Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer
File: i0eqCfLGEPb0S051wc2dzTiE5V0.cer (raw, json)
Hash identifier: CpwmAQaPXd8qSdgLxRQj7ZdBVddUFpVca2lU88QnkME=
Subject key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01934A2EC2C07F1EE4E67E8B1576B8966E3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Nov 2024 15:26:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39454
AS: 48551
AS: 49676
IP: 5.253.225.0/24
IP: 31.193.186.0/24
IP: 45.94.252.0/22
IP: 45.150.150.0/24
IP: 45.159.196.0/22
IP: 91.217.177.0/24
IP: 103.216.60.0/22
IP: 146.19.104.0/24
IP: 157.119.188.0/22
IP: 185.63.114.0/24
IP: 185.74.221.0/24
IP: 185.86.180.0/22
IP: 185.128.40.0/24
IP: 185.149.192.0/24
IP: 185.236.36.0/22
IP: 185.238.143.0/24
IP: 194.147.212.0/24
IP: 194.147.222.0/24
IP: 195.114.4.0/23
IP: 195.114.8.0/23
IP: 2a05:ba40::/29
IP: 2a0d:9500::/29
IP: 2a0f:5040::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4a:2e:c2:c0:7f:1e:e4:e6:7e:8b:15:76:b8:96:6e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 20 15:26:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:38:7c:61:de:f8:a2:d3:e5:a6:72:0b:ea:
a6:9f:a7:8c:5f:37:d9:a3:d8:0f:83:41:4f:29:25:
54:40:fc:56:2f:96:a3:cb:26:c1:f2:44:32:87:34:
ca:5c:5e:99:da:5b:b2:18:1e:b0:dc:52:9b:c4:d4:
3a:09:8f:1f:f9:72:ad:3e:bf:ae:d9:9d:db:5b:9e:
23:72:52:a7:5b:a9:2b:ea:7c:04:40:8e:b5:ed:9d:
ad:28:e4:4f:a0:8b:4e:57:74:7c:c3:2e:fa:28:76:
5e:63:54:a0:c0:d4:ae:d6:73:26:90:b1:80:6e:fc:
d5:7a:e6:cf:44:fc:86:9b:9b:73:e7:41:a6:50:80:
3b:34:59:17:06:96:32:49:ae:42:24:a8:52:ed:4c:
76:4b:59:3e:2d:76:d8:5c:d6:0c:ab:ed:30:dd:3d:
4c:1e:05:53:be:33:81:78:f0:31:bc:29:16:99:c3:
4e:2a:65:59:f9:54:f2:a7:a3:c8:ef:e5:b4:de:1b:
bd:4f:b3:9b:38:5a:a0:dd:65:2f:84:23:7f:2e:09:
d2:75:0b:42:e7:b0:10:35:70:e6:82:67:81:fd:29:
cb:b5:dc:b5:4b:22:1b:b7:75:7f:71:70:ad:a5:cc:
17:cb:27:a9:4a:8e:12:96:8d:08:17:70:01:b6:73:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.225.0/24
31.193.186.0/24
45.94.252.0/22
45.150.150.0/24
45.159.196.0/22
91.217.177.0/24
103.216.60.0/22
146.19.104.0/24
157.119.188.0/22
185.63.114.0/24
185.74.221.0/24
185.86.180.0/22
185.128.40.0/24
185.149.192.0/24
185.236.36.0/22
185.238.143.0/24
194.147.212.0/24
194.147.222.0/24
195.114.4.0/23
195.114.8.0/23
IPv6:
2a05:ba40::/29
2a0d:9500::/29
2a0f:5040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39454
48551
49676
Signature Algorithm: sha256WithRSAEncryption
07:f7:92:4f:c1:38:94:13:01:ea:91:bf:d0:a5:23:b7:f7:8f:
69:63:3e:7a:a5:98:f3:ad:ec:b5:67:6f:a0:5c:81:61:65:54:
d6:fa:45:6a:22:4c:a6:e9:be:ab:a7:93:f5:37:85:2b:27:a7:
35:64:dd:7f:83:35:38:1b:9d:ca:cf:84:67:d1:45:ea:c7:e0:
11:bc:04:a1:c8:05:a3:5a:60:d5:70:02:0f:f4:9f:47:52:cc:
40:fe:15:06:5d:6c:af:f4:ca:1f:3a:54:5d:84:a0:92:fa:d7:
4d:a0:69:0d:7c:99:43:a8:0c:a0:e6:eb:dd:a5:01:bd:9d:0b:
db:97:9f:1b:ba:64:40:c0:3e:88:69:92:4e:0c:63:44:aa:40:
42:0d:bf:d4:74:3b:0b:39:65:86:a2:f4:e1:0a:3a:74:c2:aa:
a5:be:a4:10:1a:cf:03:fd:c6:f0:ad:0c:d3:db:1d:22:b0:2d:
14:fa:99:81:95:bd:cc:3b:f1:c2:91:42:29:60:67:d6:38:6d:
f3:ef:09:fc:b0:38:41:e5:58:e1:f5:a4:b6:e3:65:53:14:dc:
08:dd:c7:4e:4c:1e:c0:bb:97:2a:ae:11:83:30:f5:f7:33:20:
3a:76:f2:95:62:0f:30:d5:c6:22:5d:50:ed:2f:2c:e1:d1:a8:
88:d4:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:44:18 2024 by rpki-client on console-fra.rpki-client.org