56:35:67:0a:6d:e6:be:e9:4a:37:87:94:7b:2c:4a:b6:
8a:ae:ba:cf:2e:c7:3e:81:74:52:f2:39:2e:b6:ea:11:5c:44:
7d:bd:b9:b9:d1:c2:81:d1:fb:20:83:20:87:1d:76:81:55:66:
a6:b2:e0:60:cf:64:f7:28:f0:c5:9a:f8:27:61:9d:ef:e5:b1:
cc:19:6a:5d:ea:6a:a3:a9:17:12:d8:79:78:34:03:b7:f6:53:
37:f3:dd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:00:11 2025 by rpki-client