Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aIt13GcpXVhht31RoCEYtg3FWGg.cer
File: aIt13GcpXVhht31RoCEYtg3FWGg.cer (raw, json)
Hash identifier: ED4W0/g4zTfIL7fXSfUmUz5ABJMDHFyGFBkvpN2/d/w=
Subject key identifier: 68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422203DDEACFB1F56E4890F121D52F954
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210638
IP: 62.233.58.0/24
IP: 2a03:6a80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:3d:de:ac:fb:1f:56:e4:89:0f:12:1d:52:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=688b75dc67295d5861b77d51a02118b60dc55868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:6e:89:cd:b0:3d:07:db:9b:e1:34:03:85:
9f:02:c8:7a:ab:4c:95:dc:ba:11:79:2c:37:fc:54:
58:6c:0d:db:8b:d0:9a:96:5e:46:09:68:dd:81:45:
dc:0d:94:18:c9:a5:78:8f:ff:d1:a1:f7:82:3c:9f:
b8:ce:4b:ff:44:13:6b:7e:b2:cc:17:bd:0c:2d:0f:
61:1e:1a:76:ca:9e:e0:2c:85:3c:f0:e7:ce:75:19:
9a:f0:e5:fb:c4:c0:61:d5:13:c3:a7:dd:00:af:a1:
a2:dc:c9:a9:be:e6:39:9a:38:52:35:6f:63:f9:0b:
b8:c8:d9:c7:61:0a:8b:8b:81:ca:b4:d1:8e:23:6c:
f2:7a:4d:71:d8:e9:b7:3f:02:04:22:b1:16:9b:2c:
eb:5e:9b:34:d6:32:85:e6:63:37:26:6a:52:a3:51:
df:87:e1:56:ae:65:21:4e:d8:3a:26:40:b5:ba:ec:
2f:10:e8:ba:c1:3b:26:d1:fd:4a:45:96:90:a9:1c:
87:02:cd:23:94:bf:83:1e:0e:97:d8:e1:9e:76:93:
68:56:a8:7e:a7:9a:c6:81:c6:9c:f2:45:cd:6c:30:
0f:42:55:50:46:d2:c3:7b:bd:a1:c6:8c:2a:9d:5c:
0e:b8:89:17:3c:3e:e1:6c:0e:9e:a1:c9:e5:d2:d6:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8B:75:DC:67:29:5D:58:61:B7:7D:51:A0:21:18:B6:0D:C5:58:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5a4561-5092-4c28-9d5f-518ee7bde1f8/1/aIt13GcpXVhht31RoCEYtg3FWGg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.58.0/24
IPv6:
2a03:6a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210638
Signature Algorithm: sha256WithRSAEncryption
ab:3b:44:72:1e:38:5c:9f:6f:c0:1e:77:2e:d2:dc:4b:7b:8b:
b8:ad:ef:c9:3c:24:4f:bf:d6:a0:46:b5:85:b3:3f:07:8a:e0:
20:3d:32:b4:c0:c6:73:30:0d:4a:15:07:91:bb:f4:45:33:ec:
90:01:8a:56:4b:1d:21:ea:79:34:f6:bc:f5:31:d1:52:e6:1b:
fb:31:1a:81:0f:5e:20:ad:3d:d3:df:82:3d:01:f6:05:d0:63:
58:43:d0:11:f7:85:62:89:68:ed:79:c0:c3:ab:23:d0:e0:0c:
1d:a6:f2:88:a5:8e:33:0b:ac:93:48:19:3d:a2:6f:41:6b:2c:
5e:30:1f:b3:a2:bf:8e:f3:10:2e:42:21:bf:33:27:ee:48:7c:
3f:db:e0:d8:db:2a:5d:3b:24:2d:71:12:c1:52:af:bc:a5:cc:
9a:c1:17:05:ef:8d:fe:b8:be:6a:54:8c:a9:85:36:39:a8:e3:
c4:5f:2b:7c:3e:12:84:bd:e9:c1:38:b5:56:7a:67:eb:e2:fb:
1a:52:43:3b:a6:42:76:08:37:4f:fa:5f:46:53:b8:fb:ad:37:
7e:a0:39:0e:bf:22:bf:3b:9e:48:0f:04:97:65:c5:a2:e3:77:
e1:43:2a:4a:c9:04:cf:ba:de:92:8e:f2:c5:50:f8:3c:2b:c4:
1c:30:30:d8
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQiID3erPsfVuSJDxIdUvlUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODhiNzVkYzY3Mjk1ZDU4NjFiNzdkNTFhMDIxMThiNjBkYzU1ODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA549uic2wPQfbm+E0A4WfAsh6q0yV
3LoReSw3/FRYbA3bi9Call5GCWjdgUXcDZQYyaV4j//RofeCPJ+4zkv/RBNrfrLM
F70MLQ9hHhp2yp7gLIU88OfOdRma8OX7xMBh1RPDp90Ar6Gi3MmpvuY5mjhSNW9j
+Qu4yNnHYQqLi4HKtNGOI2zyek1x2Om3PwIEIrEWmyzrXps01jKF5mM3JmpSo1Hf
h+FWrmUhTtg6JkC1uuwvEOi6wTsm0f1KRZaQqRyHAs0jlL+DHg6X2OGedpNoVqh+
p5rGgcac8kXNbDAPQlVQRtLDe72hxowqnVwOuIkXPD7hbA6eocnl0tY+5QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGiLddxnKV1YYbd9UaAhGLYNxVhoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiLzVhNDU2
MS01MDkyLTRjMjgtOWQ1Zi01MThlZTdiZGUxZjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvNWE0NTYx
LTUwOTItNGMyOC05ZDVmLTUxOGVlN2JkZTFmOC8xL2FJdDEzR2NwWFZoaHQzMVJv
Q0VZdGczRldHZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAPuk6MA0EAgACMAcDBQMqA2qAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM2zjANBgkqhkiG9w0BAQsFAAOCAQEAqztEch44XJ9v
wB53LtLcS3uLuK3vyTwkT7/WoEa1hbM/B4rgID0ytMDGczANShUHkbv0RTPskAGK
VksdIep5NPa89THRUuYb+zEagQ9eIK0909+CPQH2BdBjWEPQEfeFYolo7XnAw6sj
0OAMHabyiKWOMwusk0gZPaJvQWssXjAfs6K/jvMQLkIhvzMn7kh8P9vg2NsqXTsk
LXESwVKvvKXMmsEXBe+N/ri+alSMqYU2OajjxF8rfD4ShL3pwTi1Vnpn6+L7GlJD
O6ZCdgg3T/pfRlO4+603fqA5Dr8ivzueSA8El2XFouN34UMqSskEz7reko7yxVD4
PCvEHDAw2A==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:48 2025 by rpki-client