Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
File: p0xnBuP769_xRqihTsKjKEqSumI.cer (raw, json)
Hash identifier: 1VqUiPMm2mwmGzpZvX3sB+s+ybnQB8L9GuJ3ZdQFV3o=
Subject key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EB807077E52AD8277BD2222840B22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 1836
IP: 80.86.192.0/20
IP: 80.253.80.0/21
IP: 80.254.160.0/19
IP: 81.6.0.0/19
IP: 81.6.48.0/20
IP: 81.221.0.0/16
IP: 82.195.224.0/19
IP: 146.228.0.0/16
IP: 193.72.0.0 -- 193.72.78.255
IP: 193.72.81.0 -- 193.72.143.255
IP: 193.72.148.0 -- 193.72.165.255
IP: 193.72.167.0 -- 193.72.185.255
IP: 193.72.187.0 -- 193.72.215.255
IP: 193.72.217.0 -- 193.73.105.255
IP: 193.73.108.0 -- 193.73.112.255
IP: 193.73.115.0 -- 193.73.121.255
IP: 193.73.123.0 -- 193.73.124.255
IP: 193.73.126.0 -- 193.73.207.255
IP: 193.73.209.0 -- 193.73.210.255
IP: 193.73.212.0 -- 193.73.237.255
IP: 193.73.239.0 -- 193.73.241.255
IP: 193.73.244.0 -- 193.73.249.255
IP: 193.73.252.0/22
IP: 193.193.128.0/19
IP: 194.191.0.0/16
IP: 195.48.0.0 -- 195.49.127.255
IP: 195.130.160.0/19
IP: 212.59.128.0/18
IP: 2001:1b50::/29
IP: 2a01:2a8::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b8:07:07:7e:52:ad:82:77:bd:22:22:84:0b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:ba:6a:bc:bf:98:d4:52:7b:56:d2:83:e2:
91:64:78:40:18:19:aa:d4:57:16:4e:6d:5e:f4:3f:
24:21:9a:d1:98:87:30:91:8b:4b:ba:0a:6d:4a:96:
3a:a9:ac:11:4e:0a:d9:c8:4a:d5:31:f9:bd:b2:02:
1a:f1:f2:d3:d9:5e:7f:07:9c:e9:ed:75:0e:c8:be:
bd:3b:ca:f5:4e:f3:97:a8:20:ea:fb:bc:6b:1c:42:
d8:51:a6:23:c3:b6:64:d0:22:27:4e:02:c2:85:88:
fc:c7:de:8e:f7:c0:30:0a:d0:00:6a:96:37:97:ab:
63:70:f8:03:00:00:3f:bd:bc:25:a5:3b:e6:20:6a:
ea:37:3d:68:4b:0b:53:e3:3d:5b:bf:ce:19:8b:e2:
36:7f:59:b6:ed:e9:17:5a:49:b4:02:d6:9c:7e:df:
16:f2:2d:c6:b6:11:a0:25:21:87:d7:59:b0:60:bc:
2f:33:53:30:fa:a6:e7:00:67:2c:cc:05:33:8b:3c:
33:50:59:14:20:b2:9c:4c:45:ed:7b:c7:3c:1a:7e:
a2:96:53:45:b2:98:3d:df:6d:41:70:f2:0e:14:3f:
c1:0b:ed:bb:34:cf:31:04:e6:36:07:8a:03:81:65:
08:1b:96:95:79:fd:33:17:13:21:31:bb:92:76:8c:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/20
80.253.80.0/21
80.254.160.0/19
81.6.0.0/19
81.6.48.0/20
81.221.0.0/16
82.195.224.0/19
146.228.0.0/16
193.72.0.0-193.72.78.255
193.72.81.0-193.72.143.255
193.72.148.0-193.72.165.255
193.72.167.0-193.72.185.255
193.72.187.0-193.72.215.255
193.72.217.0-193.73.105.255
193.73.108.0-193.73.112.255
193.73.115.0-193.73.121.255
193.73.123.0-193.73.124.255
193.73.126.0-193.73.207.255
193.73.209.0-193.73.210.255
193.73.212.0-193.73.237.255
193.73.239.0-193.73.241.255
193.73.244.0-193.73.249.255
193.73.252.0/22
193.193.128.0/19
194.191.0.0/16
195.48.0.0-195.49.127.255
195.130.160.0/19
212.59.128.0/18
IPv6:
2001:1b50::/29
2a01:2a8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1836
Signature Algorithm: sha256WithRSAEncryption
6e:5b:a8:2b:03:f4:23:97:36:a3:0e:d7:f8:1a:9e:15:d6:b0:
63:6b:96:2e:e6:5f:bc:84:8e:66:9a:20:fd:5b:14:22:be:ac:
c4:cc:7a:21:75:c7:61:3d:75:8d:fb:20:3c:c3:2c:c3:fb:ab:
15:f8:95:a4:f0:cf:4a:a0:04:1d:d6:a7:43:c3:c0:91:8d:14:
26:35:67:77:2d:3d:72:fb:03:6b:7e:25:a2:c1:bc:fb:2a:df:
44:ec:2c:7e:c4:bd:76:ea:61:20:5b:8a:ba:b9:5d:b1:53:90:
2b:c7:98:d2:aa:a7:1b:0e:94:c3:93:64:40:4f:8e:b9:d2:55:
94:e5:da:4e:b3:b2:92:de:b6:77:53:32:ba:89:bb:8a:f8:c2:
9c:75:2d:74:8e:52:77:5d:fe:2e:28:7b:08:80:f3:6b:50:f4:
d0:13:8f:51:13:89:f2:4b:e6:91:ce:33:9e:22:e8:58:28:a0:
61:34:46:0e:ad:d2:2c:14:0e:85:5f:3f:c8:8c:fa:a2:09:92:
74:d1:98:56:96:2b:28:b2:bc:8a:02:1d:75:0c:c4:9c:5b:ba:
f4:92:d0:43:9a:90:e5:33:fb:a4:97:e8:7a:9d:f3:1d:06:63:
38:66:d2:97:b2:4d:cc:7e:71:b2:3d:72:3e:4e:9b:c6:f6:cd:
43:f8:0e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:43:23 2024 by rpki-client on console-fra.rpki-client.org