Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
File: aDCZAOZItlowenhgECv3ixb1XXU.cer (raw, json)
Hash identifier: 3nvqm6+I5x8dIF6HXi9/byhHD9COcygbWpnHggTh7Dk=
Subject key identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D77C24C8F6EED4C824E1910761F51D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199315
IP: 91.218.173.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:7c:24:c8:f6:ee:d4:c8:24:e1:91:07:61:f5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68309900e648b65a307a7860102bf78b16f55d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:6c:14:68:95:20:93:fc:b3:28:52:7a:44:
04:fa:ee:f7:4c:9d:90:07:a2:79:9d:4d:cd:48:8d:
7a:64:74:8c:57:41:44:33:ed:3b:ae:6f:1f:6f:57:
e4:ff:6b:2a:28:4d:30:ef:70:27:62:42:c4:ff:be:
8e:38:d3:70:6f:26:12:7c:40:cf:26:2f:8b:e0:8c:
7b:c9:99:b5:33:39:59:54:1a:bf:73:83:fc:17:8b:
ca:d2:36:f9:53:70:ca:94:c2:9a:b6:8c:6f:68:74:
6f:52:be:0e:06:4b:25:7e:fc:b7:60:53:87:2b:19:
10:b7:83:1d:fd:3e:3b:14:59:ec:c7:14:59:86:61:
c0:92:52:cb:cc:54:b8:e4:8d:7e:26:21:ee:69:ca:
d6:3f:0c:37:a6:03:75:ce:bf:4e:57:e8:8b:56:a1:
0d:e5:cc:90:a5:fd:16:1c:fc:f9:b3:f8:31:31:38:
eb:40:59:ea:f9:f0:4a:29:ea:7c:dc:e2:f5:1d:3e:
ec:34:c3:05:38:e4:0f:0c:c0:6f:92:84:0f:d9:7c:
bb:4a:48:01:7e:cc:1f:37:3a:ec:9a:cd:72:22:d0:
6f:3c:43:2c:bc:af:c1:d4:ab:b9:08:a0:f8:9c:5d:
7d:54:f6:d6:dc:9a:46:bd:a3:ef:3e:4f:48:fd:d1:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.173.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199315
Signature Algorithm: sha256WithRSAEncryption
ad:67:14:c8:0f:da:f6:fa:cf:92:a3:c5:24:49:62:cc:38:3e:
b5:97:7c:38:61:c8:e2:00:9c:3e:a1:19:d9:4d:52:9b:c2:d1:
a6:19:79:2a:89:7c:9f:10:95:5f:96:5c:7e:fd:78:86:f5:88:
b2:17:37:25:e0:74:13:f8:6f:49:88:a1:49:a2:e8:f8:f2:95:
5a:c7:ff:6b:5d:a6:f5:c4:8e:30:ab:28:5d:55:09:f0:82:03:
dd:32:a7:a4:cf:ec:1d:f7:a9:fe:b8:2b:d8:f6:c1:27:81:3e:
9b:25:22:44:84:75:25:5b:90:6b:8a:0c:7a:c6:fc:f5:c3:48:
10:24:21:c1:aa:9e:30:d5:41:60:ac:d2:14:40:3f:f2:a4:c2:
e0:58:5e:0c:b2:c1:3c:3f:99:d4:50:ee:35:22:ff:1d:2c:85:
6c:42:b6:af:df:d4:ee:2f:8f:14:b0:69:40:87:2a:1f:d4:c7:
20:b1:2e:37:dc:8c:6b:60:cf:e3:8c:54:4f:2e:c0:74:c2:fb:
43:6c:ed:e0:6b:70:89:f4:5e:76:64:45:4a:32:c3:f2:c4:53:
9d:e7:df:26:e3:ff:de:1c:57:35:5c:39:c0:c5:71:5c:e1:9f:
ab:c2:fd:1b:e0:11:e6:ab:80:c6:94:8e:71:04:9c:1a:ef:66:
28:d1:d2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:14 2025 by rpki-client