Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
File: bO-kEfCTakZthB7CkM2AzFUKf24.cer (raw, json)
Hash identifier: Ls01FPze61GDebCmX6ZM74AWGGGavaCP3zDYXDi5idU=
Subject key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6945BD7011C285DD41CBF21B3AC69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210626
IP: 91.242.247.0/24
IP: 2a11:af40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:94:5b:d7:01:1c:28:5d:d4:1c:bf:21:b3:ac:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:a0:9f:85:b0:7a:ae:7f:c5:3b:71:df:ac:
f8:94:26:7b:68:a6:ab:69:90:d3:13:52:93:25:4c:
47:3c:39:e9:08:f8:33:b7:66:62:76:75:85:51:08:
c9:12:14:6a:af:34:d2:4d:ce:b8:f3:b8:57:a8:61:
5b:6a:81:45:be:9c:f6:14:46:05:f1:db:67:ff:fc:
37:5c:fd:d0:0d:ee:a6:ea:b3:89:5a:9a:16:08:46:
f2:4c:54:d6:3b:9c:04:89:99:04:65:4a:0f:27:7a:
8b:a7:8c:4c:f5:a8:de:71:e4:a2:07:09:2e:f7:43:
a4:f2:49:50:1e:3e:d5:06:90:de:46:b9:81:4a:4a:
f9:5a:ee:b2:d3:ed:91:25:e4:47:40:be:9a:b2:65:
4d:c9:2d:76:76:a8:b4:c6:92:5b:02:e1:ac:cf:7c:
1f:c4:3a:b4:87:41:3b:4d:34:2c:77:2e:09:4b:2c:
5e:1d:13:e3:04:2c:04:86:3f:c4:bb:1a:da:5a:36:
27:5e:dc:2a:0b:57:c2:4f:24:ef:02:36:75:eb:62:
83:f0:2a:56:60:21:51:26:ed:0b:7f:8d:53:f6:fd:
a4:92:f2:8e:c1:45:f4:60:37:67:69:e8:f1:0f:be:
24:f7:c6:a2:88:55:cc:fd:99:bc:57:d8:99:2b:08:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.247.0/24
IPv6:
2a11:af40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210626
Signature Algorithm: sha256WithRSAEncryption
6c:3e:09:79:a2:03:9e:de:88:19:0c:59:21:03:55:dd:a7:bf:
2f:20:4f:5e:81:94:73:d0:35:a5:d5:e0:85:4f:f1:8d:35:ca:
0d:19:c6:be:86:38:e4:3d:b0:f9:67:62:f8:48:68:4b:a7:09:
32:48:ad:09:8c:05:74:42:28:95:fe:01:ae:69:26:81:e6:3d:
24:63:8d:73:4c:2e:7b:53:de:2e:4c:aa:0f:26:ea:f5:bd:dd:
20:1d:b4:b8:0f:34:ab:e1:93:68:05:76:4b:e6:7b:02:20:17:
90:e6:06:b0:7c:c4:21:62:9a:98:0f:72:87:9c:06:1b:2d:b0:
56:23:8f:c4:35:81:d0:45:08:e9:8b:3e:7e:3d:b6:f0:25:05:
35:43:14:ea:20:1b:44:c9:b8:28:c8:35:32:21:13:df:b2:e9:
24:d0:77:2e:ce:a5:34:37:93:2c:9e:0b:96:fa:84:31:7b:47:
51:e4:dc:31:f1:ff:e1:42:6f:2f:ba:f9:0f:b0:5c:c3:f7:55:
84:61:ac:8f:64:9d:06:d5:05:20:aa:64:68:8a:08:45:3b:0f:
e2:50:0d:b8:60:1c:5f:7b:40:5c:2c:20:29:3e:9c:d1:6b:63:
15:7f:c6:81:4a:4e:61:ed:22:bd:df:4b:61:79:16:99:9f:98:
63:1e:b8:d0
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzDtpRb1wEcKF3UHL8hs6xpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDYyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2VmYTQxMWYwOTM2YTQ2NmQ4NDFlYzI5MGNkODBjYzU1MGE3ZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpmgn4Wweq5/xTtx36z4lCZ7aKar
aZDTE1KTJUxHPDnpCPgzt2ZidnWFUQjJEhRqrzTSTc6487hXqGFbaoFFvpz2FEYF
8dtn//w3XP3QDe6m6rOJWpoWCEbyTFTWO5wEiZkEZUoPJ3qLp4xM9ajeceSiBwku
90Ok8klQHj7VBpDeRrmBSkr5Wu6y0+2RJeRHQL6asmVNyS12dqi0xpJbAuGsz3wf
xDq0h0E7TTQsdy4JSyxeHRPjBCwEhj/EuxraWjYnXtwqC1fCTyTvAjZ162KD8CpW
YCFRJu0Lf41T9v2kkvKOwUX0YDdnaejxD74k98aiiFXM/Zm8V9iZKwiH2QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFGzvpBHwk2pGbYQewpDNgMxVCn9uMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzUzYjEz
ZS1kZWJiLTQ1NmEtOGRjMS1lODExZDk0MDdlN2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNTNiMTNl
LWRlYmItNDU2YS04ZGMxLWU4MTFkOTQwN2U3YS8xL2JPLWtFZkNUYWtadGhCN0Nr
TTJBekZVS2YyNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW/L3MA0EAgACMAcDBQMqEa9AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM2wjANBgkqhkiG9w0BAQsFAAOCAQEAbD4JeaIDnt6I
GQxZIQNV3ae/LyBPXoGUc9A1pdXghU/xjTXKDRnGvoY45D2w+Wdi+EhoS6cJMkit
CYwFdEIolf4BrmkmgeY9JGONc0wue1PeLkyqDybq9b3dIB20uA80q+GTaAV2S+Z7
AiAXkOYGsHzEIWKamA9yh5wGGy2wViOPxDWB0EUI6Ys+fj228CUFNUMU6iAbRMm4
KMg1MiET37LpJNB3Ls6lNDeTLJ4LlvqEMXtHUeTcMfH/4UJvL7r5D7Bcw/dVhGGs
j2SdBtUFIKpkaIoIRTsP4lANuGAcX3tAXCwgKT6c0WtjFX/GgUpOYe0ivd9LYXkW
mZ+YYx640A==
-----END CERTIFICATE-----
Generated at Fri May 3 13:32:49 2024 by rpki-client on console-fra.rpki-client.org