Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
File: aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer (raw, json)
Hash identifier: NqqEKYpvUCyAaZTtRnFV+yUHLSMSPlu/3K0IYgJbuoY=
Subject key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D59BCC2F9AD8D30BAA7419E043D6EB367
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jan 2024 09:39:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208988
IP: 31.214.150.0/23
IP: 37.10.68.0/23
IP: 37.10.110.0/23
IP: 62.221.228.0/22
IP: 85.190.184.0/21
IP: 85.222.208.0/20
IP: 91.208.17.0/24
IP: 94.126.36.0/22
IP: 109.169.120.0/21
IP: 128.0.120.0/23
IP: 185.44.4.0/22
IP: 185.50.108.0/22
IP: 185.68.240.0/22
IP: 185.123.4.0/22
IP: 185.125.232.0/22
IP: 185.195.120.0/22
IP: 2a01:71a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:bc:c2:f9:ad:8d:30:ba:a7:41:9e:04:3d:6e:b3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 09:39:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:01:57:0e:7b:38:a0:b2:91:8a:12:6f:99:
87:d5:76:07:67:c9:a7:9e:83:0a:2b:64:49:00:3a:
d6:8d:f6:32:af:77:22:02:9a:d2:25:5c:d5:09:4b:
84:e9:1a:28:32:ab:24:29:75:ab:be:2c:1c:35:73:
c3:9e:8f:af:6e:09:25:26:ed:79:da:da:62:47:8f:
05:c1:32:db:88:f3:1c:00:61:7e:60:70:69:15:4f:
d3:b4:f9:25:68:7b:99:34:12:1e:3f:9d:07:c5:3d:
48:22:b0:b3:5b:85:0f:5c:62:4b:f8:b9:10:ea:cc:
f6:2a:16:1b:a0:53:b5:09:5d:ad:a7:be:b7:08:5a:
81:18:c1:6f:6f:64:ba:4b:3c:c0:e1:53:13:d6:b3:
53:16:3c:f9:d8:3d:e0:fa:1d:12:f5:39:cd:03:84:
7e:60:c0:a5:7f:3c:81:55:2c:10:a6:f1:04:e1:b5:
fb:17:3d:2d:4a:7d:bb:35:ab:f8:e8:9c:de:cf:40:
74:ee:02:83:9d:90:08:22:f8:ea:95:20:59:e5:1e:
72:39:fd:4e:8b:e8:30:56:1d:b6:3a:48:a5:07:38:
04:bc:58:15:29:20:62:61:51:4d:2a:b9:d1:6a:28:
d0:4c:c7:07:86:91:f7:27:db:4d:80:f8:5f:86:1b:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.150.0/23
37.10.68.0/23
37.10.110.0/23
62.221.228.0/22
85.190.184.0/21
85.222.208.0/20
91.208.17.0/24
94.126.36.0/22
109.169.120.0/21
128.0.120.0/23
185.44.4.0/22
185.50.108.0/22
185.68.240.0/22
185.123.4.0/22
185.125.232.0/22
185.195.120.0/22
IPv6:
2a01:71a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208988
Signature Algorithm: sha256WithRSAEncryption
64:ff:73:86:48:d9:32:5b:34:e0:91:53:e9:4d:31:c1:c1:7e:
80:b6:02:6e:e6:4d:da:5e:57:d9:6b:13:67:2e:42:c8:43:59:
15:49:61:46:2d:0f:45:27:0b:23:e2:70:0e:2b:3b:12:35:91:
b7:20:c0:c7:d3:32:7c:a8:2f:62:f6:fb:72:8d:97:88:f9:6e:
db:5b:be:11:93:ef:26:a2:0e:02:5d:5a:92:16:cd:41:0f:81:
90:b8:63:7b:b0:6d:1a:41:0b:7e:bf:98:de:a8:b9:72:3f:a1:
3c:83:9f:52:8a:05:45:72:13:25:6f:cc:07:a3:dd:1f:e1:3f:
92:4d:0a:b2:be:42:16:c5:0c:ed:76:19:43:a0:82:ef:0f:86:
dc:e2:6d:62:26:62:cd:e5:ab:56:04:de:9b:76:b5:a9:2c:6c:
e2:ec:b8:d1:06:b9:29:2e:bd:27:9c:63:79:3e:b5:85:1c:79:
ee:cd:1b:23:b7:57:df:7c:7c:80:7e:f1:17:cb:21:ca:b1:79:
4f:0a:c5:b7:91:42:09:b3:23:24:8a:3e:44:aa:20:82:a6:66:
f2:88:cd:bf:8c:16:04:83:1d:b8:36:6a:e1:b2:a4:a6:11:c3:
a5:d4:7b:f6:22:3f:77:62:47:df:f2:72:22:73:2c:1d:2a:42:
20:dc:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:07:47 2024 by rpki-client on console-ams.rpki-client.org