Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
File: rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer (raw, json)
Hash identifier: 3ppeBWVZ2lxLMzPR6qJIThaHiiPgmZnK2qagW2qQghw=
Subject key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4255714432004033376B90F10A305B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12902
AS: 60341
AS: 199816
IP: 79.98.168.0/21
IP: 185.32.232.0/22
IP: 185.44.244.0/22
IP: 185.45.116.0/22
IP: 185.47.20.0/22
IP: 185.50.92.0/22
IP: 185.82.188.0/22
IP: 185.187.20.0/22
IP: 185.225.220.0/22
IP: 185.240.112.0/22
IP: 194.180.197.0/24
IP: 194.180.216.0/24
IP: 194.180.219.0/24
IP: 194.180.227.0/24
IP: 217.77.128.0/19
IP: 2001:9c0::/29
IP: 2a00:c660::/29
IP: 2a01:77e0::/29
IP: 2a05:92c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:57:14:43:20:04:03:33:76:b9:0f:10:a3:05:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aca1f4713024804c445403af63fa644b2a935d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:f2:81:4b:36:df:e9:05:94:f4:db:03:6a:
3e:8c:39:8a:f8:77:d1:23:bd:31:dc:31:eb:a2:24:
d0:c0:70:bc:c7:3d:3d:dd:a1:3d:53:30:26:70:ae:
9a:68:f9:36:78:b5:d6:a9:23:6c:56:bf:10:d9:12:
b6:95:d1:1b:1f:b8:aa:3e:c6:6f:b9:04:55:41:0c:
5a:b9:27:ea:62:ef:fe:f2:fe:17:0a:19:1d:1f:6b:
7f:c1:92:fc:0b:1d:74:a6:70:1c:bb:d0:78:bd:42:
0b:a4:89:2d:4e:4e:90:ca:20:c4:dc:56:a3:2d:21:
16:52:10:2a:a7:ac:38:09:58:bf:83:5b:9b:f8:1d:
2f:fa:36:3f:66:64:34:13:85:9e:40:40:28:05:62:
fb:5d:bc:e2:bc:48:48:08:dd:d7:44:6b:d2:6d:f6:
0a:fc:07:7a:94:ef:65:c8:a3:08:50:ec:f2:b2:01:
ae:4a:cc:e7:2f:fa:b0:f7:67:27:9a:86:30:04:96:
47:e8:72:1a:4e:c4:ea:54:16:a5:67:b0:c3:ca:56:
c7:40:b3:db:4b:67:c9:02:e1:ed:60:c4:dc:39:7d:
49:8f:39:8d:49:28:24:6f:2a:ee:ec:1d:00:c7:d7:
9b:66:5d:a3:7f:8e:9d:3c:5e:eb:5b:93:8e:e6:52:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.168.0/21
185.32.232.0/22
185.44.244.0/22
185.45.116.0/22
185.47.20.0/22
185.50.92.0/22
185.82.188.0/22
185.187.20.0/22
185.225.220.0/22
185.240.112.0/22
194.180.197.0/24
194.180.216.0/24
194.180.219.0/24
194.180.227.0/24
217.77.128.0/19
IPv6:
2001:9c0::/29
2a00:c660::/29
2a01:77e0::/29
2a05:92c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12902
60341
199816
Signature Algorithm: sha256WithRSAEncryption
9e:d3:a3:09:a0:2e:09:48:02:8c:0f:67:49:70:34:d3:66:83:
c1:66:df:c4:e1:bb:2d:2b:c5:b3:e7:aa:d5:d2:e5:65:a1:aa:
1e:fe:26:4d:38:24:8c:71:a3:30:61:52:ad:53:bc:3f:86:b1:
f6:f7:f6:6c:c8:07:23:7d:b5:93:39:99:ec:fb:77:00:ae:fd:
19:b2:27:60:9b:36:16:f3:2f:4a:31:90:5b:5f:60:83:a4:01:
47:17:6a:98:c4:c3:43:16:f4:a3:7f:ef:12:74:7d:1f:c7:5f:
e5:28:0d:b6:53:2b:7f:35:7c:c2:5e:3f:15:b1:4d:13:61:01:
e3:8a:4c:d9:2f:72:67:7d:7f:d7:f9:85:46:18:88:9f:48:31:
dc:36:06:fc:66:df:b3:88:0a:91:f4:d1:ad:0f:e3:45:1a:f3:
e0:63:39:d9:3e:ad:a7:90:23:ed:82:ed:8e:bd:2a:65:89:a1:
26:3e:64:79:64:78:4c:a5:24:74:1b:84:1a:f2:3f:43:88:0f:
15:4a:73:f6:f9:d0:88:a0:00:bc:14:f2:86:54:09:74:8b:9b:
a0:67:08:a8:4a:b5:b9:a0:6e:4b:24:6a:e3:c8:10:7a:93:69:
5f:76:9f:b5:da:a3:bd:4e:75:a7:f4:0c:73:bd:59:e6:cf:e1:
54:ca:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:04:16 2024 by rpki-client on console-ams.rpki-client.org