Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.cer (raw, json)
Hash identifier: DlB/s4h5ydYgDDPGZRiUE7jGUNRqVC8ytOvP6J84/1Q=
Subject key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DFA0D4D29B8C9DB839E233FE849ABD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209975
IP: 212.60.8.0/22
IP: 2a09:800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a0:d4:d2:9b:8c:9d:b8:39:e2:33:fe:84:9a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:ca:5c:e0:89:ab:f8:3d:42:c8:b9:65:10:
db:5c:87:7f:41:2e:35:bc:7b:1e:9a:03:93:25:ea:
11:82:92:bc:dd:ff:61:14:d1:45:58:1c:8d:5a:73:
ff:12:71:5e:dc:b8:49:e5:b6:67:03:58:c2:88:7e:
b4:e5:5b:4b:fb:a7:e0:2f:3c:a9:39:39:4e:9f:b5:
a8:b8:41:c8:d6:48:db:8b:7b:f0:0e:b6:ec:3f:43:
59:2a:43:27:a6:c9:42:43:84:93:6a:0c:dd:7b:f0:
f9:9f:bc:f4:9b:fa:a9:e8:42:c4:86:fb:d2:70:f9:
75:3b:81:2b:bf:4a:83:3f:64:6b:74:55:11:5e:8b:
36:93:09:ff:5f:de:32:7d:76:a4:f4:a1:d9:d0:5b:
01:6a:92:5f:c2:c2:2b:e0:7b:26:e7:c0:a3:88:b7:
4a:c5:38:0c:ad:15:1d:ec:28:88:51:1f:43:b5:b0:
5b:83:53:fc:51:67:4e:c3:3b:4b:4d:10:b5:9f:93:
3d:ef:ad:f3:ec:9b:8a:65:da:d8:b7:4d:3d:91:ca:
5c:bf:58:55:9a:8b:92:7c:c9:20:08:6c:d1:da:21:
4b:10:41:a2:b9:68:c6:69:05:0c:23:cd:a6:fd:92:
b6:c1:24:8b:b8:6f:80:22:d6:e0:37:2d:d1:de:49:
2b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.60.8.0/22
IPv6:
2a09:800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209975
Signature Algorithm: sha256WithRSAEncryption
10:d7:1c:18:de:28:c4:09:e6:2f:92:4f:6e:66:cb:f1:12:34:
06:a5:4b:50:fe:90:42:2d:d5:69:c6:c1:08:1e:f5:a4:5a:dc:
d6:e6:fc:e6:7f:db:fd:8a:55:40:07:b9:66:34:30:bf:62:64:
05:08:a6:7c:cf:ba:22:ea:26:78:ba:0a:97:25:23:a2:52:c3:
20:cb:43:1a:85:25:ba:a2:48:9f:94:0b:90:e9:6d:2a:1d:66:
59:11:4f:df:f1:24:9f:81:6b:34:bc:e9:a6:f0:71:fc:0b:fe:
3e:aa:b1:58:ec:bc:50:00:48:d3:54:22:f7:34:3c:a5:ab:a1:
43:a9:41:ba:71:4b:a8:43:e9:2a:d4:36:9d:c1:4b:bb:83:6b:
7c:63:4c:f0:91:1b:26:e9:c2:2f:2d:fd:8e:45:96:dd:a7:6f:
0f:67:b3:74:65:cc:36:e0:18:34:45:90:d6:fb:b9:ab:91:8d:
e2:c1:73:45:1b:8f:4e:94:3a:f8:f0:91:ce:47:25:83:f9:8c:
f7:4e:da:5e:3c:92:25:14:de:06:c2:01:08:cf:cc:f6:53:c3:
f5:5a:4b:0a:15:f8:1d:d6:f8:a9:57:d5:7b:03:12:3a:2a:3e:
95:56:86:3f:33:f4:70:2d:07:a9:10:d9:3f:e0:7b:b5:3f:26:
bb:18:ed:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:43:01 2024 by rpki-client on console-fra.rpki-client.org