Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer
File: kXsIiSLQ8z_soWTghVTsmS2qOcU.cer (raw, json)
Hash identifier: O9RO8/KRdc1XigvzCL2HqCIxZWnP4BKARI5ao/oPlDc=
Subject key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D306885D36CC2C029B8CF00AA571E5951
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
caRepository: rsync://0.sb/repo/sb/1/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Mon 22 Jan 2024 09:02:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 3258
AS: 8888
AS: 210807
IP: 78.31.211.0/24
IP: 94.124.79.0/24
IP: 146.19.0.0/24
IP: 146.19.145.0/24
IP: 2a11::/32
IP: 2a11:3:: -- 2a11:7:ffff:ffff:ffff:ffff:ffff:ffff
IP: 2a11:8080::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:68:85:d3:6c:c2:c0:29:b8:cf:00:aa:57:1e:59:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 22 09:02:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=917b088922d0f33feca164e08554ec992daa39c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:38:4b:fe:e8:3b:25:f5:87:a9:00:bb:b8:
4c:d4:53:74:f9:82:6d:a5:40:d6:54:3c:34:2b:c5:
e0:c1:89:24:a4:f2:11:b0:b3:06:b7:1f:d8:f5:73:
24:42:f1:a8:f8:ed:d6:e4:09:32:b2:0d:96:7b:db:
e7:94:c5:7a:aa:37:2f:da:3c:ce:5d:bb:a1:26:d7:
bc:f4:2f:66:ad:6b:5c:6e:7d:04:5a:f0:fa:f9:36:
46:e9:57:78:d9:a3:61:0a:00:8b:c6:59:a8:ef:e6:
43:6f:b7:9a:42:0e:dc:b6:74:e8:d1:a2:86:7c:11:
65:0e:d0:13:a2:bb:79:3b:24:62:4f:92:be:ed:ba:
71:37:3f:14:5a:9a:6b:7e:eb:71:20:ef:1e:b8:cc:
5d:da:2a:f7:55:36:44:e2:f9:99:37:35:78:6e:0b:
3f:55:47:e0:1f:80:17:53:67:bc:ec:55:c9:88:7a:
c5:10:e3:db:ae:27:ba:f7:8b:2a:ef:1b:d1:b6:bc:
8d:4b:71:46:44:8a:b3:f9:78:37:f0:c3:17:5b:ab:
9c:e5:7c:24:42:21:e8:2d:1a:9a:70:5d:84:19:2e:
c1:eb:93:20:e6:7e:86:52:d7:da:b0:16:a1:95:33:
a4:d2:78:1b:9c:f8:c5:37:52:9b:21:c1:9f:55:83:
44:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/1/
RPKI Manifest - URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.211.0/24
94.124.79.0/24
146.19.0.0/24
146.19.145.0/24
IPv6:
2a11::/32
2a11:3::-2a11:7:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8080::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3258
8888
210807
Signature Algorithm: sha256WithRSAEncryption
a1:f1:96:5a:2e:22:2a:ec:09:68:e3:4b:0f:6f:e8:da:0a:b3:
1c:58:b8:d4:d5:d2:d7:13:94:94:62:ba:35:53:47:db:3b:aa:
cf:e5:98:24:ba:74:14:b5:90:ae:1a:c3:51:d4:15:56:9b:01:
8c:b9:73:50:eb:fa:6f:1c:cd:3d:07:38:a6:ba:4e:f6:58:b4:
a2:a4:47:cd:5e:9e:b5:e2:a4:58:7a:50:96:2a:40:32:44:59:
a7:fc:11:bd:b7:87:f3:6f:c2:6d:8c:da:36:2c:4e:ae:3c:0f:
94:47:7f:9a:71:ae:af:68:e0:74:ac:e6:ea:3c:63:83:ed:34:
b8:30:04:96:bb:ee:c4:15:57:4a:9b:a9:95:4e:f3:b8:95:fc:
04:1b:95:7d:74:52:24:64:16:0a:62:bf:6c:89:76:22:c4:31:
37:1a:b7:0d:80:fe:36:33:42:bb:8d:34:c1:d5:43:09:59:fe:
bc:9c:e0:d5:a7:f6:c2:1f:46:06:d4:74:16:16:24:ea:e3:28:
01:fa:b8:61:ad:8b:ad:a1:44:8d:4c:36:7d:bd:80:6b:7b:2b:
a2:58:10:79:b9:b4:15:2c:f6:a8:60:6b:54:27:a1:61:8c:cd:
17:e8:29:f5:29:98:c3:5f:ed:eb:d0:97:5d:b5:99:0c:49:d7:
73:8f:e1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:27:24 2024 by rpki-client on console-ams.rpki-client.org