Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
File: lOb0czAsajyJ33uJMsVryEHLX6w.cer (raw, json)
Hash identifier: zgrz/EHr3h1lyp4QDjEhVPk/GzhNx2JYF0WpqShmyks=
Subject key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4936E19107B6655A7C4B940C4D23BC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 203170
IP: 185.77.188.0/22
IP: 2a05:5f00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6e:19:10:7b:66:55:a7:c4:b9:40:c4:d2:3b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:1a:9b:2e:d5:51:74:c6:45:8b:73:84:a1:
05:32:9f:bb:7e:eb:d8:69:39:9c:64:c6:b3:91:52:
eb:fe:e6:ad:01:0d:d2:ee:c7:a5:e1:2f:47:65:de:
b1:e5:0f:e4:5a:ea:b6:dc:83:9a:99:f3:17:4e:37:
2c:ee:b8:65:9c:c9:ba:e3:53:5c:63:02:3d:b7:f3:
f6:29:da:92:f1:80:dc:13:10:ea:97:64:1b:ca:66:
7e:51:69:a5:fb:90:47:e3:69:4e:aa:1b:f3:d6:02:
c8:42:df:75:b0:68:1c:8f:b2:81:1d:f6:ac:5c:f0:
b9:44:4c:fa:40:47:15:ec:e2:96:dd:ad:2b:8f:cc:
1d:39:2b:4e:7d:02:39:2e:1a:e7:e2:c6:f5:fd:d4:
1d:e4:1e:47:38:2b:db:7d:e3:10:27:78:92:c7:f4:
c4:40:2a:2b:e7:8f:de:ba:12:fb:b9:92:3a:f9:d7:
b1:13:68:7c:0d:3c:9a:d3:12:a2:16:30:ac:ce:95:
53:ad:b0:21:d2:cc:b5:58:05:51:6b:40:04:4e:89:
23:f7:6c:63:9c:ab:6a:04:a6:5e:48:af:1c:18:8a:
ec:28:f9:3d:dd:63:25:fb:b1:51:68:e4:91:40:64:
c5:d6:30:f5:9b:95:dd:af:de:bb:95:e5:1e:b2:fc:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.188.0/22
IPv6:
2a05:5f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203170
Signature Algorithm: sha256WithRSAEncryption
73:ae:38:28:2a:d9:6c:24:e5:05:3a:8b:af:fb:9e:5b:66:af:
eb:ed:13:5a:73:a6:62:f8:55:fb:24:3c:0b:b3:d2:fc:96:63:
f9:30:9a:ec:ff:67:7c:5f:b1:ea:da:37:cc:bb:4f:92:e5:a5:
55:4b:6b:c4:fb:8b:0a:94:2c:73:74:7f:0a:2b:34:03:f5:d4:
85:48:52:f4:12:45:f1:a1:78:a4:19:38:cd:2a:ff:1a:cc:92:
ca:19:4f:97:84:a6:af:d7:0d:e4:8f:3c:8a:fb:00:f2:14:60:
60:62:46:63:b3:64:4a:7e:2b:00:8a:1c:94:a6:36:86:bf:72:
96:83:93:9d:7c:97:13:2b:a1:4e:67:fd:53:03:e6:32:8b:e9:
1b:fa:89:bb:3a:1c:e9:3c:cb:aa:a8:92:22:ee:68:5e:57:d0:
c2:41:44:aa:7c:28:9e:02:96:a6:05:3e:9f:1f:85:37:5e:c8:
1d:fe:f4:31:14:7c:76:c2:d5:7f:ed:db:dc:0b:ce:5f:66:35:
7f:7b:34:19:8f:72:56:9f:dc:65:1a:a6:52:c2:f8:ff:2c:d7:
cb:73:60:e2:3b:c9:7f:75:2a:02:41:fd:59:b7:93:4a:43:2f:
ee:8f:04:d7:ad:a5:35:67:0c:9f:ad:55:5b:e2:b1:7f:a2:c4:
bb:0f:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:57:57 2024 by rpki-client on console-fra.rpki-client.org