Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
File: oktI7cejJdfxrg8lfA4oNRcbya4.cer (raw, json)
Hash identifier: gN02jWyLSc8vpur8T7vr58T+oVBZF54lpIH8ujPSGWw=
Subject key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DADEA4F4CF6E177F94BF7BBA0DAF91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 39704
IP: 5.22.248.0/21
IP: 46.182.216.0/21
IP: 91.192.36.0/22
IP: 94.124.88.0/21
IP: 185.1.190.0/24
IP: 185.94.168.0/22
IP: 185.103.16.0/22
IP: 194.50.163.0/24
IP: 195.216.246.0/24
IP: 213.132.192.0/19
IP: 2001:7f8:104::/48
IP: 2a00:1bd0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:de:a4:f4:cf:6e:17:7f:94:bf:7b:ba:0d:af:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:68:e9:f4:01:3f:d0:fd:91:48:ea:44:cf:
26:c5:bd:95:5b:ba:e5:82:e0:14:39:9f:5c:e2:f1:
a6:ba:42:c0:bd:4e:9d:c4:af:b4:b7:9a:ae:e4:4f:
03:59:b8:64:83:b6:79:43:09:fc:1c:85:4b:3a:9b:
4a:61:d0:ce:14:ad:52:6d:1e:6d:a2:6e:65:79:38:
0f:5d:db:98:d7:1a:19:1f:3a:23:29:72:a5:25:36:
75:60:42:ff:6d:71:ce:26:fe:eb:6f:c5:45:49:91:
48:b8:76:e9:cb:df:c7:f1:25:df:68:fa:3f:17:61:
74:1a:a9:b9:d1:19:46:93:90:97:c2:db:63:c2:5f:
8c:b0:1d:19:0c:bb:b9:37:7b:89:c4:ae:4f:3f:30:
d5:13:40:bc:25:e9:a8:26:89:17:e0:e5:d1:7a:b7:
b8:55:e3:a2:6b:b3:e6:bc:ef:cf:c9:eb:83:f1:2f:
2b:fe:65:8c:cc:a0:2c:48:ce:18:13:e9:52:af:8a:
ad:29:6c:73:18:90:45:29:41:e7:67:f6:74:1f:fb:
27:f1:cf:ab:7f:3f:06:71:4a:a5:31:97:a9:b6:05:
29:67:98:8b:2b:5b:e4:0e:96:54:f7:f7:8e:fb:7a:
4c:7b:68:87:fc:0e:ed:cf:46:86:57:b9:8e:da:c0:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.248.0/21
46.182.216.0/21
91.192.36.0/22
94.124.88.0/21
185.1.190.0/24
185.94.168.0/22
185.103.16.0/22
194.50.163.0/24
195.216.246.0/24
213.132.192.0/19
IPv6:
2001:7f8:104::/48
2a00:1bd0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39704
Signature Algorithm: sha256WithRSAEncryption
ad:74:56:bb:4e:5b:c4:30:ad:66:93:66:51:2a:26:c3:57:9c:
70:f7:5f:85:9e:e5:9b:e9:07:e7:a8:ff:64:b9:3b:0a:07:bf:
c9:ca:b6:83:79:c9:a0:31:56:89:54:49:98:0b:ed:7b:3d:75:
85:68:41:cf:e3:a8:68:bd:12:76:e5:3b:97:28:01:32:f7:10:
d3:c7:8e:b2:09:41:49:fb:18:69:a1:91:4e:25:6f:88:35:ff:
00:ef:85:75:ae:b1:86:db:8c:c4:11:bb:23:b8:13:e2:a0:f8:
01:23:80:5f:14:5a:fe:e9:61:5f:40:69:c9:32:9b:f7:e2:4e:
e2:a4:45:39:63:7f:77:81:2b:c3:0c:74:03:89:e1:49:6f:db:
5d:74:a5:b8:bc:9b:db:25:26:e3:65:69:68:6f:53:53:0b:2a:
0b:1e:6a:ae:d3:fe:99:f9:f5:fb:93:a7:e8:f0:58:89:84:90:
0b:d0:20:9d:09:6e:b5:08:ab:3e:f6:cd:0d:bc:dc:16:4e:d1:
01:1e:b0:b5:64:4f:93:04:8f:3c:42:14:77:7d:50:7d:48:6e:
36:3f:59:12:d6:14:db:25:27:ed:4a:e1:7c:73:80:38:0b:94:
86:03:70:13:3b:d3:40:c3:c4:1f:4f:3d:3a:ed:a4:a6:31:6b:
c2:5e:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:36:55 2024 by rpki-client on console-ams.rpki-client.org