Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/odUrv7QPmqQ37e8IqB0w6QZjbmc.cer
File: odUrv7QPmqQ37e8IqB0w6QZjbmc.cer (raw, json)
Hash identifier: FRaZ9T1Es60FIa27JkDg7gfKeDpkpWXVBIEeq7izGsU=
Subject key identifier: A1:D5:2B:BF:B4:0F:9A:A4:37:ED:EF:08:A8:1D:30:E9:06:63:6E:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420709453C524645917F7C342059DD4BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://oto.wakuwaku.ne.jp/pki/h/0/A1D52BBFB40F9AA437EDEF08A81D30E906636E67.mft
caRepository: rsync://oto.wakuwaku.ne.jp/pki/h/0/
Notify URL: https://oto.wakuwaku.ne.jp/pki/oshirase.xml
Certificate not before: Wed 01 Jan 2025 05:57:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.116.227.0/24
IP: 2a12:dd40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:70:94:53:c5:24:64:59:17:f7:c3:42:05:9d:d4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:57:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1d52bbfb40f9aa437edef08a81d30e906636e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c0:b3:7a:91:d3:8a:54:58:b3:76:cb:4b:e9:
ac:6c:78:13:42:66:d1:e6:20:b2:3d:d1:6f:e1:08:
66:a2:06:f8:6a:c7:67:91:94:f4:0c:61:cf:97:7d:
65:fa:f0:e3:3a:3b:7f:1e:f6:8a:ff:50:f5:16:b4:
6f:59:b9:5b:eb:52:a6:1c:48:b4:92:c6:0c:ef:85:
dd:c7:c9:66:76:c6:ee:20:85:09:ef:34:ce:0a:fe:
9b:5a:70:b1:ba:fc:c9:cf:23:a2:a4:40:37:52:ee:
e1:2f:28:c5:b6:b9:a1:fe:53:51:19:7c:8e:bd:d0:
f9:df:f0:f0:91:bb:b1:c6:4e:1a:12:bd:9e:d8:3c:
1b:be:74:32:e4:45:fb:06:c7:b2:d3:14:bf:ea:19:
9d:19:b2:91:e1:5e:06:9f:5a:a1:fa:e1:57:fd:4c:
4b:87:ff:64:8f:d8:b1:16:b2:02:76:92:39:6b:bf:
31:39:a1:df:ed:7a:50:a9:4c:ae:56:5f:bf:b5:c7:
1d:dd:10:9f:89:e2:3d:01:7b:e6:16:b7:8b:55:a5:
d8:32:f0:cb:2c:3d:e1:be:9c:fe:d4:13:fd:33:f4:
7e:e2:f5:69:b1:06:aa:3c:25:43:0d:1c:bd:a6:e5:
7c:78:2c:19:96:89:ab:4b:9c:a6:8b:e5:f0:68:7c:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D5:2B:BF:B4:0F:9A:A4:37:ED:EF:08:A8:1D:30:E9:06:63:6E:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://oto.wakuwaku.ne.jp/pki/h/0/
RPKI Manifest - URI:rsync://oto.wakuwaku.ne.jp/pki/h/0/A1D52BBFB40F9AA437EDEF08A81D30E906636E67.mft
RPKI Notify - URI:https://oto.wakuwaku.ne.jp/pki/oshirase.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.227.0/24
IPv6:
2a12:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
0f:5d:36:e8:57:b3:05:c8:50:7c:b2:d9:b2:ed:fc:c7:fc:6e:
da:0f:b9:1e:eb:d0:5a:0e:05:f7:ef:77:f3:1d:8b:e4:db:f7:
1a:97:85:e0:6a:16:04:32:60:5a:77:57:c6:ab:90:7a:78:83:
4e:57:53:e8:63:c9:7c:f2:5e:a4:79:ce:0d:f9:a5:c8:90:60:
83:95:d2:3d:fb:07:a5:e7:f7:0f:a6:6b:29:33:be:30:bf:b8:
0b:bd:70:5a:ce:64:4e:e5:ab:04:f7:d1:ca:18:81:d0:46:2d:
37:af:d3:84:8a:d4:c7:b0:e7:4b:ae:a3:d6:19:ca:c2:a0:08:
56:28:86:39:ed:d3:e3:89:e2:21:92:9c:02:ad:b5:37:cb:8b:
37:88:cb:d0:b4:79:35:c4:e7:50:fc:85:e4:65:87:61:5a:05:
3c:7b:8a:c7:47:92:70:46:90:a0:54:fc:06:e7:64:9f:02:b7:
52:b8:f3:73:0b:7e:33:8d:2b:77:84:00:4d:1a:bf:09:fc:64:
de:9b:0d:dd:c3:06:54:17:84:1c:db:a1:e0:26:7e:48:34:a7:
e8:73:52:3c:b0:14:7a:bd:c4:e8:35:43:80:01:c7:72:b2:0e:
ed:bf:13:d5:a2:f8:80:ce:56:31:d9:35:c5:9a:fc:e6:22:2b:
40:f8:4f:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:52:53 2025 by rpki-client