Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
File: jdADrwR3TdPjlzBJeYmjoXFRYlI.cer (raw, json)
Hash identifier: zPa5H929CWahIbgp/rp0LX0n32O5yhrZ8WwuW9QJMu4=
Subject key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8012DB37D39BA3FEF3CE1ED3651B921
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211649
IP: 185.251.71.0/24
IP: 2a10:af40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2d:b3:7d:39:ba:3f:ef:3c:e1:ed:36:51:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dd003af04774dd3e39730497989a3a171516252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:97:c1:f0:63:b3:fd:c0:03:ac:fe:e9:8f:
1e:68:de:6e:82:dc:e6:c8:3d:85:43:21:86:06:0e:
5b:ca:13:2d:86:a4:91:07:d4:0b:f8:2e:3a:b3:55:
98:9e:fb:b3:c5:2d:9b:1b:ff:3e:3f:1c:b3:02:8d:
3a:10:f3:78:9b:df:26:f0:a1:bd:a6:07:62:64:6f:
3f:e8:41:1d:5e:11:e1:80:ad:dc:e9:6d:c8:4d:45:
9e:38:3a:ac:62:28:84:e9:fe:08:e0:0c:c1:3a:18:
d8:d7:4c:8b:6d:ab:ef:48:07:e6:08:cc:64:b4:3e:
3c:bb:30:42:c9:ef:f4:f2:7e:dc:c5:33:e1:a2:8d:
9e:e0:04:be:1f:57:ea:e8:35:e0:22:83:18:ea:b6:
9f:6f:6a:ff:62:df:26:46:82:20:79:22:ed:74:af:
4b:99:74:47:2b:a0:6f:4f:47:dd:9c:3b:d2:7d:ff:
7f:66:19:fb:c8:61:3d:cc:2b:a3:0e:5f:28:d5:2d:
c8:97:59:71:94:aa:e2:84:5d:65:c5:40:10:86:ab:
43:24:74:4a:85:36:e8:25:1c:e2:95:28:09:cd:87:
af:d9:e0:f3:a1:f0:87:e5:3d:03:6b:b4:09:6d:a1:
9a:96:c8:78:0e:99:51:87:bd:ad:3c:e2:a9:33:84:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.71.0/24
IPv6:
2a10:af40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211649
Signature Algorithm: sha256WithRSAEncryption
a4:c8:17:4e:9c:74:a3:8e:f6:ca:d3:cd:1b:ee:30:04:1f:15:
09:bc:e1:0b:18:bd:99:8b:d5:88:4d:15:99:2d:95:62:bb:e4:
48:54:bc:a0:5a:92:58:a0:a6:76:6d:a3:d3:a4:f5:fa:48:9f:
31:8a:2b:25:6c:d1:68:eb:d1:73:30:3d:d0:37:d1:b4:18:08:
70:26:56:9c:e3:3c:9f:a0:a4:a5:e3:69:18:44:82:b2:89:9b:
bd:6d:5d:ef:f6:a6:d7:95:97:7d:ef:89:c8:93:09:f1:fa:ee:
dd:a9:18:49:c7:83:63:1d:c6:c5:e6:a4:a2:69:12:4d:d9:15:
0d:93:78:bb:20:a9:07:fe:43:69:8b:62:05:45:6d:b2:4a:cd:
d2:b2:f0:b1:50:a9:17:fc:52:52:5a:e1:84:23:9a:89:a4:82:
5e:6a:84:87:b3:48:25:7e:08:65:32:d5:c7:58:3d:5a:17:11:
97:d9:85:9d:82:f8:6c:53:53:f9:3a:e1:26:c4:4d:e0:82:09:
e6:83:22:e6:7b:4d:45:96:ae:94:23:4b:15:07:1a:9d:d6:c1:
03:16:b5:1a:b6:58:de:8b:3c:f7:d2:99:5c:55:fc:ff:e5:dc:
46:b4:02:a5:1d:39:a0:e5:ac:96:9b:6a:74:f1:0a:14:29:76:
81:3a:11:ba
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzIAS2zfTm6P+884e02UbkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGQwMDNhZjA0Nzc0ZGQzZTM5NzMwNDk3OTg5YTNhMTcxNTE2MjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E+XwfBjs/3AA6z+6Y8eaN5ugtzm
yD2FQyGGBg5byhMthqSRB9QL+C46s1WYnvuzxS2bG/8+PxyzAo06EPN4m98m8KG9
pgdiZG8/6EEdXhHhgK3c6W3ITUWeODqsYiiE6f4I4AzBOhjY10yLbavvSAfmCMxk
tD48uzBCye/08n7cxTPhoo2e4AS+H1fq6DXgIoMY6rafb2r/Yt8mRoIgeSLtdK9L
mXRHK6BvT0fdnDvSff9/Zhn7yGE9zCujDl8o1S3Il1lxlKrihF1lxUAQhqtDJHRK
hTboJRzilSgJzYev2eDzofCH5T0Da7QJbaGalsh4DplRh72tPOKpM4TR+QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFI3QA68Ed03T45cwSXmJo6FxUWJSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzFhZjZl
YS1jNzM2LTRjMjAtYTgzYy02N2NkMmI0NTlhYWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvMWFmNmVh
LWM3MzYtNGMyMC1hODNjLTY3Y2QyYjQ1OWFhZS8xL2pkQURyd1IzVGRQamx6Qkpl
WW1qb1hGUllsSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuftHMA0EAgACMAcDBQMqEK9AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM6wTANBgkqhkiG9w0BAQsFAAOCAQEApMgXTpx0o472
ytPNG+4wBB8VCbzhCxi9mYvViE0VmS2VYrvkSFS8oFqSWKCmdm2j06T1+kifMYor
JWzRaOvRczA90DfRtBgIcCZWnOM8n6CkpeNpGESCsombvW1d7/am15WXfe+JyJMJ
8fru3akYSceDYx3GxeakomkSTdkVDZN4uyCpB/5DaYtiBUVtskrN0rLwsVCpF/xS
UlrhhCOaiaSCXmqEh7NIJX4IZTLVx1g9WhcRl9mFnYL4bFNT+TrhJsRN4IIJ5oMi
5ntNRZaulCNLFQcandbBAxa1GrZY3os899KZXFX8/+XcRrQCpR05oOWslptqdPEK
FCl2gToRug==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:03:05 2024 by rpki-client on console-ams.rpki-client.org