Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
File: rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer (raw, json)
Hash identifier: aD1iVNkxQREy39O2U4WUOwCVkiBKEyISAHk/XkA3tEo=
Subject key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190BBE766BD905206D568025D44CFCAA1A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 Jul 2024 14:17:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 13103
AS: 20850
AS: 25229
AS: 43010
AS: 43266
IP: 37.46.216.0/21
IP: 45.15.232.0/22
IP: 77.120.0.0 -- 77.120.55.255
IP: 77.120.60.0 -- 77.121.13.255
IP: 77.121.15.0 -- 77.121.31.255
IP: 77.121.64.0/18
IP: 77.123.128.0/18
IP: 77.244.32.0/20
IP: 82.144.192.0/19
IP: 109.201.224.0/19
IP: 141.170.224.0/19
IP: 193.189.96.0/23
IP: 2a00:ac80::/32
IP: 2a02:7e8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:e7:66:bd:90:52:06:d5:68:02:5d:44:cf:ca:a1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 14:17:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:5e:70:10:19:83:e5:26:1a:37:c4:fd:8b:
75:03:fe:fa:59:fc:c4:9f:94:99:6c:6c:8d:59:fd:
51:71:56:0b:68:72:cd:11:07:c9:53:5f:c9:37:0a:
0a:2b:f1:a2:64:2b:c0:1b:71:8a:91:02:c8:40:e6:
39:bd:a7:7d:95:3e:0e:bc:82:16:07:0d:35:26:55:
6a:fc:ed:2d:15:26:20:33:69:74:83:c6:c3:be:46:
31:36:4a:2f:b3:f0:0c:93:6e:25:d9:8f:f4:92:8d:
78:d6:4b:8f:e5:5a:fd:3e:29:9b:a2:ee:05:a9:1a:
b7:e3:48:8f:78:04:8e:49:27:6f:13:e7:33:e7:9a:
2b:a9:09:fc:6e:dd:68:ff:b4:73:9c:c6:97:08:b6:
ce:e7:60:65:ae:67:c5:45:b0:d6:14:72:6b:cf:a0:
b5:b7:38:9e:2c:af:b8:62:f2:43:64:44:ff:c4:3f:
4b:0a:cd:b3:e3:07:41:b5:2c:97:8d:28:7d:0b:b3:
40:b0:20:3c:38:64:90:58:44:15:c6:0c:18:fc:34:
29:25:09:4c:d6:28:45:5f:90:74:aa:b2:81:b7:e2:
d1:29:09:c2:22:ef:ba:80:89:80:b5:9f:1f:65:f8:
fa:a2:6a:1d:53:d6:5f:e4:af:ec:5b:18:63:b4:76:
4f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.216.0/21
45.15.232.0/22
77.120.0.0-77.120.55.255
77.120.60.0-77.121.13.255
77.121.15.0-77.121.31.255
77.121.64.0/18
77.123.128.0/18
77.244.32.0/20
82.144.192.0/19
109.201.224.0/19
141.170.224.0/19
193.189.96.0/23
IPv6:
2a00:ac80::/32
2a02:7e8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13103
20850
25229
43010
43266
Signature Algorithm: sha256WithRSAEncryption
80:d9:81:98:df:57:af:12:aa:bf:7e:84:20:18:f1:3e:3e:aa:
34:a0:71:81:6a:92:44:92:31:31:b4:94:2d:2e:ba:1f:09:c2:
2c:55:47:19:8a:f4:02:cf:78:dc:e5:62:00:06:76:13:c7:f4:
1d:07:39:6a:67:5c:87:cd:a7:b7:99:7c:d7:98:13:b3:1d:09:
04:90:78:3b:5d:89:29:75:93:33:f2:7f:b5:6d:41:44:5f:13:
65:34:54:a9:ed:5f:2e:7f:33:cd:9d:fb:c4:de:8c:61:8b:8d:
d7:23:76:53:13:86:46:25:79:d4:7e:93:a6:fc:1b:11:b4:c8:
44:16:61:1b:22:bb:f8:23:30:08:ea:0b:88:32:89:b1:9e:51:
c6:00:55:89:86:71:95:b3:cd:0f:f9:88:4c:c0:7b:63:0d:3d:
f4:42:9a:bf:4a:a4:07:34:52:f9:aa:74:3c:cb:d7:ce:ed:2c:
d6:7c:c4:f9:ca:a5:03:00:c3:4d:18:1d:34:6e:fb:ca:cb:89:
84:37:cf:5b:19:c9:61:7c:ee:7a:8b:10:35:69:5e:d6:13:89:
51:7b:b4:cf:63:87:57:4a:d7:2b:8d:d4:8f:cd:9f:1c:08:9b:
18:cb:47:eb:02:c3:50:ab:ee:55:32:57:6a:77:f1:ff:ee:12:
0b:db:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:04:22 2024 by rpki-client on console-ams.rpki-client.org