Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
File: bEU8CR9sDKSwKxxMoXu2XR3haJU.cer (raw, json)
Hash identifier: VdnbkjopAbO8pFkLwqrT+GJElsHoqzaih2ObFVaXrdQ=
Subject key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500BF51DB820377F7FE97AF68BBFD8F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50925
IP: 185.188.236.0/22
IP: 2a0b:f680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:bf:51:db:82:03:77:f7:fe:97:af:68:bb:fd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:b0:dd:57:5e:df:2a:a2:8e:4c:7a:e0:22:
d7:65:81:c2:80:b1:eb:c3:bc:8f:07:e7:92:29:ac:
9b:fe:84:ef:01:d4:d1:70:07:55:a1:34:50:bb:33:
80:3e:bf:43:21:d1:e8:eb:bf:91:b7:2d:c4:dc:c4:
87:4e:da:08:39:6f:5f:b2:86:c0:ab:7f:41:15:9c:
df:39:a0:17:85:47:04:cb:a6:aa:51:96:5a:82:78:
f2:03:0c:0a:f1:d8:91:3e:93:57:23:c8:9d:3a:ca:
53:8e:7f:0a:d5:56:5e:1c:f3:d9:68:5f:1b:38:44:
78:bd:aa:9e:ba:86:af:f9:d2:a5:aa:04:5a:04:f2:
f4:f2:9b:6f:77:d7:d0:04:1b:c9:34:33:52:75:45:
ac:df:ae:89:dd:32:a0:41:82:a1:f1:a7:e0:be:3d:
d5:b4:da:e9:4b:3e:9f:7a:42:01:47:2e:b9:83:c9:
4a:28:9f:11:a0:cf:41:0f:f6:9b:66:b1:b9:42:b5:
3d:89:94:e5:be:70:a3:87:4a:af:09:6c:11:04:8e:
ba:20:e2:50:21:4b:eb:42:8d:fc:c0:8a:92:73:29:
a6:90:fd:5b:1e:c0:89:0f:01:be:47:0d:3d:65:d7:
60:02:2d:5d:11:8a:73:7b:ac:06:ea:8d:10:a0:30:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.236.0/22
IPv6:
2a0b:f680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50925
Signature Algorithm: sha256WithRSAEncryption
3c:1e:b2:1c:c1:63:a5:55:59:f8:84:df:3a:02:9c:44:46:e9:
f4:bf:50:15:86:3c:18:44:97:49:c9:87:8c:c7:05:0f:d6:34:
30:98:48:66:be:40:2c:3b:8e:b1:2a:1d:6f:be:23:72:07:40:
3b:89:d2:7d:6e:af:53:68:93:a4:df:1a:84:1d:f5:29:5b:4c:
68:3c:02:e4:d6:48:c8:fe:ab:17:56:6b:63:21:cb:b3:b3:b3:
7b:26:b7:85:30:c9:72:ce:98:04:b8:c9:fa:11:e8:ea:25:90:
f6:1a:9a:73:fd:f8:ae:6e:6b:e3:2e:dd:a6:44:6a:29:de:95:
04:6f:84:83:04:ae:3f:4f:d6:f5:c1:56:aa:53:8c:01:71:e0:
6b:12:00:d0:82:18:c5:10:8a:46:57:4c:d3:56:3b:15:26:c0:
ae:8e:e4:a6:56:29:1c:ba:07:ef:f4:aa:e6:4a:3b:51:07:d7:
d3:cf:2b:2b:81:e8:de:da:60:23:d9:15:68:58:0b:f2:4d:b1:
c5:43:c7:4b:c0:5e:fc:c8:67:cf:ca:ae:2e:da:e9:2f:46:ee:
7c:b1:8a:66:11:6c:d3:27:ea:93:3a:e5:6d:b9:54:73:7d:71:
0b:f5:65:95:02:ba:88:0f:e1:00:43:ea:fc:90:8e:93:ee:da:
99:e4:d7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:43:08 2024 by rpki-client on console-ams.rpki-client.org