Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer
File: ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.cer (raw, json)
Hash identifier: KP86y5jiOTLz7nZ0SXdHaMDj9wVFjjIFsTTlC595Ql8=
Subject key identifier: 89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC726AFCA9CA6CE2854275F8B78F819D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50661
IP: 109.197.96.0/21
IP: 109.207.144.0/20
IP: 185.167.32.0/22
IP: 192.166.32.0/22
IP: 195.191.180.0/23
IP: 2a0d:1900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:af:ca:9c:a6:ce:28:54:27:5f:8b:78:f8:19:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=89af8769339703da3b0cb5e831023d3bf63f022e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:1c:26:1e:e2:ec:fe:49:9a:3d:f6:cc:96:
1b:79:7b:2e:9d:7c:35:f3:0f:89:9e:cf:36:9a:95:
c0:13:b4:62:a5:b6:a7:53:a5:31:fd:5b:24:cf:98:
d0:b2:9c:da:ca:d2:11:37:a5:2f:4a:78:05:5e:56:
33:25:9b:41:0f:c4:c3:40:1f:08:2d:b7:c5:d9:07:
12:f4:dd:1b:e5:cd:55:8d:29:6b:f4:f7:2d:8a:1d:
90:2b:0b:fd:f2:5c:25:cc:b3:a3:07:b3:84:c9:e5:
e0:fc:3a:42:83:6d:e4:cf:02:52:01:7a:a9:23:e2:
94:85:cd:5b:86:20:95:57:0e:3c:3c:88:66:93:ea:
2e:df:22:3f:ef:8d:1d:d5:35:56:aa:bb:f9:3b:2d:
a2:ea:3b:29:14:48:b4:17:55:73:71:56:83:ab:bf:
94:c8:74:5f:22:5e:1b:e5:01:fc:51:ad:e9:43:0f:
13:1e:54:f1:f3:79:ea:90:6d:02:a6:20:7c:a5:80:
4f:4f:2c:38:37:73:2e:3a:35:de:c2:8d:75:d8:0d:
cb:1c:00:ef:c7:b5:73:29:b8:69:89:9d:e4:2e:db:
1f:56:0d:3c:4b:0b:b5:e2:5c:b0:05:4d:9f:3f:ad:
4e:96:7c:18:fd:51:98:af:25:9e:54:fb:59:8d:1d:
43:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AF:87:69:33:97:03:DA:3B:0C:B5:E8:31:02:3D:3B:F6:3F:02:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e82d6-c611-40ad-958e-301e4654ddf6/1/ia-HaTOXA9o7DLXoMQI9O_Y_Ai4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.96.0/21
109.207.144.0/20
185.167.32.0/22
192.166.32.0/22
195.191.180.0/23
IPv6:
2a0d:1900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50661
Signature Algorithm: sha256WithRSAEncryption
8b:b6:04:89:f1:d7:54:fa:f7:76:b8:2c:52:b3:30:20:56:f1:
24:27:b0:97:1f:b4:b6:23:61:a6:04:59:97:9e:40:3c:34:ac:
be:99:ce:1d:9a:16:64:b7:40:a2:4d:8e:4e:80:60:e3:5b:58:
3d:3e:06:7c:c9:a7:fc:35:b3:36:27:0a:34:fc:da:84:21:1c:
21:a3:de:ec:d3:82:00:26:c4:e8:e6:a6:be:7c:81:99:b1:b3:
54:ca:5e:b4:bc:29:1b:64:f1:2c:3a:d8:71:f5:18:07:45:55:
79:d7:29:48:83:14:bf:1f:2b:33:26:6a:1b:52:1a:0c:f8:e2:
0a:7c:d7:62:23:0c:6c:6e:1b:7e:d3:45:32:fc:a6:5b:5c:ab:
5d:24:60:22:4f:00:4b:62:0f:21:af:f4:c5:50:a4:d2:16:7d:
76:97:ae:4e:7b:72:4c:c8:d3:ac:e8:21:36:30:df:5a:64:aa:
08:bf:2c:24:9f:5c:bd:6f:26:eb:d7:51:5b:06:1f:ac:22:0c:
b5:0c:0b:bd:b0:a5:2f:6d:1a:2d:71:4d:20:10:8e:f3:06:34:
c4:74:be:d4:46:3f:f0:e0:5c:f8:c4:a1:c1:44:d9:78:7b:4d:
d2:a1:9d:ff:84:0b:41:da:be:3c:6a:93:ca:c9:20:8a:d3:5a:
34:e9:b9:24
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYzHJq/KnKbOKFQnX4t4+BnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjIzMDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWFmODc2OTMzOTcwM2RhM2IwY2I1ZTgzMTAyM2QzYmY2M2YwMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWIcJh7i7P5Jmj32zJYbeXsunXw1
8w+Jns82mpXAE7RipbanU6Ux/Vskz5jQspzaytIRN6UvSngFXlYzJZtBD8TDQB8I
LbfF2QcS9N0b5c1VjSlr9Pctih2QKwv98lwlzLOjB7OEyeXg/DpCg23kzwJSAXqp
I+KUhc1bhiCVVw48PIhmk+ou3yI/740d1TVWqrv5Oy2i6jspFEi0F1VzcVaDq7+U
yHRfIl4b5QH8Ua3pQw8THlTx83nqkG0CpiB8pYBPTyw4N3MuOjXewo112A3LHADv
x7VzKbhpiZ3kLtsfVg08Swu14lywBU2fP61OlnwY/VGYryWeVPtZjR1DbwIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFImvh2kzlwPaOwy16DECPTv2PwIuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzVlODJk
Ni1jNjExLTQwYWQtOTU4ZS0zMDFlNDY1NGRkZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvNWU4MmQ2
LWM2MTEtNDBhZC05NThlLTMwMWU0NjU0ZGRmNi8xL2lhLUhhVE9YQTlvN0RMWG9N
UUk5T19ZX0FpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQDbcVgAwQEbc+QAwQCuacgAwQCwKYgAwQBw7+0
MA0EAgACMAcDBQMqDRkAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDF5TANBgkq
hkiG9w0BAQsFAAOCAQEAi7YEifHXVPr3drgsUrMwIFbxJCewlx+0tiNhpgRZl55A
PDSsvpnOHZoWZLdAok2OToBg41tYPT4GfMmn/DWzNicKNPzahCEcIaPe7NOCACbE
6OamvnyBmbGzVMpetLwpG2TxLDrYcfUYB0VVedcpSIMUvx8rMyZqG1IaDPjiCnzX
YiMMbG4bftNFMvymW1yrXSRgIk8AS2IPIa/0xVCk0hZ9dpeuTntyTMjTrOghNjDf
WmSqCL8sJJ9cvW8m69dRWwYfrCIMtQwLvbClL20aLXFNIBCO8wY0xHS+1EY/8OBc
+MShwUTZeHtN0qGd/4QLQdq+PGqTyskgitNaNOm5JA==
-----END CERTIFICATE-----
Generated at Fri May 3 10:53:15 2024 by rpki-client on console-fra.rpki-client.org