Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
File: r-o5b03jVdqNwHmh6IXgwzdezjI.cer (raw, json)
Hash identifier: xCbkQDcm9d5aG11C+xbTmylSxvoQcLxNUmxh3zgNIpA=
Subject key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801F62C918E6954B02652086B218536
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 199728
IP: 185.48.112.0/22
IP: 2a04:adc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:f6:2c:91:8e:69:54:b0:26:52:08:6b:21:85:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:4f:62:06:66:1e:a8:2e:d0:73:fa:3b:63:
45:1b:6a:a8:00:36:d2:2c:64:1a:c1:2c:3f:6f:ab:
fa:c0:76:ea:b1:23:4c:36:9d:84:75:96:23:56:a5:
fb:be:58:ec:09:f4:d2:7e:1f:f9:d0:0c:84:bb:02:
43:07:f4:16:91:83:d5:d5:ed:b3:2a:cc:ab:fd:aa:
1d:c6:f2:08:03:58:96:d4:c2:cd:86:c4:1b:da:77:
0d:14:93:c9:e3:f2:c3:9e:e4:18:6f:f0:e2:c9:aa:
16:8d:f6:aa:f6:61:cf:ff:2b:e5:ee:1f:de:77:3c:
3b:8c:34:57:4e:ab:d0:50:c4:bf:ca:56:fd:bf:79:
03:34:e9:5f:0e:9e:5e:75:43:ea:2b:fb:d4:25:e7:
1e:5b:41:84:75:f5:c0:16:03:d2:9d:c1:cb:0d:27:
81:25:bb:3e:19:b5:32:f7:32:a0:fe:7b:7a:ad:64:
31:66:72:9d:f3:62:06:b5:5a:00:9f:1c:7e:24:a9:
81:7a:a0:5d:3b:d8:75:e1:46:39:3c:55:ea:87:ab:
4c:3d:e6:af:2b:7f:b7:59:85:52:23:bf:31:03:39:
ff:ad:9d:9b:df:a7:92:fc:2e:28:cb:eb:85:05:a0:
2d:b7:f0:ea:54:2f:6e:fd:25:8a:44:93:e2:90:99:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.112.0/22
IPv6:
2a04:adc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199728
Signature Algorithm: sha256WithRSAEncryption
51:fe:b9:61:ec:89:72:58:11:90:f5:ab:04:2d:e5:43:0f:b7:
8e:43:cb:fa:60:73:a3:00:b1:b6:4c:50:ea:af:d9:8b:9b:d5:
a7:ec:b6:0f:6a:e5:09:4e:c1:4b:75:f0:54:26:8f:16:d7:03:
06:e6:b3:1b:d5:9e:ef:02:6e:96:55:b4:d8:32:76:08:d0:df:
ca:4b:37:e4:0d:f0:16:33:0f:e3:1d:2d:87:81:19:3e:e0:2b:
52:69:fd:f7:84:3c:c6:af:a0:72:ee:98:9e:90:54:f0:71:ee:
d5:4b:99:ea:85:d6:a6:6b:12:85:72:05:e0:6a:79:af:7d:72:
28:e5:5f:a3:2c:4a:9e:3b:e5:69:94:56:8c:c3:c3:28:42:f6:
53:a3:bc:7c:8a:4d:5a:df:ae:d6:60:62:78:99:13:6f:41:6e:
57:ca:da:d0:14:72:69:77:db:df:43:bc:3d:cc:c1:30:15:81:
88:0f:28:16:c0:ef:8e:60:67:c5:53:28:56:a1:92:11:fb:d3:
45:44:9f:3f:3f:ea:49:ad:f7:02:6e:38:3d:ea:68:ab:4f:d0:
65:03:65:0e:1e:93:95:f5:82:dc:a9:c9:bc:db:8b:1e:b2:76:
e3:27:21:f5:9d:a9:f2:f9:7c:f7:af:ca:a0:cd:35:86:9f:03:
40:cb:69:b3
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzIAfYskY5pVLAmUghrIYU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmVhMzk2ZjRkZTM1NWRhOGRjMDc5YTFlODg1ZTBjMzM3NWVjZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5BPYgZmHqgu0HP6O2NFG2qoADbS
LGQawSw/b6v6wHbqsSNMNp2EdZYjVqX7vljsCfTSfh/50AyEuwJDB/QWkYPV1e2z
Ksyr/aodxvIIA1iW1MLNhsQb2ncNFJPJ4/LDnuQYb/DiyaoWjfaq9mHP/yvl7h/e
dzw7jDRXTqvQUMS/ylb9v3kDNOlfDp5edUPqK/vUJeceW0GEdfXAFgPSncHLDSeB
Jbs+GbUy9zKg/nt6rWQxZnKd82IGtVoAnxx+JKmBeqBdO9h14UY5PFXqh6tMPeav
K3+3WYVSI78xAzn/rZ2b36eS/C4oy+uFBaAtt/DqVC9u/SWKRJPikJnJ8QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFK/qOW9N41XajcB5oeiF4MM3Xs4yMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzhlM2Y3
Yi1jNzhmLTQ2NjMtYmYxZC1mNWRiZGY3MjJmNWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvOGUzZjdi
LWM3OGYtNDY2My1iZjFkLWY1ZGJkZjcyMmY1ZC8xL3ItbzViMDNqVmRxTndIbWg2
SVhnd3pkZXpqSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuTBwMA0EAgACMAcDBQMqBK3AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMMMDANBgkqhkiG9w0BAQsFAAOCAQEAUf65YeyJclgR
kPWrBC3lQw+3jkPL+mBzowCxtkxQ6q/Zi5vVp+y2D2rlCU7BS3XwVCaPFtcDBuaz
G9We7wJullW02DJ2CNDfyks35A3wFjMP4x0th4EZPuArUmn994Q8xq+gcu6YnpBU
8HHu1UuZ6oXWpmsShXIF4Gp5r31yKOVfoyxKnjvlaZRWjMPDKEL2U6O8fIpNWt+u
1mBieJkTb0FuV8ra0BRyaXfb30O8PczBMBWBiA8oFsDvjmBnxVMoVqGSEfvTRUSf
Pz/qSa33Am44Pepoq0/QZQNlDh6TlfWC3KnJvNuLHrJ24ych9Z2p8vl896/KoM01
hp8DQMtpsw==
-----END CERTIFICATE-----
Generated at Fri May 3 03:45:12 2024 by rpki-client on console-fra.rpki-client.org