Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
File: pAoIH7qPsz77RiWe-T9oeNcBUOs.cer (raw, json)
Hash identifier: wjhDbXmubsfEyshkKP1z3t8x6yW3od6OJwijua9aUKY=
Subject key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA9A00A807B01BB46357FDA12471DCD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:35:39 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 25238
IP: 195.234.204.0/22
IP: 2001:678:9a4::/48
IP: 2001:67c:2620::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:00:a8:07:b0:1b:b4:63:57:fd:a1:24:71:dc:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:35:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:42:ed:0c:41:c7:5d:6d:01:2e:a3:13:84:
17:5d:70:11:86:fc:25:49:f1:f7:f0:32:46:52:3c:
fe:0e:73:9c:e6:a0:22:f3:af:ae:19:f0:eb:d1:78:
9b:4b:88:e4:ca:43:dc:ea:ee:59:91:80:b7:63:77:
5b:a1:72:ff:02:7b:8c:3b:be:63:95:be:d5:96:d7:
16:7c:27:f8:00:7b:c9:ae:24:14:91:f8:6c:a5:16:
4e:96:6b:70:09:bc:f9:71:8a:80:b1:e4:7a:94:ec:
dd:4b:40:2b:9b:23:87:d0:d1:95:85:ab:eb:4f:cc:
bb:9c:22:ee:3c:c5:c1:3a:5f:36:a1:17:65:a5:dd:
22:91:c3:a5:ee:ec:08:be:53:d0:06:0f:ea:55:37:
03:b8:47:ef:bf:85:43:4b:81:fd:c2:58:e6:25:1c:
3e:fc:10:4f:88:10:47:48:7d:24:0d:2a:40:a0:ae:
71:86:c3:ff:25:5c:fd:ac:26:db:11:b4:83:7e:e6:
13:0c:84:9e:2a:fa:95:5f:5c:28:5c:3c:ae:a4:33:
bd:cc:d7:93:03:d7:76:96:16:dc:9f:9e:d2:4f:44:
60:0a:f7:d0:88:7a:43:18:98:8f:31:c6:25:88:78:
a4:b4:c1:08:63:10:09:32:7b:6a:0d:cb:1c:0f:ff:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.204.0/22
IPv6:
2001:678:9a4::/48
2001:67c:2620::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25238
Signature Algorithm: sha256WithRSAEncryption
66:c6:b5:40:77:e0:b5:14:16:ff:71:e3:7a:4d:e2:fa:39:7d:
f4:55:fe:80:04:15:2c:1f:0c:e9:12:35:52:6f:7a:b2:c9:b3:
9b:08:c1:d4:9f:b0:bf:f6:80:b6:86:d4:84:66:9d:1f:17:fc:
bb:89:11:f6:89:d9:cf:92:42:0e:27:bd:16:f9:4a:c6:05:e4:
a4:cd:dc:da:04:c5:4d:9e:b1:89:bf:27:9c:63:2c:c2:e6:d4:
3e:e7:76:3a:1c:a1:76:65:0c:67:81:c1:c2:39:1e:b4:c5:54:
ab:45:ba:f1:63:b6:33:8f:89:69:99:e4:cc:5a:64:24:f5:c2:
1b:26:cd:98:4c:94:2a:8f:f3:d6:7b:4d:56:ca:32:2e:7f:d0:
49:87:47:ab:32:ac:a0:6c:7f:32:09:ac:85:ac:fa:07:a1:ee:
99:1f:44:d3:12:45:96:79:c4:1b:3a:11:69:e3:aa:7c:77:ea:
ce:8b:95:36:fc:c7:87:0f:c1:c7:26:e0:b6:d7:05:02:84:d9:
95:37:dc:04:71:c8:24:81:d9:8e:4a:9f:c5:e0:c1:f7:1d:20:
c3:84:3c:0e:e2:b5:c2:fc:46:64:a3:52:0c:8b:e4:fd:ff:ed:
ad:9a:c3:07:07:37:f6:94:91:30:d4:3b:6a:e5:a3:36:fb:10:
36:be:bb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:43:31 2024 by rpki-client on console-fra.rpki-client.org