Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.cer (raw, json)
Hash identifier: ksU2l/hNh50J73wuSRVhdI1fgVQzqdQFacmlDfIcmWg=
Subject key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50137E476E8E21A8BE353D60965CB14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 47630
IP: 185.174.4.0/22
IP: 2a0b:7900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:37:e4:76:e8:e2:1a:8b:e3:53:d6:09:65:cb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:b2:c1:9b:4e:2c:f0:6d:46:0d:75:28:51:
52:e7:e7:6c:6a:bf:48:14:8c:b1:a6:2b:bc:ab:a6:
d5:a5:42:44:2d:c0:18:69:bf:a5:2b:ec:07:7e:5f:
c3:ab:df:ac:ae:7b:b2:48:5e:1a:fa:19:e7:f6:ae:
db:2d:42:6c:dd:bd:d3:5c:fa:ee:eb:b4:25:3b:27:
60:f6:c4:68:24:3c:20:84:85:7f:d4:19:f7:f7:21:
c3:70:59:ee:7f:2c:8d:95:13:24:e2:ed:0c:eb:c1:
0c:b3:0c:ba:62:0c:35:b5:f8:09:a6:e8:2b:65:d2:
0a:c0:21:95:1d:98:55:6f:d0:dd:b1:ed:fc:70:cd:
b3:48:4a:a4:95:c9:c9:e9:e4:d5:3c:2e:51:0a:46:
c2:0f:51:f4:ff:08:c7:c2:cb:88:a9:e1:5f:3b:ff:
54:54:40:11:f7:29:cf:a4:06:de:98:6d:c5:e3:c4:
1c:b8:88:8f:c1:f7:ee:06:a8:d4:c0:f9:5b:3e:82:
c3:a6:99:bc:52:75:0b:4b:ff:83:1e:ee:26:f3:86:
a8:fa:2e:68:bd:04:d1:48:58:bf:cc:47:82:51:d6:
f9:a5:d3:c8:9a:14:56:db:af:86:8e:dc:47:18:93:
54:b4:66:b1:ab:cc:de:ca:cc:fb:82:f4:d9:02:c5:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.4.0/22
IPv6:
2a0b:7900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47630
Signature Algorithm: sha256WithRSAEncryption
9f:e3:25:ea:5f:cc:fb:d6:01:6a:93:29:98:fd:c3:d4:63:e5:
f7:0e:62:65:ea:4b:91:2c:d5:de:32:a8:bc:2b:94:b0:0d:62:
07:0e:00:a8:90:42:48:a2:90:24:de:13:d5:82:f5:eb:13:c0:
32:59:28:39:f7:c2:1f:8f:d3:04:bd:30:39:ed:2a:b4:1a:42:
f1:ae:0e:66:d8:0b:cf:c8:91:66:49:32:44:23:f1:97:56:26:
ef:57:6a:16:e9:73:1b:a9:58:4f:ff:44:19:5d:2d:ee:ab:f9:
1b:6b:2b:11:8f:ac:2d:13:a8:76:c1:f0:93:11:c1:f9:50:4b:
a0:60:e3:50:d3:d5:d7:eb:d2:94:92:8c:73:ca:18:36:4d:7e:
85:07:8d:1d:f9:56:21:f2:bd:42:0b:63:da:9d:36:cf:0a:84:
ac:28:0e:b8:43:a8:12:e8:02:25:e4:14:3b:7e:24:d0:2b:02:
3f:3d:e3:24:ea:d5:b2:5d:d1:de:d2:04:37:ed:b2:b3:0a:87:
1b:44:6c:b7:85:97:be:2f:33:94:37:00:ee:d6:ff:80:0b:9b:
7a:f5:68:cc:7a:7d:ed:71:b9:1f:48:04:c2:f9:f3:3e:1b:6e:
4a:3b:3d:1e:95:46:aa:32:56:a2:c4:00:b9:41:c5:a5:4e:0f:
46:0d:8b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:14:20 2024 by rpki-client on console-ams.rpki-client.org