Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
File: rQt55LWcX82kk6IK0Y6UVYWdAxs.cer (raw, json)
Hash identifier: 81TrJn3gdwMNQdvXT5nCJXus5lvlel6XLsRGokck9Ns=
Subject key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EA98CDE149401E62F5F427613DB67E1AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 04 Apr 2024 14:39:25 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 21119
AS: 198869
IP: 5.226.160.0/21
IP: 46.16.48.0/21
IP: 80.86.128.0/20
IP: 82.117.32.0/19
IP: 89.105.32.0/20
IP: 89.233.96.0/21
IP: 93.187.80.0/21
IP: 185.36.28.0/22
IP: 193.169.42.0/23
IP: 193.201.74.0/23
IP: 213.179.48.0/20
IP: 217.65.224.0/20
IP: 2001:a90::/32
IP: 2a01:b8c0::/32
IP: 2a03:6240::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a9:8c:de:14:94:01:e6:2f:5f:42:76:13:db:67:e1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 14:39:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a2:4b:0e:16:00:d1:9d:16:c1:b4:82:66:e3:
94:6b:c2:e2:e3:11:bd:5c:10:d4:a2:74:81:bf:f4:
3d:d1:8f:4e:52:30:45:c3:92:29:75:15:79:0a:a9:
19:7b:0c:f9:34:cb:84:a0:85:91:5c:79:bd:36:a5:
ca:46:b7:a8:75:bf:ed:ec:73:62:7f:3b:19:d1:d4:
55:0f:9e:e2:37:cf:7f:a8:11:98:2f:80:e1:f7:30:
55:5a:e2:4e:b3:8f:e1:f5:50:31:24:0e:c3:8e:22:
27:92:43:9e:45:52:e5:4c:78:b0:f4:59:9e:1a:7e:
0c:e2:6b:6d:07:80:7d:f1:1c:06:22:35:15:de:5d:
0d:e4:f0:3f:05:62:1c:15:1b:46:b6:9d:20:9c:3d:
17:a5:8e:3f:88:a1:51:e4:03:19:69:7e:d0:e1:00:
9a:29:03:9c:d8:b1:6d:60:01:13:03:32:e2:12:ea:
2a:fe:4a:eb:0c:35:68:a0:71:56:d7:72:67:88:e6:
1d:c6:af:24:95:78:4b:f2:0f:5a:ba:3d:2e:4f:ad:
e0:b9:e2:3a:fc:28:2d:51:ac:36:44:67:69:4d:2e:
16:81:3b:9b:d2:17:24:85:65:c8:28:95:86:bd:fe:
75:24:39:01:07:ee:8b:b3:c5:4f:96:24:6b:1f:45:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.160.0/21
46.16.48.0/21
80.86.128.0/20
82.117.32.0/19
89.105.32.0/20
89.233.96.0/21
93.187.80.0/21
185.36.28.0/22
193.169.42.0/23
193.201.74.0/23
213.179.48.0/20
217.65.224.0/20
IPv6:
2001:a90::/32
2a01:b8c0::/32
2a03:6240::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21119
198869
Signature Algorithm: sha256WithRSAEncryption
6d:49:90:4f:d3:b3:6b:48:7e:48:b1:54:1d:09:9c:19:1a:a1:
89:9f:72:f3:40:6d:08:99:cc:a9:3d:6c:f0:34:60:e1:fc:0e:
73:cb:43:5c:57:f4:d1:bc:ec:ae:6d:39:98:58:9b:80:e3:be:
33:2c:92:ac:69:42:23:c0:2d:f1:db:41:cd:bb:72:92:95:dc:
b3:8d:f9:c5:29:ac:17:e2:7d:9f:9a:6d:2c:20:ce:31:ba:63:
db:ee:04:6d:eb:1d:60:62:2c:17:61:0c:60:79:4e:88:fc:8f:
cb:b3:59:41:96:7d:22:c1:a0:08:89:b3:d9:3c:2a:d4:97:2d:
2d:a9:6f:b9:25:1a:d3:b6:10:6e:60:d0:d5:99:49:49:d3:f5:
9b:fb:e0:34:81:cc:95:2b:de:f8:c0:43:e3:36:dc:bb:85:4e:
48:93:1e:f3:64:86:00:b1:09:75:45:1a:96:e2:c8:92:61:ed:
a3:32:6d:44:80:5c:13:6e:0c:07:87:5d:7a:ae:10:65:ed:ef:
76:84:20:24:b7:a1:1a:4b:dc:0d:08:16:46:a4:1c:81:76:fb:
f4:05:38:d0:7f:c5:b0:9e:db:5c:74:46:3d:86:4f:38:d2:38:
f1:82:b7:49:2b:5f:00:82:f9:12:ae:eb:41:74:73:ea:ca:2d:
c3:ce:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:45:37 2024 by rpki-client on console-fra.rpki-client.org