Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
File: aIt13GcpXVhht31RoCEYtg3FWGg.cer (raw, json)
Hash identifier: ivtc/v+TFCBzwPiJfb3WKHhM0/ZJdq3yViqMfs12B+Y=
Subject key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC206AD630E9C33EEBAB1A3A966F35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:46 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210638
IP: 62.233.58.0/24
IP: 2a03:6a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:20:6a:d6:30:e9:c3:3e:eb:ab:1a:3a:96:6f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=688b75dc67295d5861b77d51a02118b60dc55868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:6e:89:cd:b0:3d:07:db:9b:e1:34:03:85:
9f:02:c8:7a:ab:4c:95:dc:ba:11:79:2c:37:fc:54:
58:6c:0d:db:8b:d0:9a:96:5e:46:09:68:dd:81:45:
dc:0d:94:18:c9:a5:78:8f:ff:d1:a1:f7:82:3c:9f:
b8:ce:4b:ff:44:13:6b:7e:b2:cc:17:bd:0c:2d:0f:
61:1e:1a:76:ca:9e:e0:2c:85:3c:f0:e7:ce:75:19:
9a:f0:e5:fb:c4:c0:61:d5:13:c3:a7:dd:00:af:a1:
a2:dc:c9:a9:be:e6:39:9a:38:52:35:6f:63:f9:0b:
b8:c8:d9:c7:61:0a:8b:8b:81:ca:b4:d1:8e:23:6c:
f2:7a:4d:71:d8:e9:b7:3f:02:04:22:b1:16:9b:2c:
eb:5e:9b:34:d6:32:85:e6:63:37:26:6a:52:a3:51:
df:87:e1:56:ae:65:21:4e:d8:3a:26:40:b5:ba:ec:
2f:10:e8:ba:c1:3b:26:d1:fd:4a:45:96:90:a9:1c:
87:02:cd:23:94:bf:83:1e:0e:97:d8:e1:9e:76:93:
68:56:a8:7e:a7:9a:c6:81:c6:9c:f2:45:cd:6c:30:
0f:42:55:50:46:d2:c3:7b:bd:a1:c6:8c:2a:9d:5c:
0e:b8:89:17:3c:3e:e1:6c:0e:9e:a1:c9:e5:d2:d6:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.58.0/24
IPv6:
2a03:6a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210638
Signature Algorithm: sha256WithRSAEncryption
1d:77:59:4c:cc:45:dd:13:5f:08:a3:f7:85:ba:36:a7:db:40:
c6:4a:da:87:1e:00:e8:82:36:b5:64:77:89:9b:a3:af:49:14:
f7:f9:43:36:63:24:6a:d5:8b:f6:78:6c:70:11:cf:19:ca:f1:
a3:f5:7d:ef:db:d3:e3:f1:8d:dd:d5:ba:fb:16:0b:7b:4a:6b:
0f:48:f9:56:92:02:5d:e0:08:2f:aa:38:01:4f:81:5d:b6:c9:
ef:2a:d3:42:28:65:c4:a5:e8:d3:b4:3e:96:e0:5a:1a:f4:e8:
a4:8a:a3:4c:6f:7f:ec:29:ec:e9:e0:96:ef:3b:50:5b:85:71:
ca:69:f7:d1:f3:59:8e:b3:e3:74:48:1a:f8:7c:a0:cc:3e:d2:
c4:26:35:f3:96:a2:83:47:2a:8d:f1:7b:5a:92:c6:95:f7:3a:
68:c4:31:3d:56:b9:85:f6:32:de:cc:bb:71:ee:25:33:56:a6:
8f:f1:d4:c3:0d:dc:16:e0:bb:76:c0:64:68:18:14:d1:bc:1a:
60:79:73:3f:9b:8e:e3:e5:09:ad:0b:e0:a9:aa:2c:46:71:a5:
d7:58:82:f4:d4:b7:96:fe:4c:a4:27:3e:23:ca:47:1b:47:30:
27:04:46:8c:0a:03:61:e1:98:a2:e6:73:26:ef:6f:55:dc:73:
7e:de:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:52:07 2024 by rpki-client on console-ams.rpki-client.org