Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer (raw, json)
Hash identifier: 7ZiAy3tgnZJZMLVLtCdRX6PdFt2o8q2eAr+aWzcUZzo=
Subject key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D08F200EAF32DC47B44FFAFC06F7B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205151
IP: 217.150.64.0/21
IP: 2a01:8c80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:08:f2:00:ea:f3:2d:c4:7b:44:ff:af:c0:6f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:3f:2c:90:de:44:9e:76:ab:27:c3:71:2f:
e2:33:a2:09:e3:49:de:a5:71:36:8b:b8:93:4e:f2:
61:ac:64:32:7e:83:89:fe:1c:e5:72:fc:41:4d:ef:
3c:2e:f2:ff:f3:65:8c:ec:5f:05:26:28:e9:7e:1f:
47:39:a1:52:58:e8:e4:a4:24:4c:12:b9:9e:4a:e4:
a0:c5:7d:d7:8c:eb:38:d4:8f:df:d9:d1:1a:e7:2d:
66:e4:01:a6:b8:9a:d6:7a:8d:ad:a4:b7:0f:d5:cd:
04:55:c1:1e:0c:38:b5:71:e1:b9:ab:6e:c3:80:93:
85:52:4a:5a:e7:cc:93:08:c0:98:0a:34:a2:a2:d0:
80:a2:5b:50:cd:7d:c2:0f:57:83:f5:a8:05:a9:2f:
75:d4:1e:2e:09:f7:d0:cb:41:42:ca:0c:d5:ea:77:
37:d5:4e:c1:fd:48:fc:07:de:1a:fe:43:b1:33:fe:
e6:ad:67:41:fc:50:4d:29:5b:b3:4d:a5:54:ca:71:
7f:30:93:2f:fb:65:7d:69:0e:c8:57:ae:3f:fe:55:
06:71:88:17:1f:f6:3e:f0:d1:d6:f1:c0:74:db:45:
10:03:fe:6e:0c:e8:64:7d:18:60:6a:68:d2:99:2d:
34:53:a7:eb:63:b5:fb:2c:8f:54:ec:9c:b7:34:de:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.150.64.0/21
IPv6:
2a01:8c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205151
Signature Algorithm: sha256WithRSAEncryption
53:1d:17:12:16:b7:f2:a9:7f:7a:1f:77:3f:96:40:a4:ac:a6:
78:9b:fb:ed:55:6f:e6:b8:48:7d:00:b6:66:5e:a1:46:e2:92:
b9:2e:de:cc:cd:f4:51:21:89:db:ac:4b:8e:c5:7d:0d:68:48:
ed:4f:6e:11:e1:d5:94:c3:02:0d:c2:35:49:86:e0:5f:24:42:
5b:32:2a:e9:e6:7a:f2:01:02:65:13:10:04:14:8f:4d:f7:73:
e6:82:58:fc:da:0e:66:74:2f:55:55:4e:e4:9a:ce:1d:91:e5:
dd:7e:bf:72:49:54:75:8f:49:8b:8f:0c:b6:f6:15:a8:e0:35:
9f:1b:6e:85:e7:6b:36:dc:ca:79:bc:20:f3:a9:d6:3c:36:1f:
5f:26:cf:be:f1:25:0b:62:8d:f6:b7:d3:59:56:c7:44:17:95:
5d:e3:88:5c:85:c6:98:1d:51:70:d5:d7:b5:92:e2:53:15:ee:
19:0f:37:77:d9:ff:29:30:b2:e2:bf:05:86:e6:3e:5d:e9:3e:
00:cb:56:44:90:89:bf:cc:ce:a0:81:0b:23:41:ff:3e:9e:41:
a7:f4:41:d4:10:f3:8c:b3:d5:64:9f:04:1d:02:a1:14:8d:fb:
44:53:ae:e2:12:6f:45:af:f7:74:be:45:60:02:4b:a5:fc:00:
4a:14:f4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:12:11 2024 by rpki-client on console-ams.rpki-client.org