Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
File: ge7UCROD2e1AVtn07_fSYi3c4gU.cer (raw, json)
Hash identifier: G6V0DtQVjy3+mysrl7LJ7bRRLlAv9Omj4TSI+Fzi4b8=
Subject key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F0FFE502BA539DE239A2E9F90E7615780
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Apr 2024 12:04:36 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3265
AS: 8737
AS: 12871
AS: 39309
AS: 49562
IP: 5.199.144.0/20
IP: 37.188.64.0/20
IP: 37.251.0.0/17
IP: 46.227.232.0/21
IP: 62.131.0.0/16
IP: 62.216.0.0/19
IP: 62.251.0.0/17
IP: 77.160.0.0/12
IP: 80.60.0.0/15
IP: 80.100.0.0/15
IP: 80.126.0.0/15
IP: 81.204.0.0/14
IP: 82.92.0.0/14
IP: 82.136.192.0/18
IP: 82.139.64.0/18
IP: 82.161.0.0/16
IP: 82.168.0.0 -- 82.170.255.255
IP: 83.68.0.0/19
IP: 83.160.0.0/14
IP: 84.39.0.0/19
IP: 84.80.0.0/16
IP: 84.82.0.0 -- 84.87.255.255
IP: 85.113.224.0/19
IP: 86.80.0.0 -- 86.90.255.255
IP: 86.92.0.0/14
IP: 88.159.0.0/16
IP: 94.229.48.0/20
IP: 109.72.32.0/20
IP: 128.127.32.0/20
IP: 141.105.0.0/20
IP: 185.2.172.0/22
IP: 185.94.208.0/22
IP: 185.117.108.0/22
IP: 188.142.0.0/17
IP: 194.109.0.0/16
IP: 195.64.64.0/19
IP: 195.121.0.0/16
IP: 195.240.0.0/15
IP: 212.123.128.0/18
IP: 212.182.128.0/18
IP: 212.238.0.0/16
IP: 213.10.0.0/16
IP: 213.75.0.0/16
IP: 213.84.0.0/16
IP: 213.148.224.0/19
IP: 213.197.0.0/18
IP: 213.222.0.0/19
IP: 217.26.96.0/20
IP: 2001:67c:24f0::/48
IP: 2001:67c:2500::/45
IP: 2001:888::/29
IP: 2001:980::/29
IP: 2a02:80c0::/30
IP: 2a02:a400::/25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0f:fe:50:2b:a5:39:de:23:9a:2e:9f:90:e7:61:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 24 12:04:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:da:b5:2f:ae:87:95:ad:58:c6:d9:00:95:
f9:4a:f8:52:c3:d6:2c:73:0a:05:b8:08:1f:b6:84:
a3:f8:2c:40:26:f5:5e:f9:8c:5c:09:a9:68:15:de:
02:82:de:ed:e5:bc:e6:0a:87:a8:8a:40:8c:e7:2b:
bf:66:c2:7e:91:66:67:f1:11:0c:8a:3a:e1:a6:3f:
23:c8:ed:50:d3:50:64:88:19:43:43:f9:cb:9a:ff:
04:d1:3a:73:5d:84:c9:94:25:3d:73:11:41:a4:88:
1d:05:bf:b9:18:cc:70:89:e2:a9:21:17:d6:ee:3d:
7c:42:3b:66:31:73:86:ae:32:c6:62:d0:0b:be:df:
91:f0:bd:90:5d:2a:2c:c4:41:be:8e:ad:78:93:41:
8c:f2:67:d1:cf:88:e4:85:80:fd:6e:6c:1f:02:a4:
18:59:f8:72:83:d8:66:69:59:69:5f:55:13:25:b4:
65:2c:bf:ab:6d:41:d3:96:f7:c0:6c:fe:56:cd:9e:
42:97:9f:36:16:fd:84:a0:ce:e0:04:6e:f2:57:2d:
f8:96:5a:eb:ac:9e:d9:5b:d1:ee:d3:3c:fc:ce:c2:
bc:cb:2a:79:cc:1c:e7:d9:c7:b5:37:68:45:50:6f:
93:64:c5:c4:f4:de:2d:19:6b:c5:26:d0:12:de:0e:
19:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.144.0/20
37.188.64.0/20
37.251.0.0/17
46.227.232.0/21
62.131.0.0/16
62.216.0.0/19
62.251.0.0/17
77.160.0.0/12
80.60.0.0/15
80.100.0.0/15
80.126.0.0/15
81.204.0.0/14
82.92.0.0/14
82.136.192.0/18
82.139.64.0/18
82.161.0.0/16
82.168.0.0-82.170.255.255
83.68.0.0/19
83.160.0.0/14
84.39.0.0/19
84.80.0.0/16
84.82.0.0-84.87.255.255
85.113.224.0/19
86.80.0.0-86.90.255.255
86.92.0.0/14
88.159.0.0/16
94.229.48.0/20
109.72.32.0/20
128.127.32.0/20
141.105.0.0/20
185.2.172.0/22
185.94.208.0/22
185.117.108.0/22
188.142.0.0/17
194.109.0.0/16
195.64.64.0/19
195.121.0.0/16
195.240.0.0/15
212.123.128.0/18
212.182.128.0/18
212.238.0.0/16
213.10.0.0/16
213.75.0.0/16
213.84.0.0/16
213.148.224.0/19
213.197.0.0/18
213.222.0.0/19
217.26.96.0/20
IPv6:
2001:67c:24f0::/48
2001:67c:2500::/45
2001:888::/29
2001:980::/29
2a02:80c0::/30
2a02:a400::/25
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3265
8737
12871
39309
49562
Signature Algorithm: sha256WithRSAEncryption
65:f9:33:42:63:b1:87:8a:0b:b4:97:80:03:7e:88:f7:97:dc:
66:4d:71:3f:a6:eb:89:b3:95:77:84:92:ca:6f:f6:38:1c:64:
04:a7:cd:b4:9f:dd:b1:d7:65:87:60:95:d2:56:b2:4a:ed:ae:
60:12:a5:1c:1f:af:83:c7:aa:1d:fa:5c:9f:39:b3:cf:61:4a:
c3:33:aa:13:bd:6b:8e:ac:8d:e8:d3:83:7a:14:a4:b6:eb:ec:
8b:41:23:91:3e:cf:f9:c6:34:f3:f2:43:0a:3b:d7:4c:ee:e4:
32:bd:bc:e5:33:29:b9:02:11:fb:65:3b:95:c1:7f:4f:da:ff:
4a:5d:23:cf:0a:af:86:09:40:9c:f5:a4:8b:a7:1f:fe:24:c7:
89:27:b1:77:00:09:66:44:f7:14:31:e1:45:23:f7:4a:56:37:
7a:59:87:27:4f:ca:e6:1c:6a:cf:77:34:ea:22:d9:83:90:95:
e7:88:e0:1c:fc:86:fb:9d:d5:c0:df:68:1f:05:20:d1:e1:f1:
7f:81:e3:3d:0b:ab:cb:81:e3:55:18:1c:fa:b0:9f:97:2c:32:
3a:9c:21:de:a1:88:07:ec:9e:39:0a:0c:4a:69:de:34:12:37:
58:33:34:4a:e1:0b:03:35:e5:64:ed:27:78:2e:d0:b2:b5:d3:
ae:a3:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:25:08 2024 by rpki-client on console-ams.rpki-client.org