Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
File: pat5hX5owCBczi8RpTh6avofiJU.cer (raw, json)
Hash identifier: UZDXQVEP+IzLlJ1rgeDsjjzOeD+tI4wPrhF7T1b1x3Q=
Subject key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC0BE8217EE78C630272104B628C4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 206642
IP: 185.179.140.0/22
IP: 2a0a:8780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0b:e8:21:7e:e7:8c:63:02:72:10:4b:62:8c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:73:00:1a:1a:9f:c1:a6:4e:c5:72:f0:95:
90:a2:45:f8:9c:04:e6:d9:a6:ea:3b:3f:2b:e4:88:
25:67:ac:8d:12:bb:a7:48:a4:f6:e6:5a:22:ba:a6:
fb:af:86:f6:4e:62:10:f0:05:37:a2:0d:67:ac:da:
66:4e:65:e1:66:a1:a0:e1:33:28:5d:ea:e4:64:39:
35:2c:a8:c3:ac:5a:31:c4:fc:f5:ed:08:3c:c6:b8:
fa:d5:ed:61:92:c8:01:d1:49:cd:8b:ae:8f:3d:42:
84:3a:e0:72:92:4b:d7:59:8d:28:d0:bb:f0:d5:27:
cd:c4:76:35:8c:a2:84:7a:0e:99:07:3d:5a:ef:53:
fa:f3:55:a1:85:c9:23:36:fa:ef:fd:c0:27:41:9b:
18:0a:5e:a6:8f:47:4c:94:11:17:20:3a:42:3c:14:
81:b5:f3:70:b7:bb:a9:3d:01:be:b2:31:85:9b:e8:
ed:3a:55:34:26:d8:14:98:46:f5:39:5d:e7:cd:2d:
5f:0c:49:78:3b:39:4e:8e:17:a5:47:2a:ce:b2:1c:
b0:a1:07:11:f3:b6:4e:f9:c6:43:68:83:af:a7:36:
ac:25:98:ef:49:2e:f5:bb:7f:a9:84:87:a7:e9:02:
1b:0b:fb:c6:42:f3:4c:ca:a5:45:27:d8:97:77:c6:
4a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.140.0/22
IPv6:
2a0a:8780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206642
Signature Algorithm: sha256WithRSAEncryption
00:95:09:8e:bb:68:11:3c:4b:79:46:a1:5b:fe:dc:90:4b:00:
4b:91:2e:dd:b1:93:11:0e:e6:0e:0c:cc:77:fd:c0:6a:57:4f:
9c:c2:82:1a:e1:6b:4f:09:d2:df:36:84:47:c7:6f:d8:5d:e2:
5a:b1:a8:37:f5:1d:77:75:a1:fe:42:3b:82:be:2c:1f:83:ca:
6a:94:90:3e:00:ae:02:e5:f1:a3:ae:94:19:6e:6e:f6:21:8c:
dc:3d:fb:cf:77:0f:e2:d8:5e:f2:00:ed:ab:bc:5a:a6:8d:30:
5a:4b:74:b5:c7:a7:8b:22:e0:7d:69:d3:74:0d:1c:78:84:60:
58:ac:59:7f:f3:10:5d:43:b6:bc:81:d4:05:95:62:16:8a:ad:
97:4c:30:40:41:06:ab:86:fe:d8:de:fa:8a:a3:8c:87:a0:34:
66:3d:f0:1c:7c:83:7c:d1:d0:f0:b9:79:df:32:a3:2a:b8:d9:
8c:b5:c1:76:93:6d:b9:ab:aa:13:fa:5a:23:08:65:60:74:85:
02:75:e6:54:c6:f2:3e:e7:5a:1b:59:54:ab:71:29:ff:e3:8e:
af:fb:90:65:48:df:ae:aa:55:5b:6c:eb:ed:e7:d2:4d:14:87:
7c:9c:aa:f8:d1:10:41:58:97:28:c5:3d:6f:0d:ba:9c:72:01:
d7:53:43:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:14:44 2024 by rpki-client on console-ams.rpki-client.org