Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
File: eodGp2zag2kAnSiUHvFWI5xqY6E.cer (raw, json)
Hash identifier: bDt446qdoECkZ9+zXJ9F1Yo7xzVI1hnfYf3OpBRlJsk=
Subject key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC424DB7559EAC11A1322E751B351945C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 5378
AS: 5388
AS: 5428
AS: 5551
AS: 6660
AS: 6757
AS: 6847
AS: 8576
AS: 8709
AS: 8760
AS: 13017
AS: 13217
IP: 62.25.64.0 -- 62.25.255.255
IP: 62.136.0.0/15
IP: 62.208.0.0/16
IP: 62.221.0.0/19
IP: 81.76.0.0/14
IP: 84.64.0.0/13
IP: 90.240.0.0/12
IP: 141.1.0.0/16
IP: 185.204.4.0/22
IP: 193.32.24.0/22
IP: 193.32.45.0/24
IP: 193.164.160.0/19
IP: 193.193.32.0/19
IP: 193.194.22.0 -- 193.194.31.255
IP: 193.243.0.0/17
IP: 194.6.0.0 -- 194.6.95.255
IP: 194.112.64.0/18
IP: 194.152.64.0/19
IP: 194.176.128.0/19
IP: 194.177.160.0/19
IP: 194.205.0.0/16
IP: 194.221.0.0/16
IP: 195.2.0.0/19
IP: 195.10.0.0/18
IP: 195.27.0.0/16
IP: 195.44.0.0/16
IP: 195.59.0.0/16
IP: 195.80.64.0/19
IP: 195.89.0.0/16
IP: 195.92.0.0/16
IP: 195.144.128.0/19
IP: 195.218.96.0/19
IP: 195.248.192.0/19
IP: 212.62.0.0/19
IP: 212.137.0.0/16
IP: 212.158.0.0/17
IP: 212.165.0.0/19
IP: 213.12.0.0/16
IP: 213.38.0.0/16
IP: 213.185.192.0/19
IP: 213.216.128.0/18
IP: 217.134.0.0/15
IP: 217.161.0.0/16
IP: 2001:5000::/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:db:75:59:ea:c1:1a:13:22:e7:51:b3:51:94:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:bc:b0:f8:f8:e8:e6:10:6e:88:a7:1d:2f:
30:f9:9d:53:e1:ae:57:f0:a5:33:89:5f:51:de:04:
62:9d:73:57:42:75:c7:89:69:b4:f7:2b:9f:77:88:
1c:ef:c5:bd:3c:0e:1b:9c:a9:93:02:e1:17:4f:40:
48:1c:5f:8a:4d:fd:09:79:2b:2b:29:5b:e3:d0:93:
2d:cf:20:eb:3d:a9:84:65:de:6f:8a:45:88:06:50:
3b:02:ab:d6:56:83:76:7f:27:1f:ab:06:c7:11:ff:
56:1e:b3:cf:19:2e:97:74:63:26:11:0c:09:a2:25:
58:74:1d:d8:b4:39:13:51:8b:dd:5f:bf:18:55:4c:
2c:a6:9f:14:39:5e:7c:42:7f:f0:c4:bf:1a:9f:0c:
18:11:94:fa:30:78:2c:3a:b5:ed:90:00:f9:66:58:
28:42:85:b9:1b:7a:db:a4:e8:40:68:81:94:26:ed:
68:af:e0:de:1a:6c:bf:bc:f7:47:77:66:f0:ba:7a:
98:7c:60:92:38:47:48:cd:63:97:f2:ec:21:11:13:
96:7d:ae:ce:47:8a:b6:62:6d:c3:f7:48:7c:0d:52:
63:68:25:81:9a:e7:55:e1:65:05:29:c8:3b:f4:40:
c9:31:1b:9a:3f:d4:a4:8a:c3:51:6e:c4:18:c5:d0:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.25.64.0-62.25.255.255
62.136.0.0/15
62.208.0.0/16
62.221.0.0/19
81.76.0.0/14
84.64.0.0/13
90.240.0.0/12
141.1.0.0/16
185.204.4.0/22
193.32.24.0/22
193.32.45.0/24
193.164.160.0/19
193.193.32.0/19
193.194.22.0-193.194.31.255
193.243.0.0/17
194.6.0.0-194.6.95.255
194.112.64.0/18
194.152.64.0/19
194.176.128.0/19
194.177.160.0/19
194.205.0.0/16
194.221.0.0/16
195.2.0.0/19
195.10.0.0/18
195.27.0.0/16
195.44.0.0/16
195.59.0.0/16
195.80.64.0/19
195.89.0.0/16
195.92.0.0/16
195.144.128.0/19
195.218.96.0/19
195.248.192.0/19
212.62.0.0/19
212.137.0.0/16
212.158.0.0/17
212.165.0.0/19
213.12.0.0/16
213.38.0.0/16
213.185.192.0/19
213.216.128.0/18
217.134.0.0/15
217.161.0.0/16
IPv6:
2001:5000::/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5378
5388
5428
5551
6660
6757
6847
8576
8709
8760
13017
13217
Signature Algorithm: sha256WithRSAEncryption
81:b9:34:57:e1:47:b0:c6:05:2e:b4:a6:07:95:d6:ea:94:a2:
4d:dc:9e:e1:35:ee:f7:e4:0d:12:70:5e:4b:74:b5:00:15:2a:
48:aa:f8:b1:68:0e:72:52:2e:2a:89:05:b2:ae:0a:32:08:b8:
75:c7:a8:f1:be:56:40:65:83:ef:b9:9f:32:20:f4:06:e4:29:
84:2c:70:98:ee:d8:be:6b:51:7d:c8:54:be:68:50:ce:bc:38:
22:58:68:fe:6c:b8:1a:23:46:61:17:58:c3:1e:32:d8:ff:b8:
12:32:c5:3b:d4:97:93:c9:a4:a0:9f:03:a3:08:38:70:8b:47:
76:c3:d0:34:73:26:d8:77:d2:cb:6d:b4:00:28:9c:67:fc:b5:
74:d3:72:5f:9f:78:fe:d4:d8:2c:fb:15:50:8a:43:ae:3a:b0:
cb:6c:26:c0:97:96:97:8f:ad:99:d9:4e:a8:4d:df:c8:32:cd:
ed:f9:ab:53:14:3a:72:15:95:98:85:11:e6:a6:4e:e5:50:67:
63:17:8f:bc:c5:e0:61:5a:3f:33:ef:95:48:94:18:b7:91:c9:
00:cd:7b:66:fa:aa:f8:cb:6f:9a:bb:a3:23:47:37:26:a6:b2:
af:cb:34:64:5f:97:da:2e:57:7b:57:8d:95:6d:bf:6f:7d:2a:
32:49:6f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:05:59 2024 by rpki-client on console-ams.rpki-client.org