Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
File: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer (raw, json)
Hash identifier: VrU6jzufV8nry9f6PIXIaExlVHACVCj1ypkkGuDIc90=
Subject key identifier: 89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067B8B2F48136881FB70F2856611DD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50661
IP: 109.197.96.0/21
IP: 109.207.144.0/20
IP: 185.167.32.0/22
IP: 192.166.32.0/22
IP: 195.191.180.0/23
IP: 2a0d:1900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b8:b2:f4:81:36:88:1f:b7:0f:28:56:61:1d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89af8769339703da3b0cb5e831023d3bf63f022e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:1c:26:1e:e2:ec:fe:49:9a:3d:f6:cc:96:
1b:79:7b:2e:9d:7c:35:f3:0f:89:9e:cf:36:9a:95:
c0:13:b4:62:a5:b6:a7:53:a5:31:fd:5b:24:cf:98:
d0:b2:9c:da:ca:d2:11:37:a5:2f:4a:78:05:5e:56:
33:25:9b:41:0f:c4:c3:40:1f:08:2d:b7:c5:d9:07:
12:f4:dd:1b:e5:cd:55:8d:29:6b:f4:f7:2d:8a:1d:
90:2b:0b:fd:f2:5c:25:cc:b3:a3:07:b3:84:c9:e5:
e0:fc:3a:42:83:6d:e4:cf:02:52:01:7a:a9:23:e2:
94:85:cd:5b:86:20:95:57:0e:3c:3c:88:66:93:ea:
2e:df:22:3f:ef:8d:1d:d5:35:56:aa:bb:f9:3b:2d:
a2:ea:3b:29:14:48:b4:17:55:73:71:56:83:ab:bf:
94:c8:74:5f:22:5e:1b:e5:01:fc:51:ad:e9:43:0f:
13:1e:54:f1:f3:79:ea:90:6d:02:a6:20:7c:a5:80:
4f:4f:2c:38:37:73:2e:3a:35:de:c2:8d:75:d8:0d:
cb:1c:00:ef:c7:b5:73:29:b8:69:89:9d:e4:2e:db:
1f:56:0d:3c:4b:0b:b5:e2:5c:b0:05:4d:9f:3f:ad:
4e:96:7c:18:fd:51:98:af:25:9e:54:fb:59:8d:1d:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.96.0/21
109.207.144.0/20
185.167.32.0/22
192.166.32.0/22
195.191.180.0/23
IPv6:
2a0d:1900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50661
Signature Algorithm: sha256WithRSAEncryption
9e:45:50:5e:16:bf:0d:05:87:ac:25:7f:49:f5:78:2d:e8:41:
47:c9:19:0f:77:b5:1a:76:af:ba:3b:44:74:01:98:4a:e3:1a:
6d:20:af:bf:4e:da:ef:fe:a8:4e:47:53:33:85:5c:be:98:ed:
79:fc:05:04:53:35:24:23:f3:12:c9:aa:d1:d9:b9:82:20:d0:
ec:24:96:b7:a0:78:67:7e:8c:7f:41:49:a1:80:27:b3:86:ce:
85:37:84:c4:4b:87:ce:a8:73:22:75:27:39:0b:70:ad:06:38:
c8:4c:57:83:3f:92:56:dd:94:27:8b:13:9a:ac:37:2b:f2:c6:
6c:aa:d5:e8:74:77:86:df:66:fc:c6:e7:4f:f4:5d:07:75:4e:
64:88:c0:ab:4b:82:87:96:12:94:2e:c3:1d:3b:1e:82:33:9a:
86:5c:9e:4a:ad:67:2f:cf:32:bc:b1:ea:db:36:02:98:cc:74:
98:82:de:1f:2b:9b:a1:26:ba:f3:f7:26:f8:0e:98:e0:4a:b1:
cb:03:c3:61:0b:4e:a5:15:58:d4:a3:c1:74:b0:4a:65:27:2f:
b4:a8:06:b2:99:86:7d:ac:43:a1:7e:14:92:e8:df:0c:1b:2e:
13:8c:78:7a:25:5f:49:f2:8a:1c:93:e0:d3:42:8e:6b:d4:2f:
23:87:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:41:36 2025 by rpki-client