Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
File: d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer (raw, json)
Hash identifier: ZOYa7jEBcyr7wg04yP7E894IVds1esMy3+QDIbeaJGE=
Subject key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29010E0EF7138133918B1605B6398A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6656
AS: 8272
AS: 8426
AS: 24976
AS: 199269
AS: 201980
IP: 62.173.64.0/18
IP: 62.231.128.0/19
IP: 79.123.0.0/17
IP: 80.168.0.0/16
IP: 81.171.128.0/17
IP: 89.206.128.0/17
IP: 176.52.208.0/21
IP: 185.22.164.0/22
IP: 185.39.232.0/22
IP: 185.56.4.0/22
IP: 185.77.72.0/22
IP: 185.77.200.0/22
IP: 185.78.204.0/22
IP: 194.88.132.0/23
IP: 194.112.32.0/19
IP: 194.119.128.0/18
IP: 195.8.64.0/19
IP: 195.58.192.0/19
IP: 195.102.0.0/16
IP: 195.157.0.0/16
IP: 195.216.0.0/19
IP: 195.245.201.0/24
IP: 212.49.192.0/18
IP: 212.125.64.0/19
IP: 212.126.128.0/19
IP: 212.169.0.0/18
IP: 212.188.128.0/17
IP: 213.2.0.0/16
IP: 213.165.128.0/19
IP: 213.253.0.0/18
IP: 217.158.0.0/16
IP: 2001:67c:80::/48
IP: 2001:67c:1088::/47
IP: 2001:67c:27dc::/48
IP: 2001:a88::/32
IP: 2a00:ed0::/32
IP: 2a00:62e0::/32
IP: 2a02:4f20::/32
IP: 2a02:e100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:01:0e:0e:f7:13:81:33:91:8b:16:05:b6:39:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:50:78:c6:e0:91:9e:7d:ef:77:2f:fa:e0:
42:b8:60:d6:f3:9e:c4:a2:e9:94:2e:2f:3b:08:3d:
67:fd:13:45:a7:3c:8b:e5:7a:77:2e:49:92:ec:e5:
f5:c7:c1:a2:f7:de:2a:96:e7:a7:90:6c:8e:ea:e0:
aa:a2:94:ad:e8:b4:50:d5:92:ec:c6:22:79:95:a9:
50:7d:40:68:0d:ba:92:eb:42:d3:04:eb:90:45:5b:
cf:19:02:28:c3:93:01:1d:44:51:b5:81:8d:fd:d7:
34:b5:1e:48:58:24:fd:b0:77:75:52:4d:ff:9e:c9:
4c:de:8c:00:9f:f6:0b:d4:3e:e1:f5:5c:ac:ae:37:
5b:23:72:24:65:96:84:fb:4b:f0:95:b8:da:1d:33:
7f:39:27:0a:bc:6a:4a:d6:06:01:30:36:8f:00:9b:
90:01:45:2b:6a:47:43:a0:99:65:ce:e3:a5:3e:86:
60:64:83:71:1b:6b:8f:8b:ed:c5:e3:16:d9:70:6e:
8f:06:f0:9b:16:b4:64:78:a9:e5:f7:c2:04:e4:93:
3f:38:6a:fc:0f:9c:fd:ed:ca:ef:09:1f:09:53:a7:
3c:bf:3f:74:72:2a:22:22:39:47:90:b7:d9:15:97:
6b:b7:27:7a:04:f6:b6:51:42:5c:20:61:db:08:3b:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.173.64.0/18
62.231.128.0/19
79.123.0.0/17
80.168.0.0/16
81.171.128.0/17
89.206.128.0/17
176.52.208.0/21
185.22.164.0/22
185.39.232.0/22
185.56.4.0/22
185.77.72.0/22
185.77.200.0/22
185.78.204.0/22
194.88.132.0/23
194.112.32.0/19
194.119.128.0/18
195.8.64.0/19
195.58.192.0/19
195.102.0.0/16
195.157.0.0/16
195.216.0.0/19
195.245.201.0/24
212.49.192.0/18
212.125.64.0/19
212.126.128.0/19
212.169.0.0/18
212.188.128.0/17
213.2.0.0/16
213.165.128.0/19
213.253.0.0/18
217.158.0.0/16
IPv6:
2001:67c:80::/48
2001:67c:1088::/47
2001:67c:27dc::/48
2001:a88::/32
2a00:ed0::/32
2a00:62e0::/32
2a02:4f20::/32
2a02:e100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6656
8272
8426
24976
199269
201980
Signature Algorithm: sha256WithRSAEncryption
2e:50:e8:0c:a3:76:67:0b:21:c3:62:96:27:74:fd:ee:77:ec:
33:09:f3:9a:f2:76:79:21:de:c1:0f:b2:6b:f9:ae:1a:4b:42:
aa:94:94:02:f3:40:52:06:1a:a7:76:f5:8b:a1:16:02:ff:6f:
91:ec:a1:b7:3a:b4:27:70:7d:dd:77:f2:f3:cb:02:4f:53:57:
e2:9f:38:d4:9b:84:71:a1:79:e0:e5:7d:96:6a:7d:2e:c5:0b:
f6:de:22:9f:96:c6:87:b8:9e:8c:5d:cf:32:16:2a:48:64:57:
48:5c:c9:b0:a1:a7:7a:ea:6a:51:bb:b6:90:9b:30:87:96:9f:
b4:78:44:ea:8c:7d:9e:07:c7:9f:30:e0:42:b7:43:d8:9d:dd:
5d:f3:39:7b:4f:fe:54:1d:24:bb:16:54:2f:5e:a2:e8:64:a7:
e0:7c:e3:df:ff:86:df:46:20:d9:95:1a:70:d4:fc:76:69:10:
65:08:98:e0:35:5e:72:03:24:90:e2:17:9b:7c:66:4e:36:b1:
d2:eb:e0:cd:38:97:97:99:01:a9:9f:67:96:a5:db:14:84:68:
61:c7:12:28:7e:a3:fb:07:8a:18:50:dd:88:b4:d6:a0:c1:9c:
29:e5:59:4f:fb:e6:53:f2:01:86:32:3c:02:96:50:c6:f0:ec:
44:d8:e4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:39:22 2024 by rpki-client on console-fra.rpki-client.org