Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
File: b027wGlmny5-iCL2OY9rNsRJNFw.cer (raw, json)
Hash identifier: h+z+ixvQgr2fgYnWPgokTuIWqF6GKQmtgN7RYoZHdWo=
Subject key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB8CE828795E9878F69744348BD971
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48390
IP: 185.20.3.0/24
IP: 2a0c:d0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8c:e8:28:79:5e:98:78:f6:97:44:34:8b:d9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:fa:2c:66:5e:6c:8c:84:00:1c:e5:12:d5:
f7:88:56:f7:9f:ce:e6:3d:43:6d:9c:3f:49:36:58:
f8:93:cf:35:ce:95:a4:83:e7:8c:16:5e:4d:f6:3a:
5c:ba:5b:05:36:50:88:0c:15:1a:0c:33:4f:ee:e5:
4c:f7:bc:aa:74:f9:85:95:ff:63:f3:d6:44:2b:5f:
48:f1:f3:7e:19:77:5a:d4:45:01:8e:3b:68:b2:31:
5e:cb:f1:37:e5:4e:a8:1e:fc:14:24:21:7c:a3:a1:
87:9e:d8:ac:5d:81:65:8d:5b:f7:c4:8d:cb:ab:31:
eb:ff:db:3c:46:9e:8c:a7:0c:8d:3e:5b:02:c4:a1:
45:f5:c6:62:57:c5:b5:d7:dd:db:a5:39:8c:67:e7:
1d:e6:a7:4a:b2:8e:94:aa:16:46:9a:b7:c2:e4:e2:
31:7f:3d:55:a6:4f:87:6f:bc:97:3c:ce:ca:7b:a1:
4a:02:a3:42:4f:46:e5:17:da:49:17:d1:60:fb:26:
bb:5b:41:d1:01:bf:33:91:18:37:a1:8c:95:9c:ba:
48:75:76:11:0e:11:01:a0:ac:ce:2e:e6:b6:2a:68:
c8:f7:57:af:7a:db:dc:2e:6d:3a:42:37:1e:a2:49:
6e:49:dd:3f:fe:5c:a0:02:1b:17:53:30:b1:3a:38:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.20.3.0/24
IPv6:
2a0c:d0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48390
Signature Algorithm: sha256WithRSAEncryption
79:c5:95:8f:2a:d2:92:81:7d:fd:c1:ae:6c:b0:60:65:c1:31:
56:17:ea:f6:55:6c:61:e5:fc:dc:b2:48:70:5d:86:6d:d3:67:
af:a7:66:bb:76:a3:81:3d:f7:d7:89:c9:30:8c:1d:2f:a7:e6:
d8:8c:c8:8e:20:c4:06:eb:1a:ba:7f:48:16:c8:6e:bb:23:f5:
3c:55:16:99:fd:c1:84:cf:6d:1e:91:69:b1:d2:44:0c:d5:18:
49:f2:ab:98:9f:41:d8:14:2b:38:e5:3c:84:08:7b:32:be:f5:
24:11:3a:11:91:a1:1b:00:73:05:22:47:8b:b8:71:f6:21:6a:
47:44:be:f2:a8:4d:ec:8a:cf:ce:7e:47:9f:3c:77:4f:99:5a:
d7:95:d2:38:bb:14:73:6d:40:cf:6c:6d:69:66:85:a0:50:d6:
a9:8f:0b:ba:d6:59:99:d9:94:95:ee:82:1e:02:91:f2:14:3a:
d5:40:f9:d1:bc:25:b9:12:0f:ed:65:84:e1:3d:20:14:7b:11:
08:e1:10:33:7b:fc:c6:b0:4b:1a:56:ca:12:7e:f2:2c:1b:76:
85:9b:81:d3:4f:3e:0e:b1:96:9d:99:e2:4d:aa:6c:28:74:5a:
d6:86:e1:ea:b2:85:0f:f8:67:1d:7d:86:32:d7:a8:af:ba:b2:
30:c6:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:59 2025 by rpki-client