Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
File: om1GISmD2nHzGuV-WcOeCbM5ygI.cer (raw, json)
Hash identifier: oHvWoma6VgAOnhbTh+ONS9+fOJC+PazIuNowvrj4tRA=
Subject key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D8EF51F5B18BCFBD4C1F0D36C54228
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:48:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47511
IP: 91.206.82.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:ef:51:f5:b1:8b:cf:bd:4c:1f:0d:36:c5:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:e6:18:cb:b0:3b:48:59:37:a3:99:29:63:
28:b6:df:d2:6e:cb:b1:9d:24:44:e1:fd:b2:0b:f6:
a8:5d:c9:81:28:d8:06:50:07:1c:0a:f1:57:4e:a5:
eb:30:52:1b:b7:e3:b3:1d:98:17:a2:cd:3c:a9:bb:
e3:88:d7:49:2e:32:9a:fe:61:ee:68:d6:78:8f:87:
9a:4e:c2:da:d7:95:25:d4:58:2c:ca:45:7d:d4:cd:
a9:11:81:de:cb:26:72:d9:a6:47:47:fd:98:7a:83:
3b:7b:2c:a3:44:43:48:18:a0:37:a2:68:5e:21:81:
73:c5:85:f2:0c:8e:02:d1:04:3d:83:05:ee:18:8c:
fe:4b:c7:98:e7:5e:88:0b:08:1d:b4:45:6f:20:64:
e9:9d:96:89:34:42:6b:bf:f1:e5:4b:e1:03:0a:aa:
71:21:18:fb:a1:d8:e3:ec:f7:6f:5e:09:41:45:7d:
79:ed:37:c2:84:dc:19:94:c9:ec:38:3f:de:62:c2:
ee:c3:f4:18:17:8f:4f:f0:54:5d:06:cf:0e:d1:ff:
86:66:45:cb:35:9a:e4:eb:8c:7b:22:5f:65:af:03:
ae:e9:72:17:e1:33:84:d9:b2:e9:67:4c:0a:44:29:
6b:c9:0f:96:2f:51:9f:f9:4e:26:fe:5a:96:f7:d9:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.82.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47511
Signature Algorithm: sha256WithRSAEncryption
27:c0:6b:7c:2c:61:30:6c:92:8c:53:25:09:fa:e3:b2:cb:89:
5d:52:60:c1:52:30:39:c6:0d:02:5b:86:af:06:41:5e:0a:5a:
bc:19:7e:1d:6c:31:d6:aa:47:97:ad:d3:ff:da:d2:45:35:29:
c1:21:44:e4:eb:cd:6e:04:18:bb:a7:3a:60:69:c8:19:ab:a0:
3c:fe:ae:8f:e4:a7:01:a1:57:e5:2e:23:16:3d:04:e1:48:8f:
ef:fe:b6:90:3d:31:71:9f:61:0d:ed:e2:00:4a:96:30:df:8e:
9a:e4:4b:89:11:e4:6c:f5:ab:a0:84:92:41:11:a0:20:f9:b9:
ec:71:a5:fd:b2:03:c4:a7:5d:56:50:5f:9e:d5:c5:cf:61:f5:
40:a5:46:f4:00:5b:46:4b:85:a9:dd:4b:ca:5c:9a:b8:b8:66:
6a:14:9d:1e:c3:5e:f7:73:1c:e6:21:c3:3e:4c:f4:73:9f:21:
10:82:4c:7c:a9:3d:59:91:b8:33:d3:76:98:b3:4d:f2:ac:db:
22:53:06:2e:c3:a5:32:e9:26:f7:3c:cb:cc:d0:07:e8:44:a5:
c9:7a:dd:3c:b0:b0:b4:d5:2b:7b:ef:be:ec:40:56:0f:2f:4e:
3b:2e:25:41:f6:82:65:85:bd:53:42:2b:1a:a0:df:52:e4:17:
37:d3:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:30 2025 by rpki-client