Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ilo0F_viXC5GfBhIXBgad3b5b_Q.cer
File: ilo0F_viXC5GfBhIXBgad3b5b_Q.cer (raw, json)
Hash identifier: HUEXZIr3/BZU5lZNothHCEkR5CRFrYtQWc33LIoQHk8=
Subject key identifier: 8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DED9B1951726DA001FAD1CCF81E0FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34940
AS: 39179
AS: 41393
AS: 60648
AS: 61341
AS: 196875
IP: 77.93.128.0/19
IP: 79.99.144.0/21
IP: 89.28.232.0/21
IP: 95.130.96.0/21
IP: 158.255.8.0/21
IP: 185.101.44.0/22
IP: 193.27.212.0/23
IP: 193.189.140.0/24
IP: 2a00:1c40::/29
IP: 2a02:6f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:d9:b1:95:17:26:da:00:1f:ad:1c:cf:81:e0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a5a3417fbe25c2e467c18485c181a7776f96ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:a8:ab:e8:f3:d5:ee:46:0c:04:16:09:2e:
e5:b8:1f:e7:0a:b8:09:94:70:7d:8d:81:39:08:cc:
40:49:7f:1e:46:75:97:ac:44:56:bd:c0:2e:38:c6:
c4:57:dd:01:86:2d:5b:6c:38:0a:43:14:b7:e9:3b:
30:f8:53:3b:32:f8:8d:60:03:30:1a:8f:cf:bb:13:
7e:01:f8:3c:0c:1d:4b:e5:b1:82:f8:6a:95:a3:fc:
85:ff:a7:db:a9:fb:8d:1b:9c:46:41:57:1b:ad:18:
8d:a2:f6:81:c5:ff:6c:56:ff:f8:35:43:73:52:60:
c6:7d:f1:93:50:25:27:48:a0:d1:a7:73:0b:e4:af:
e7:c6:02:e6:5a:74:55:5e:fe:81:67:b6:c8:a5:01:
b4:46:a6:c4:d4:85:e9:94:f5:1d:c9:18:02:18:f7:
b1:33:ed:a8:4e:1d:7e:a3:84:88:36:07:ff:0c:1b:
76:3e:ec:b9:b5:d9:52:98:46:7e:8d:7f:4b:04:3c:
b1:5c:5a:ac:79:60:72:4a:d1:b8:d4:97:bd:e0:96:
ad:b3:aa:06:50:fb:18:8e:b5:72:70:60:e6:d4:33:
78:98:d4:b7:da:74:89:df:47:d9:92:6d:d0:e9:2d:
e2:51:70:db:e4:46:a2:be:f0:39:5b:57:eb:d4:20:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5A:34:17:FB:E2:5C:2E:46:7C:18:48:5C:18:1A:77:76:F9:6F:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9c6e07-693f-46ce-8646-d7abcd0ef64a/1/ilo0F_viXC5GfBhIXBgad3b5b_Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.128.0/19
79.99.144.0/21
89.28.232.0/21
95.130.96.0/21
158.255.8.0/21
185.101.44.0/22
193.27.212.0/23
193.189.140.0/24
IPv6:
2a00:1c40::/29
2a02:6f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34940
39179
41393
60648
61341
196875
Signature Algorithm: sha256WithRSAEncryption
0f:2a:29:f0:73:f6:df:1d:cd:d8:dc:2e:12:af:a8:b8:87:81:
25:81:d5:9f:db:bd:a5:f3:5c:e7:87:6b:11:41:96:32:83:ca:
57:00:10:d7:2a:86:ac:c6:92:f7:a5:a8:d2:03:8c:d1:01:c3:
d6:90:13:5e:bb:84:a2:63:c9:a5:5e:ef:06:ea:18:48:90:73:
17:0a:84:06:c0:3b:d1:97:e9:bc:a6:fd:74:a5:28:38:40:f9:
5b:c4:04:8a:56:5a:15:91:2d:e1:c1:9a:46:c9:64:4d:48:0a:
71:aa:3e:33:a7:e1:a9:4e:82:9b:76:93:e4:4a:6f:ad:10:1b:
38:8b:a3:8f:c9:7d:0c:2f:17:1a:d0:b2:53:2e:c4:22:22:07:
97:da:ad:bf:4e:ee:68:a9:24:bf:15:ab:cf:05:da:16:93:70:
03:7c:b7:9f:f5:0f:91:ff:5e:87:31:bc:2c:29:f3:ac:e0:5e:
9e:0d:93:da:ea:f9:bb:9b:9a:16:cb:66:94:d0:11:df:5c:d1:
e1:ab:6b:14:74:0b:b2:cc:9d:d5:77:ba:b6:df:80:15:c3:40:
5e:b6:66:a2:be:b3:b2:1c:69:0a:f6:85:6d:8f:f3:56:2a:a1:
4d:0b:33:b1:6f:f5:26:25:f3:d6:11:ce:21:b6:0d:c4:76:8f:
26:cd:c4:fb
-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgISAYzI3tmxlRcm2gAfrRzPgeD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTVhMzQxN2ZiZTI1YzJlNDY3YzE4NDg1YzE4MWE3Nzc2Zjk2ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd+oq+jz1e5GDAQWCS7luB/nCrgJ
lHB9jYE5CMxASX8eRnWXrERWvcAuOMbEV90Bhi1bbDgKQxS36Tsw+FM7MviNYAMw
Go/PuxN+Afg8DB1L5bGC+GqVo/yF/6fbqfuNG5xGQVcbrRiNovaBxf9sVv/4NUNz
UmDGffGTUCUnSKDRp3ML5K/nxgLmWnRVXv6BZ7bIpQG0RqbE1IXplPUdyRgCGPex
M+2oTh1+o4SINgf/DBt2Puy5tdlSmEZ+jX9LBDyxXFqseWByStG41Je94Jats6oG
UPsYjrVycGDm1DN4mNS32nSJ30fZkm3Q6S3iUXDb5EaivvA5W1fr1CALzQIDAQAB
o4IC+TCCAvUwHQYDVR0OBBYEFIpaNBf74lwuRnwYSFwYGnd2+W/0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzljNmUw
Ny02OTNmLTQ2Y2UtODY0Ni1kN2FiY2QwZWY2NGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWM2ZTA3
LTY5M2YtNDZjZS04NjQ2LWQ3YWJjZDBlZjY0YS8xL2lsbzBGX3ZpWEM1R2ZCaElY
QmdhZDNiNWJfUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF
BwEHAQH/BFAwTjA2BAIAATAwAwQFTV2AAwQDT2OQAwQDWRzoAwQDX4JgAwQDnv8I
AwQCuWUsAwQBwRvUAwQAwb2MMBQEAgACMA4DBQMqABxAAwUDKgJvgDAzBggrBgEF
BQcBCAEB/wQkMCKgIDAeAgMAiHwCAwCZCwIDAKGxAgMA7OgCAwDvnQIDAwELMA0G
CSqGSIb3DQEBCwUAA4IBAQAPKinwc/bfHc3Y3C4Sr6i4h4ElgdWf272l81znh2sR
QZYyg8pXABDXKoasxpL3pajSA4zRAcPWkBNeu4SiY8mlXu8G6hhIkHMXCoQGwDvR
l+m8pv10pSg4QPlbxASKVloVkS3hwZpGyWRNSApxqj4zp+GpToKbdpPkSm+tEBs4
i6OPyX0MLxca0LJTLsQiIgeX2q2/Tu5oqSS/FavPBdoWk3ADfLef9Q+R/16HMbws
KfOs4F6eDZPa6vm7m5oWy2aU0BHfXNHhq2sUdAuyzJ3Vd7q234AVw0BetmaivrOy
HGkK9oVtj/NWKqFNCzOxb/UmJfPWEc4htg3Edo8mzcT7
-----END CERTIFICATE-----
Generated at Fri May 3 07:26:21 2024 by rpki-client on console-ams.rpki-client.org