Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer (raw, json)
Hash identifier: QRfKw5BoparCRWI5+AqZXMG8vFwqL/SlQATPFJqADWg=
Subject key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DED83A5ADF38D2E6E7A95E14B310B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 35815
AS: 39406
AS: 56947
AS: 207103
AS: 209307
AS: 209746
AS: 209788
IP: 31.25.24.0/21
IP: 45.9.212.0/22
IP: 79.172.16.0/21
IP: 91.212.68.0/24
IP: 91.229.108.0/22
IP: 95.183.40.0/21
IP: 109.198.96.0/19
IP: 185.5.140.0/22
IP: 185.7.116.0/22
IP: 188.68.80.0/20
IP: 192.54.76.0/23
IP: 192.54.186.0/23
IP: 2a01:85e0::/32
IP: 2a02:7fc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d8:3a:5a:df:38:d2:e6:e7:a9:5e:14:b3:10:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:38:eb:7f:b1:08:78:04:19:79:a9:88:81:
5c:88:4d:9b:44:0e:3a:06:51:a8:49:6c:fe:46:ad:
47:36:c8:72:da:8b:33:88:f0:32:3b:36:2d:11:92:
c9:75:43:a5:d3:51:c1:ba:bb:bd:05:58:12:4c:86:
22:2c:d6:e0:78:f6:07:0d:da:58:dc:a7:8c:94:25:
57:24:a0:19:88:7b:28:07:33:cf:ef:ab:0c:06:e2:
20:1d:c0:c5:6c:6e:34:88:3c:46:e2:9e:d1:3b:56:
40:86:82:f3:69:94:5d:a9:41:8f:a5:e5:9c:9b:ea:
09:d2:07:92:44:35:3d:c8:73:d8:c1:96:f3:50:03:
9f:60:d0:d3:f5:04:b8:21:63:ed:84:fa:e3:bd:74:
67:2d:83:20:de:8f:ea:75:9b:15:7a:38:e0:82:15:
2c:b4:79:41:ca:ef:b6:65:e7:72:60:c2:e1:45:a9:
04:1d:3f:b0:05:aa:b4:9d:6c:f1:ef:08:7b:89:10:
ec:b7:06:ad:d4:84:a3:bd:27:d4:d2:99:6b:b5:25:
76:14:88:b0:7b:16:eb:cd:8d:d8:a7:df:cc:14:ff:
ef:33:f2:15:71:71:bf:30:1b:9e:02:d3:4b:e7:bd:
7b:38:98:ab:1d:5d:b2:4a:ad:7b:f4:24:26:1a:ec:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.24.0/21
45.9.212.0/22
79.172.16.0/21
91.212.68.0/24
91.229.108.0/22
95.183.40.0/21
109.198.96.0/19
185.5.140.0/22
185.7.116.0/22
188.68.80.0/20
192.54.76.0/23
192.54.186.0/23
IPv6:
2a01:85e0::/32
2a02:7fc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35815
39406
56947
207103
209307
209746
209788
Signature Algorithm: sha256WithRSAEncryption
4e:60:e4:fb:58:f2:2a:1f:86:ee:08:17:50:01:66:7a:ea:df:
b6:aa:6d:b8:24:ee:4d:18:64:e8:21:44:9c:ad:cf:f0:5d:b7:
dc:5b:6c:ce:e0:31:35:66:ff:75:88:05:5a:b8:e2:92:e6:d4:
3e:99:ea:fb:fb:0b:ae:ed:08:d6:f3:7a:45:f8:0c:e7:66:bd:
b6:4d:5a:96:20:43:22:e5:b5:4d:d8:24:d0:04:ca:40:63:02:
52:09:4e:cd:18:37:b8:60:4a:66:4c:57:d4:f9:d6:18:4a:1d:
bf:cf:b2:ea:d8:bb:16:bb:ca:44:c6:1a:8e:4d:d9:d3:44:38:
f6:84:bd:ca:22:06:ed:73:74:2b:2c:3e:73:28:c0:0d:30:06:
ab:96:65:aa:bb:64:30:52:26:35:d4:f6:da:5d:9e:3f:93:a0:
1c:b7:ce:04:f6:88:e8:c0:74:87:04:68:44:9f:91:ba:ef:0c:
af:47:50:95:7c:5f:dc:78:f6:52:3a:47:a2:51:db:92:76:e0:
be:13:b6:f3:95:55:06:fb:fd:b1:5c:82:29:bf:48:df:68:9c:
29:ec:c9:61:ad:ee:2d:24:1e:f2:06:bb:b8:f8:63:64:ce:f8:
14:53:d0:6b:86:9d:24:f9:fa:8d:bf:b0:85:fb:3b:76:7e:f7:
4b:14:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:31:28 2024 by rpki-client on console-fra.rpki-client.org