Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
File: fcSs7cuGzd_tf23oyt_KAEabvI4.cer (raw, json)
Hash identifier: XLjRzSawJX2j1GK48+SoOBMTVYcHGMTA5JgtsJkstsE=
Subject key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCE81B602E4FFDCF01739641346960519
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Jan 2024 08:47:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 2116
AS: 3307
AS: 5381
AS: 6709
AS: 8896
AS: 9173
AS: 13052
AS: 13069
AS: 13212
AS: 25351
AS: 35094
AS: 41572
AS: 57963
AS: 212642
IP: 31.185.24.0/21
IP: 37.191.128.0/17
IP: 45.138.236.0/22
IP: 62.63.0.0/18
IP: 62.101.192.0/18
IP: 64.28.0.0/19
IP: 77.40.128.0/17
IP: 77.88.64.0/18
IP: 77.234.48.0/21
IP: 77.241.96.0/20
IP: 78.24.144.0/21
IP: 79.135.0.0/19
IP: 80.64.192.0/20
IP: 80.241.80.0/20
IP: 81.0.128.0/18
IP: 81.175.0.0/20
IP: 81.175.20.0 -- 81.175.63.255
IP: 81.191.0.0/16
IP: 82.196.192.0/19
IP: 84.20.96.0/19
IP: 85.112.128.0/19
IP: 85.196.64.0/18
IP: 85.221.0.0/17
IP: 85.252.0.0/16
IP: 86.62.128.0/18
IP: 87.118.0.0/18
IP: 88.84.160.0/19
IP: 89.191.0.0/19
IP: 89.221.96.0/20
IP: 91.135.32.0/20
IP: 91.202.80.0/22
IP: 109.199.192.0/19
IP: 178.74.0.0/18
IP: 185.8.16.0/22
IP: 185.15.216.0/22
IP: 185.35.80.0/22
IP: 185.67.116.0/22
IP: 185.92.52.0/22
IP: 185.126.184.0/22
IP: 185.129.156.0/22
IP: 193.69.0.0/16
IP: 193.71.0.0/16
IP: 193.75.0.0/17
IP: 193.90.0.0/16
IP: 193.91.128.0/17
IP: 194.19.0.0/17
IP: 194.29.200.0/22
IP: 194.54.96.0/19
IP: 195.0.128.0 -- 195.1.255.255
IP: 195.18.128.0/17
IP: 195.139.0.0/16
IP: 195.159.0.0/16
IP: 195.204.0.0/16
IP: 212.33.128.0/19
IP: 212.62.224.0/19
IP: 212.71.64.0/19
IP: 213.52.0.0/17
IP: 213.151.128.0/19
IP: 213.158.224.0/19
IP: 213.160.224.0 -- 213.160.247.255
IP: 213.172.192.0/19
IP: 213.239.64.0/18
IP: 217.8.128.0/19
IP: 217.14.0.0/20
IP: 217.77.32.0/20
IP: 217.118.32.0/19
IP: 217.144.224.0/19
IP: 2001:840::/29
IP: 2001:8c0::/29
IP: 2001:4dd8::/29
IP: 2a00:1e18::/29
IP: 2a00:c440::/29
IP: 2a01:520::/29
IP: 2a02:270::/29
IP: 2a03:c000::/29
IP: 2a04:6340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:81:b6:02:e4:ff:dc:f0:17:39:64:13:46:96:05:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 3 08:47:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:b3:31:7c:e6:72:30:1c:22:6a:a5:92:0d:
c3:c9:d1:f7:d3:76:b2:77:00:16:c1:49:5c:63:e7:
80:29:7e:48:76:52:9b:25:18:0c:58:33:79:86:13:
86:1a:33:c3:52:48:3b:3a:99:4b:6c:de:28:12:49:
e4:f3:75:55:33:70:57:30:d9:ae:c7:14:2b:6c:96:
87:c7:8a:ff:f1:34:95:ed:7d:d2:d4:f5:dc:66:de:
c9:8f:e7:49:5c:32:40:55:dd:ff:d2:6f:a5:a8:53:
5a:02:79:79:50:c1:ae:90:37:58:20:55:cd:99:22:
18:dc:26:f2:11:26:a7:2c:a6:8e:ca:36:72:dd:f4:
98:62:3b:bb:48:fd:c0:15:44:6a:a1:16:29:c8:68:
9d:32:c4:73:42:0e:30:fd:59:5e:64:70:89:bc:93:
8b:df:cd:0a:93:97:c9:66:ee:35:97:51:11:23:f5:
17:f4:bd:82:35:7d:85:de:43:14:72:f0:e0:be:a9:
41:1e:10:66:84:b5:57:77:98:da:b4:34:6a:b4:0a:
cb:6a:45:fd:10:52:39:c4:44:2d:ff:a8:95:49:2e:
a6:ca:ac:f7:47:ea:55:9d:d9:fe:27:3d:9f:45:03:
03:79:08:c0:2c:b1:d3:f3:3d:fd:cc:58:95:1a:16:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.24.0/21
37.191.128.0/17
45.138.236.0/22
62.63.0.0/18
62.101.192.0/18
64.28.0.0/19
77.40.128.0/17
77.88.64.0/18
77.234.48.0/21
77.241.96.0/20
78.24.144.0/21
79.135.0.0/19
80.64.192.0/20
80.241.80.0/20
81.0.128.0/18
81.175.0.0/20
81.175.20.0-81.175.63.255
81.191.0.0/16
82.196.192.0/19
84.20.96.0/19
85.112.128.0/19
85.196.64.0/18
85.221.0.0/17
85.252.0.0/16
86.62.128.0/18
87.118.0.0/18
88.84.160.0/19
89.191.0.0/19
89.221.96.0/20
91.135.32.0/20
91.202.80.0/22
109.199.192.0/19
178.74.0.0/18
185.8.16.0/22
185.15.216.0/22
185.35.80.0/22
185.67.116.0/22
185.92.52.0/22
185.126.184.0/22
185.129.156.0/22
193.69.0.0/16
193.71.0.0/16
193.75.0.0/17
193.90.0.0/16
193.91.128.0/17
194.19.0.0/17
194.29.200.0/22
194.54.96.0/19
195.0.128.0-195.1.255.255
195.18.128.0/17
195.139.0.0/16
195.159.0.0/16
195.204.0.0/16
212.33.128.0/19
212.62.224.0/19
212.71.64.0/19
213.52.0.0/17
213.151.128.0/19
213.158.224.0/19
213.160.224.0-213.160.247.255
213.172.192.0/19
213.239.64.0/18
217.8.128.0/19
217.14.0.0/20
217.77.32.0/20
217.118.32.0/19
217.144.224.0/19
IPv6:
2001:840::/29
2001:8c0::/29
2001:4dd8::/29
2a00:1e18::/29
2a00:c440::/29
2a01:520::/29
2a02:270::/29
2a03:c000::/29
2a04:6340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2116
3307
5381
6709
8896
9173
13052
13069
13212
25351
35094
41572
57963
212642
Signature Algorithm: sha256WithRSAEncryption
20:0b:c2:08:1f:53:27:19:96:87:b9:0b:33:a0:b0:c7:7b:93:
dd:58:c7:0c:ce:d7:00:c1:86:44:05:d7:f0:f0:fe:57:e8:ec:
a0:4f:17:d8:aa:9e:44:e5:6b:ea:a1:76:64:83:ea:7d:64:1d:
6d:a8:e5:48:cc:dd:45:dc:0f:98:af:39:b1:b0:75:ae:de:b6:
b6:e0:dc:90:3d:87:81:75:0f:66:9e:9b:e8:28:1d:67:82:1f:
11:30:0e:06:e2:7c:18:7b:4e:20:85:05:23:ba:8c:58:6e:ae:
97:7b:e7:5c:03:4b:18:be:6a:51:ea:c8:24:cb:95:22:58:50:
d8:f9:64:c6:d9:16:58:8c:46:52:2b:bf:d9:9c:6d:31:cb:0a:
c0:8c:b1:9d:21:ed:92:0a:93:9a:4b:08:89:41:d0:5a:98:5f:
af:99:df:91:07:59:f0:5e:30:c5:6e:39:47:dc:57:84:38:3f:
d0:7d:e8:4a:08:11:a7:da:5d:ea:5f:14:6c:a1:50:a2:c2:65:
d8:85:00:2d:0f:ae:bb:46:81:da:be:a9:1e:06:3d:ab:b1:56:
4d:5f:f9:55:25:41:7d:86:ba:10:3d:bf:08:e6:b2:a6:b1:66:
3f:73:f1:1a:7b:92:d7:59:13:cc:c5:9c:e0:b7:2a:dd:b2:e7:
5b:1a:d8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:30:58 2024 by rpki-client on console-ams.rpki-client.org