Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
File: bosCjRgnTSGnMWrqPMzpFYtU9IE.cer (raw, json)
Hash identifier: zuVe7ERoc4fzIVKmeDa3EijVA4ryUJHUllYxqI6FK+w=
Subject key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BCB884C2371E4DF43B1997ADA6C6F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198913
AS: 211292
IP: 31.220.147.0/24
IP: 46.243.120.0/21
IP: 185.132.24.0/22
IP: 185.173.228.0/22
IP: 185.216.228.0/23
IP: 213.163.250.0/23
IP: 217.19.13.0/24
IP: 2a03:d400::/32
IP: 2a0b:6f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b8:84:c2:37:1e:4d:f4:3b:19:97:ad:a6:c6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:75:68:a6:04:c0:3b:57:86:4a:1b:18:6f:
ef:9c:c4:8a:e9:d7:82:76:86:50:f6:65:0c:07:1d:
4d:f0:48:a9:90:ab:74:9a:0f:17:51:1b:13:a2:72:
fd:3c:ce:dd:01:e2:bc:ea:77:50:02:1c:b8:6f:80:
d8:26:25:46:16:04:c1:92:bd:5b:e9:dc:e3:82:4d:
df:c7:54:5f:51:bc:27:ef:43:77:96:27:86:34:f7:
b0:f2:b3:c4:f6:bf:f6:c5:76:95:89:9a:e9:e0:62:
89:6c:ba:3c:1b:89:ef:9b:7a:a1:9b:52:e4:d8:6e:
26:24:ce:5f:e3:43:70:6c:3c:6f:7b:0c:25:18:27:
ee:da:e3:b3:4f:61:50:24:a6:95:7b:f5:cb:8a:de:
f6:3d:a8:54:3c:33:1b:65:bf:73:60:c8:96:af:17:
3e:7c:fb:fd:70:5e:34:c3:be:f5:9a:36:b5:30:ac:
b3:33:d5:40:11:b2:5d:e8:00:66:bb:05:3d:29:da:
f1:16:08:e6:4f:80:c3:a4:c3:a5:89:3e:bc:67:85:
9e:34:bf:22:bf:e6:79:f8:01:94:81:ab:10:4f:5a:
2e:d8:29:29:1c:8f:bd:cd:00:e5:00:fd:f8:85:3d:
04:b7:4f:4e:db:0e:3e:29:86:19:1d:ce:4f:e6:62:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.147.0/24
46.243.120.0/21
185.132.24.0/22
185.173.228.0/22
185.216.228.0/23
213.163.250.0/23
217.19.13.0/24
IPv6:
2a03:d400::/32
2a0b:6f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198913
211292
Signature Algorithm: sha256WithRSAEncryption
47:10:af:ad:a7:13:09:80:83:dd:d4:4e:67:ec:a1:e4:9d:ce:
11:09:9a:56:11:bd:ca:7e:af:9a:b6:17:a5:54:01:50:23:06:
f2:55:2b:6c:3e:60:3a:d0:01:84:67:99:1d:83:9f:5c:96:95:
1a:a6:ed:94:19:21:90:e9:61:e6:3d:eb:c5:f8:e2:4e:79:79:
ae:9e:99:48:d6:96:b9:be:ea:24:bb:25:d2:00:89:51:07:da:
b5:2d:72:bc:05:e6:86:c5:06:f1:e5:24:13:16:9d:77:54:d6:
5c:0e:8a:0f:33:8e:c7:4d:e2:9d:ea:3f:74:99:d2:da:da:de:
1b:b1:68:ac:92:d1:00:71:d1:76:06:f3:c7:a8:b7:ae:7b:7a:
9a:a3:f6:50:0b:c5:95:78:b5:61:64:3d:ab:a5:f9:ba:e5:e7:
53:28:f5:6f:a9:76:bc:87:f6:8a:5e:33:fd:73:96:72:e4:5c:
2a:d4:25:c3:d6:4d:42:27:1b:d2:85:01:56:d3:3e:07:6d:7e:
fd:21:e9:8c:e2:59:58:8e:1d:b5:f8:a9:4f:b3:1f:04:62:8c:
10:b2:07:4b:23:56:ab:cb:12:c0:a6:45:66:98:1b:0c:86:25:
61:d5:62:f5:8c:da:b9:70:53:c0:af:f8:e5:d0:46:35:60:44:
66:e8:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:34:36 2024 by rpki-client on console-fra.rpki-client.org