Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
File: itJAYD7G681i9y1G8dwAy34fCy4.cer (raw, json)
Hash identifier: VmB/h9dbRCJ3v/rzRDxYM345EiUZ6X1hUCkKDci7nSU=
Subject key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CAA1F40C52995143245E72FA4B725
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3330
AS: 21013
AS: 61108
IP: 62.249.64.0/18
IP: 80.243.160.0/20
IP: 85.31.0.0/19
IP: 88.218.52.0/22
IP: 185.91.80.0/22
IP: 185.92.100.0/22
IP: 185.163.50.0/24
IP: 185.226.40.0/22
IP: 193.186.161.0/24
IP: 194.112.128.0/17
IP: 212.52.192.0/19
IP: 2a02:5e0::/29
IP: 2a02:940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:aa:1f:40:c5:29:95:14:32:45:e7:2f:a4:b7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:cd:59:6b:f3:87:b2:c8:2b:52:a7:82:45:
c2:6a:67:ec:a4:a2:97:d2:10:01:51:80:72:03:55:
7d:d7:e6:a7:46:88:b6:b6:09:e7:fa:2d:b6:67:85:
c3:38:6d:0b:13:a1:6d:c0:16:b5:0a:f3:94:bb:9f:
5c:56:97:80:60:b2:29:ae:2c:2c:10:2d:45:d4:a5:
1c:69:b5:24:54:8a:6e:4b:56:2a:6c:67:fb:b8:5f:
b9:f6:f4:ac:a0:f7:73:a2:c0:f6:d5:6a:c3:81:0f:
ac:1d:a5:17:4c:f6:a8:cf:24:cb:e8:84:dc:1e:19:
65:58:3c:54:34:d1:1a:05:6b:c9:8d:37:cb:94:94:
60:a5:4c:8a:cf:9e:89:eb:22:48:dc:bf:72:1a:6b:
32:98:8a:d8:03:f9:50:d6:34:2f:40:43:58:7c:76:
30:67:ae:2d:dd:c2:ac:3f:d6:ef:38:48:f5:1f:a2:
cd:f9:05:44:51:ac:c1:31:c5:44:3c:6e:5d:57:3a:
64:28:6a:b4:f8:61:4c:7c:55:a9:a3:c2:d4:10:fd:
d6:38:47:68:15:8e:04:c5:44:5f:60:f4:06:f8:29:
99:01:ab:99:35:31:40:8b:5a:28:1a:f3:30:fa:42:
cc:e1:9f:dc:a3:71:0e:4f:a4:8e:1f:63:89:a0:fc:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.249.64.0/18
80.243.160.0/20
85.31.0.0/19
88.218.52.0/22
185.91.80.0/22
185.92.100.0/22
185.163.50.0/24
185.226.40.0/22
193.186.161.0/24
194.112.128.0/17
212.52.192.0/19
IPv6:
2a02:5e0::/29
2a02:940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3330
21013
61108
Signature Algorithm: sha256WithRSAEncryption
67:6e:9a:c1:6e:de:90:ba:bc:78:ce:dc:3c:73:ad:65:7d:1c:
dc:2e:c2:e3:f0:53:04:76:fd:24:f9:0f:cf:b5:0b:d0:ef:73:
93:92:6e:fc:1e:81:c7:ed:3f:ef:40:23:d0:43:31:85:3b:09:
9c:d7:2e:62:eb:45:af:65:f5:69:02:c0:4b:7f:5b:94:33:82:
dd:27:5d:45:e3:32:cd:d6:96:28:3a:9d:3e:a1:c3:32:c3:a2:
01:10:77:33:a3:19:59:6b:86:bc:44:63:e8:a0:10:af:96:20:
eb:9f:5a:8b:44:eb:07:27:ea:f9:59:a9:8e:f2:82:e9:74:ec:
7a:07:a6:34:55:fa:b8:b0:43:93:bd:0d:ea:86:62:e6:ca:aa:
95:47:03:9d:92:03:bc:81:2a:e6:98:49:90:14:0e:f1:33:40:
a7:43:83:bb:24:58:a9:4c:b9:05:69:b2:ad:fd:f0:38:42:2b:
a6:5f:fe:92:8e:81:fc:4d:5c:2c:8c:2a:96:ee:3d:05:f3:60:
eb:89:e9:b8:6c:98:6e:0a:ca:87:7a:70:1c:6d:c9:29:f9:7e:
e0:d8:51:74:b9:7f:2c:0d:92:1a:b8:7a:b6:12:0e:1b:17:c2:
77:b6:61:10:6e:d6:17:ff:53:6a:47:66:a7:4d:70:cd:b8:4e:
95:70:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:12:51 2024 by rpki-client on console-fra.rpki-client.org