Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer (raw, json)
Hash identifier: 09sxdlyPki9URBzc4Ru63LzRo6mqq994I319z0hV5B0=
Subject key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493135E6BB36A3DE25DCC487BACC6F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20825
IP: 5.10.160.0/19
IP: 5.146.0.0/15
IP: 37.24.0.0/16
IP: 37.201.0.0/16
IP: 46.252.128.0/20
IP: 62.143.0.0/16
IP: 78.94.0.0/16
IP: 80.69.96.0/20
IP: 81.210.128.0/17
IP: 84.118.0.0/15
IP: 88.152.0.0/15
IP: 92.50.64.0/18
IP: 94.79.128.0/18
IP: 94.114.0.0/15
IP: 95.222.0.0/15
IP: 109.90.0.0/15
IP: 130.180.0.0/17
IP: 176.198.0.0/15
IP: 178.200.0.0/14
IP: 185.248.36.0/22
IP: 192.109.211.0 -- 192.109.212.255
IP: 2a02:908::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:13:5e:6b:b3:6a:3d:e2:5d:cc:48:7b:ac:c6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:c4:35:df:59:71:d2:93:f4:cb:34:5d:e6:
19:55:25:ab:50:d3:9c:8d:4c:56:e9:15:f1:3e:ab:
7f:58:c5:40:4b:2e:d7:73:5f:9c:f7:fc:75:7f:9d:
63:fb:83:5f:4b:61:bc:a2:7b:b5:a3:6e:78:ba:ef:
32:34:44:d1:cf:14:99:1e:4e:79:91:d0:12:f8:f2:
60:92:34:5c:6e:7a:99:ef:8c:3e:ed:2d:12:75:c6:
53:1b:cd:c2:f9:ca:f2:85:e8:08:b6:d6:06:fa:d7:
73:99:e0:47:16:05:45:dc:2d:36:48:5c:43:e0:be:
37:de:0a:f1:87:63:d0:b5:81:28:21:f1:4b:9b:98:
3b:41:87:e1:ee:6f:d2:7f:5d:82:fa:0c:24:e9:ac:
78:a3:ef:d6:23:ff:a8:9d:97:d7:f8:c5:16:b3:d4:
b8:bd:40:14:91:20:f8:57:89:65:9d:0f:70:3d:11:
5f:16:89:1e:1d:e0:ce:1e:10:d5:bc:00:67:d5:1f:
1d:3d:67:32:6e:c2:b4:37:22:a0:94:54:03:10:29:
8c:34:4a:7e:e1:28:48:15:c1:7d:e1:16:63:f1:7c:
b6:61:49:ff:9d:cd:b0:8b:81:37:6f:a5:45:de:79:
80:d4:38:0d:37:4c:aa:20:ef:09:f8:ea:8e:7d:50:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.160.0/19
5.146.0.0/15
37.24.0.0/16
37.201.0.0/16
46.252.128.0/20
62.143.0.0/16
78.94.0.0/16
80.69.96.0/20
81.210.128.0/17
84.118.0.0/15
88.152.0.0/15
92.50.64.0/18
94.79.128.0/18
94.114.0.0/15
95.222.0.0/15
109.90.0.0/15
130.180.0.0/17
176.198.0.0/15
178.200.0.0/14
185.248.36.0/22
192.109.211.0-192.109.212.255
IPv6:
2a02:908::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20825
Signature Algorithm: sha256WithRSAEncryption
10:69:55:2c:81:33:11:56:6e:77:36:c3:68:7c:ca:98:05:02:
2d:0d:69:ac:34:12:94:8e:50:49:e8:2a:d9:32:cd:e5:b8:8f:
77:a7:84:be:06:46:cf:1e:10:bd:85:12:38:b5:f4:87:8e:10:
7f:19:cd:95:65:2c:58:c9:a7:b0:60:b2:e7:cc:2c:ca:59:5d:
df:e3:99:4c:54:e0:68:84:eb:fb:97:8a:c8:51:8d:ee:66:86:
85:19:f9:98:8d:c8:1d:c8:a3:c8:17:98:d7:ff:71:0c:53:68:
7a:b5:6d:87:65:87:8a:87:f7:da:ae:e5:03:3e:df:bb:78:0b:
fe:b6:08:c0:23:e1:77:79:fa:65:26:38:a1:1c:00:89:22:a6:
84:e0:14:52:e2:f2:33:8c:25:48:4c:c1:3a:50:71:11:76:d6:
13:36:69:92:94:0f:5f:29:9d:1b:a5:68:01:e9:0c:fa:b5:6a:
01:01:1c:1e:d0:01:38:1a:ee:dd:e5:cb:86:79:cf:34:bd:39:
ce:93:cc:95:a4:6b:21:73:8c:2f:f0:30:b0:56:6d:22:28:2f:
f0:9d:15:ab:eb:08:6a:28:6d:b2:87:4b:fc:84:1d:01:98:99:
6d:ad:6c:a2:68:61:d9:c5:c3:c3:c8:6d:51:ed:74:f9:d0:fd:
7c:bc:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:16:11 2024 by rpki-client on console-ams.rpki-client.org