Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oLalsaFMhtTPtGxOhuzUBmgEzJA.cer
File: oLalsaFMhtTPtGxOhuzUBmgEzJA.cer (raw, json)
Hash identifier: eIIQV0rvyMllPgdhRiaZh0u9j4FUWvVlKU5T7Mmd7i0=
Subject key identifier: A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D44AFD6A5E2DD67E78B286CCFAE2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:50 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39812
AS: 49965
IP: 5.44.0.0/20
IP: 78.139.64.0/18
IP: 89.107.112.0/21
IP: 109.202.32.0/19
IP: 130.255.32.0/19
IP: 185.12.252.0/22
IP: 185.106.56.0/22
IP: 185.137.160.0/22
IP: 2a03:58c0::/32
IP: 2a0f:1d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:44:af:d6:a5:e2:dd:67:e7:8b:28:6c:cf:ae:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0b6a5b1a14c86d4cfb46c4e86ecd4066804cc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:e0:c4:c6:83:2d:db:62:83:46:d6:ec:ed:
22:24:f5:2c:2a:7a:fc:de:4e:22:d2:78:18:18:3c:
a5:69:19:e8:57:22:6c:fe:9f:ad:02:54:95:6b:97:
5a:51:cd:bb:59:18:45:8f:c6:f7:15:95:a6:84:7e:
d9:3a:a4:9f:36:d8:a9:5d:95:cf:87:09:1c:1d:2f:
e0:bc:4a:e3:17:29:07:b8:a2:91:b4:0d:9c:3f:bd:
01:b9:6a:26:9a:88:2f:b3:1e:9e:2d:24:3d:3c:3e:
5a:8e:59:6c:de:a3:e1:29:77:23:c2:5e:62:8b:3b:
cc:7f:49:93:0a:76:2a:f2:80:33:b2:5f:75:dc:56:
9b:6f:d4:0b:78:aa:0a:21:5f:e1:73:e0:81:21:8a:
6b:8d:4c:b0:07:e9:1f:d8:38:91:2e:92:84:b3:04:
92:e3:42:75:67:f3:f5:92:9f:12:53:3e:dd:5b:44:
19:8b:1f:8c:ca:72:6f:db:90:16:2f:92:89:35:b5:
99:aa:95:b0:86:13:fd:dd:86:62:c4:50:7e:4e:93:
a9:ec:60:fe:c5:21:96:16:a1:6a:9f:94:16:43:7e:
21:d8:a3:de:93:c9:ce:f1:de:60:d5:fb:24:5c:bd:
6c:ac:be:e5:0f:17:83:df:e0:63:9c:61:36:99:ed:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B6:A5:B1:A1:4C:86:D4:CF:B4:6C:4E:86:EC:D4:06:68:04:CC:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e1fb52-979d-4436-be51-8584bef0b7d5/1/oLalsaFMhtTPtGxOhuzUBmgEzJA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.0.0/20
78.139.64.0/18
89.107.112.0/21
109.202.32.0/19
130.255.32.0/19
185.12.252.0/22
185.106.56.0/22
185.137.160.0/22
IPv6:
2a03:58c0::/32
2a0f:1d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39812
49965
Signature Algorithm: sha256WithRSAEncryption
5f:fd:d5:8d:8c:fb:ae:b6:27:ca:68:ba:71:e4:a2:86:a6:71:
80:6e:ee:9b:b3:58:e4:26:93:47:ce:af:ef:b7:eb:2c:b8:84:
b1:87:52:20:12:6d:f0:65:b2:e8:83:c2:1b:35:de:df:4f:73:
37:14:a7:68:d9:e8:ef:af:13:00:bb:25:2b:06:5b:a6:cb:38:
a3:c6:6b:9f:94:77:71:d3:9f:23:ca:5a:0e:d4:2d:02:64:61:
fc:ba:f0:9f:ca:35:77:48:66:f1:6a:70:82:ac:7b:c9:5e:7e:
cc:ac:35:2f:16:b6:02:53:ca:c0:0d:7b:f7:36:73:e6:82:8b:
10:7a:36:22:f4:af:d2:0e:1b:f7:3b:0f:c4:0f:88:e2:0d:a3:
9c:10:42:c2:54:f0:f3:68:6d:87:62:e8:13:65:90:3f:89:db:
59:90:5f:62:0d:1b:8b:40:da:36:ea:c9:6d:71:28:8a:2f:1b:
98:f5:b8:87:52:f6:ec:b1:96:35:f7:cc:0e:ee:c8:7a:07:3d:
ee:27:d2:ab:10:c1:ec:b5:a6:4b:19:cb:a1:1b:12:1c:d7:9f:
47:9f:70:2d:15:a7:92:fe:0e:81:c2:e0:ac:b5:39:9f:e3:68:
34:40:08:ff:22:f9:72:7a:4d:cf:cf:7e:36:3a:6e:b5:1e:1b:
f0:9f:d7:e0
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgISAYzCbUSv1qXi3Wfniyhsz64rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGI2YTViMWExNGM4NmQ0Y2ZiNDZjNGU4NmVjZDQwNjY4MDRjYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcrgxMaDLdtig0bW7O0iJPUsKnr8
3k4i0ngYGDylaRnoVyJs/p+tAlSVa5daUc27WRhFj8b3FZWmhH7ZOqSfNtipXZXP
hwkcHS/gvErjFykHuKKRtA2cP70BuWommogvsx6eLSQ9PD5ajlls3qPhKXcjwl5i
izvMf0mTCnYq8oAzsl913Fabb9QLeKoKIV/hc+CBIYprjUywB+kf2DiRLpKEswSS
40J1Z/P1kp8SUz7dW0QZix+MynJv25AWL5KJNbWZqpWwhhP93YZixFB+TpOp7GD+
xSGWFqFqn5QWQ34h2KPek8nO8d5g1fskXL1srL7lDxeD3+BjnGE2me2cYwIDAQAB
o4IC5TCCAuEwHQYDVR0OBBYEFKC2pbGhTIbUz7RsTobs1AZoBMyQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk0L2UxZmI1
Mi05NzlkLTQ0MzYtYmU1MS04NTg0YmVmMGI3ZDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQvZTFmYjUy
LTk3OWQtNDQzNi1iZTUxLTg1ODRiZWYwYjdkNS8xL29MYWxzYUZNaHRUUHRHeE9o
dXpVQm1nRXpKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF
BwEHAQH/BFAwTjA2BAIAATAwAwQEBSwAAwQGTotAAwQDWWtwAwQFbcogAwQFgv8g
AwQCuQz8AwQCuWo4AwQCuYmgMBQEAgACMA4DBQAqA1jAAwUDKg8dADAfBggrBgEF
BQcBCAEB/wQQMA6gDDAKAgMAm4QCAwDDLTANBgkqhkiG9w0BAQsFAAOCAQEAX/3V
jYz7rrYnymi6ceSihqZxgG7um7NY5CaTR86v77frLLiEsYdSIBJt8GWy6IPCGzXe
309zNxSnaNno768TALslKwZbpss4o8Zrn5R3cdOfI8paDtQtAmRh/Lrwn8o1d0hm
8Wpwgqx7yV5+zKw1Lxa2AlPKwA179zZz5oKLEHo2IvSv0g4b9zsPxA+I4g2jnBBC
wlTw82hth2LoE2WQP4nbWZBfYg0bi0DaNurJbXEoii8bmPW4h1L27LGWNffMDu7I
egc97ifSqxDB7LWmSxnLoRsSHNefR59wLRWnkv4OgcLgrLU5n+NoNEAI/yL5cnpN
z89+NjputR4b8J/X4A==
-----END CERTIFICATE-----
Generated at Fri May 3 08:17:47 2024 by rpki-client on console-fra.rpki-client.org