Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
File: roOCT9wp6-SsKGygGETfhtTXXsA.cer (raw, json)
Hash identifier: oxHFbQ4rFPKeXqfaOtnAYNacS/wnAoKRsYdMT6jy8wM=
Subject key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B72C0F83986CAEAC69BE09D5793167
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:51:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213804
IP: 144.86.188.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b7:2c:0f:83:98:6c:ae:ac:69:be:09:d5:79:31:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:51:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:70:ca:4e:b7:52:fa:a2:29:c2:e0:27:ba:
b6:fb:ed:b0:76:70:3c:50:00:4b:ee:e9:46:a5:12:
33:c6:9c:b7:59:6c:22:9a:d7:95:76:98:b5:81:f2:
48:7f:aa:d0:88:a1:5e:06:e1:a6:25:ba:0c:68:ef:
18:6e:a4:7a:28:fc:b8:fc:2b:74:ad:35:a4:f1:67:
8b:1b:e6:1e:c4:79:e2:d8:f2:cb:f4:82:ba:f8:74:
2e:89:25:d8:4d:b8:45:43:4b:c6:1d:01:db:b4:4e:
b5:54:d4:6d:2b:77:89:cf:76:46:28:ea:04:77:0c:
ab:9c:2c:17:58:5d:a3:ee:f8:ff:5b:73:d9:19:62:
9f:34:84:ec:81:f7:b3:9f:43:1d:fb:0c:cc:6f:e6:
3f:42:c1:18:db:ab:76:1f:4d:41:e5:dd:cc:be:dc:
52:d8:39:35:82:3a:4b:76:d7:34:a9:f4:b4:cf:dc:
39:c7:ee:d2:25:75:13:d6:75:9c:81:cb:95:2f:82:
b9:68:7b:55:88:7f:f1:90:19:9d:b2:58:f5:21:3f:
1e:01:bb:80:d2:05:ff:a3:55:77:b1:90:78:f8:2b:
63:4f:39:a5:ac:5f:38:79:61:83:36:5f:07:31:a2:
e2:92:b9:ff:8e:f2:34:f2:0b:d4:d7:96:9c:f8:a7:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.86.188.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213804
Signature Algorithm: sha256WithRSAEncryption
6c:cc:87:e5:91:26:4f:77:5c:c0:7c:3a:10:5e:d7:6b:95:09:
ce:ae:c2:bd:aa:cf:91:59:31:99:1c:c8:58:4d:2d:35:a4:fc:
3d:37:f5:ce:fd:6b:de:96:3a:1d:3c:1a:8b:66:4c:b7:cd:3e:
25:c7:e9:ce:a2:51:75:97:b2:0c:da:91:38:ce:01:c3:75:33:
9e:e4:8c:0d:5f:3e:01:a6:33:f0:6d:88:c8:39:9c:2e:17:98:
00:a4:b5:e9:7d:5c:e2:b7:a3:31:0d:61:20:40:a2:03:a1:f6:
18:f9:c8:5b:a0:13:ac:95:7a:5a:e1:e8:aa:23:61:51:ee:14:
ed:1c:b5:05:87:d3:21:8c:2c:a7:bd:14:0e:20:50:ad:4d:ee:
b2:54:b8:d5:e5:2d:54:28:4a:f5:8b:28:7d:3b:ee:49:12:d8:
2e:74:1b:91:bf:20:74:a2:60:0f:eb:f2:1e:f8:90:28:5e:86:
5b:5f:e1:32:48:4f:ab:93:e3:d7:e6:8b:ea:71:f3:ab:85:4e:
68:a9:43:3b:7d:24:73:51:e5:fe:80:8d:74:1c:07:5a:45:5b:
50:4c:61:e8:87:d7:d7:06:d3:2f:1c:4f:fa:4b:6e:bb:b4:40:
ca:70:de:f1:9a:61:6a:e3:64:16:75:a3:88:a1:6b:e2:d6:f2:
a3:9d:d7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 22:08:20 2025 by rpki-client