Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
File: qdvUwWus1i0mMqoeF7LozQEA1oQ.cer (raw, json)
Hash identifier: 3/7eDvr5f29OJhdIGN1gUttoN1c2m/z9QIfAqFUmBK4=
Subject key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7262138D8E0AD4E61BFA51EFC850206
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:30:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51167
IP: 5.189.128.0/18
IP: 62.171.128.0/18
IP: 75.119.128.0/19
IP: 79.143.176.0/20
IP: 80.241.208.0/20
IP: 91.194.90.0/23
IP: 91.205.172.0/22
IP: 95.111.224.0/19
IP: 109.205.176.0/21
IP: 144.91.64.0/18
IP: 161.97.64.0 -- 161.97.189.255
IP: 164.68.96.0/19
IP: 167.86.66.0 -- 167.86.127.255
IP: 173.212.192.0/18
IP: 173.249.0.0/18
IP: 178.18.240.0/20
IP: 178.238.224.0/20
IP: 185.2.100.0/22
IP: 193.34.144.0/23
IP: 193.37.152.0/24
IP: 193.164.131.0 -- 193.164.133.255
IP: 193.200.241.0/24
IP: 194.163.128.0/18
IP: 207.180.192.0/18
IP: 213.136.64.0/19
IP: 2a02:c200::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:21:38:d8:e0:ad:4e:61:bf:a5:1e:fc:85:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:e1:c0:0f:b0:75:89:b2:9a:a5:3b:0b:46:
49:0d:2a:a8:a5:5a:7a:51:83:5a:d7:df:13:b5:c9:
1d:70:fd:15:96:f2:5e:be:c1:27:05:81:f4:d1:c6:
00:19:d8:73:0d:aa:20:66:fd:d2:45:4e:f4:26:dd:
4b:f7:35:8b:eb:b6:17:e3:13:16:0a:a0:82:eb:0d:
5b:32:ae:c7:63:68:9b:1a:dc:49:d8:3e:da:0f:95:
22:43:e1:b3:b6:e2:1d:40:65:d1:3b:6c:85:93:3c:
68:1c:5b:63:78:a0:be:bc:1f:2a:56:32:a9:32:f9:
49:bc:f2:a6:10:6c:9c:86:a3:44:d4:11:1b:98:a8:
26:be:2b:bf:df:91:20:e4:f7:e1:dc:c7:6b:6e:42:
f6:1e:90:c5:7a:db:70:a2:a1:d5:0b:67:fe:16:f3:
f4:7d:75:2d:19:9d:cf:1d:f8:c7:fa:47:82:d8:54:
f5:c2:bc:e3:ea:70:27:d2:06:50:94:04:65:49:9c:
1d:58:1e:83:36:bd:6e:42:8c:3f:13:4a:43:07:c2:
ee:81:dd:ed:81:7b:85:a1:33:7e:86:30:ef:54:4a:
06:70:a8:64:f7:96:8c:aa:45:03:d0:41:d9:dd:46:
f0:28:d8:ec:8f:79:aa:91:3f:19:e1:63:74:8b:03:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.189.128.0/18
62.171.128.0/18
75.119.128.0/19
79.143.176.0/20
80.241.208.0/20
91.194.90.0/23
91.205.172.0/22
95.111.224.0/19
109.205.176.0/21
144.91.64.0/18
161.97.64.0-161.97.189.255
164.68.96.0/19
167.86.66.0-167.86.127.255
173.212.192.0/18
173.249.0.0/18
178.18.240.0/20
178.238.224.0/20
185.2.100.0/22
193.34.144.0/23
193.37.152.0/24
193.164.131.0-193.164.133.255
193.200.241.0/24
194.163.128.0/18
207.180.192.0/18
213.136.64.0/19
IPv6:
2a02:c200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51167
Signature Algorithm: sha256WithRSAEncryption
68:e8:fb:72:e3:85:eb:bb:15:25:39:85:83:66:a1:9e:c5:3c:
c7:06:a3:01:79:4d:af:06:12:a9:26:5c:5c:d0:4e:c9:78:86:
6f:d4:4a:7c:2c:8a:0e:e6:0d:0a:14:7a:de:90:97:fc:3b:e5:
b8:88:69:d7:79:0b:dd:ea:4e:f5:96:43:63:d7:6f:26:a8:29:
14:b4:89:5c:dc:88:fa:04:a8:aa:61:71:fb:59:27:de:b9:82:
21:3f:db:0f:8b:5a:94:28:8b:f8:a5:fd:c7:06:b5:34:7a:91:
d8:34:98:72:cd:0e:97:a3:3c:46:5a:c6:c4:02:7d:d0:3b:67:
2e:06:49:38:58:0e:24:42:80:70:cf:6c:04:ed:12:db:2d:a5:
29:70:22:07:b5:05:0a:44:c1:2d:44:98:ab:87:f2:12:2e:95:
20:2d:bc:9d:bf:ac:10:71:44:7a:da:d8:7b:49:b1:05:b8:ed:
6c:03:f0:23:30:a7:d0:23:96:b7:02:f5:3f:07:a7:1f:fb:54:
e2:87:bf:f7:9c:73:96:aa:2a:94:79:6d:b4:c4:ac:16:70:4e:
47:fd:1e:19:ff:38:1a:f2:a3:5f:81:1a:46:7a:96:1b:ba:23:
a5:d0:e2:0a:df:f2:ee:96:f7:e6:5c:62:28:4a:93:de:8e:87:
16:9e:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:44:54 2024 by rpki-client on console-fra.rpki-client.org