Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l2lJAzf2c8ZOORJK6JgbA05QEno.cer
File: l2lJAzf2c8ZOORJK6JgbA05QEno.cer (raw, json)
Hash identifier: n6jBMqRNW6XxD6kQlPhIDI5gLOXGq2MSyfZ139732pI=
Subject key identifier: 97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B59A92A447808117E604579B5CA9B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197599
IP: 91.223.221.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9a:92:a4:47:80:81:17:e6:04:57:9b:5c:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9769490337f673c64e39124ae8981b034e50127a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:66:66:37:67:86:11:3a:b8:fe:20:96:44:
53:6c:ef:bb:d9:d1:2c:65:67:bc:d9:db:e2:00:77:
e9:d1:2f:eb:3c:c2:6e:89:76:9b:d6:fb:9a:ca:1d:
82:6c:98:5e:5c:2e:a3:1d:d0:4d:1f:ff:96:ba:5c:
73:c1:66:1c:4d:f2:8c:47:8f:f8:de:18:e2:95:2c:
0e:4a:b8:e2:68:b7:c7:d2:09:ca:a7:92:46:c2:e7:
4e:c0:29:bd:27:79:0d:0d:e0:6a:40:81:3a:ee:03:
6a:05:fa:0c:98:60:f2:37:b5:d2:ed:67:39:c7:52:
cf:65:61:1e:07:a6:1b:9c:7f:75:f7:25:1f:4f:c7:
aa:04:25:fe:81:8e:37:5e:a9:b4:44:60:6c:7a:4f:
9e:a5:47:97:52:e2:69:3d:fe:56:5e:ce:70:1c:99:
2c:0f:a5:c7:c4:59:43:80:27:4f:c6:66:b9:6d:a6:
87:ad:f0:3f:7a:f8:74:98:0d:77:13:11:9e:5b:11:
c8:1e:b4:99:c5:4e:bc:3b:a8:3e:2f:d0:3b:13:f1:
68:0f:73:f7:f9:6d:aa:82:d9:6f:26:17:f7:bd:33:
d1:7f:35:81:ba:1d:63:5a:9d:80:0d:e2:be:5a:3e:
01:48:06:3e:0d:5e:60:73:2e:33:55:62:3e:06:bd:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:69:49:03:37:F6:73:C6:4E:39:12:4A:E8:98:1B:03:4E:50:12:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c87b76-1b8a-4b8a-b47c-c123f76628cb/1/l2lJAzf2c8ZOORJK6JgbA05QEno.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.221.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197599
Signature Algorithm: sha256WithRSAEncryption
a1:79:f5:d3:0c:3b:41:26:d6:4b:08:15:9e:7a:24:ea:1f:e7:
ad:05:ec:fa:ad:6c:a4:67:74:31:17:bd:1c:1f:1d:41:e9:92:
ba:42:11:b4:49:65:60:53:0b:bf:80:27:a1:d4:67:ae:4e:18:
c9:c3:0f:f4:00:6a:4d:db:5d:01:62:e9:84:3b:15:1a:87:45:
42:d7:00:62:38:4c:81:da:8a:82:f1:e6:ef:25:d9:2c:d0:45:
c4:9f:92:69:f9:0c:43:27:45:1b:3c:19:e7:c4:71:da:80:8d:
78:bd:91:d3:61:9b:43:31:ca:2c:9a:b4:95:78:cc:51:75:23:
70:4e:da:9c:56:a9:ea:be:53:5b:9a:67:58:f3:7c:4c:3a:02:
8a:fe:f7:3e:f5:94:fa:a6:22:10:fb:9a:35:e9:49:69:d1:e8:
7a:8c:24:52:6e:d2:2f:50:45:fa:31:6d:52:1b:58:84:ab:f9:
50:82:d7:2c:56:6c:01:aa:38:38:ef:71:c4:22:aa:91:0f:62:
2d:c4:4f:bb:39:f0:c1:14:94:87:9c:c0:8f:97:fc:ab:5d:5f:
19:80:a3:24:8f:2b:45:a1:17:08:f7:e9:21:44:3c:ce:08:4e:
a5:65:9e:11:a8:c8:49:99:ed:a0:57:8f:7b:85:d6:cd:37:02:
f7:3f:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:01:28 2025 by rpki-client