Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
File: saew2N6CUdNtfIP69rx-_sc7UDQ.cer (raw, json)
Hash identifier: 6DJt2huxwTHTu98XhAr77n4SaKGGSqpX1qXbIxds/Q0=
Subject key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4254F8F73B63E5CFF3D6AFC955B2C19
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 43603
AS: 207837
IP: 2.56.164.0/22
IP: 5.182.48.0/22
IP: 45.81.20.0/22
IP: 45.90.144.0/22
IP: 45.140.220.0/22
IP: 45.154.196.0/22
IP: 77.83.240.0/22
IP: 78.108.216.0/22
IP: 83.143.116.0/22
IP: 85.202.160.0/22
IP: 89.190.156.0/22
IP: 178.218.144.0/22
IP: 185.185.40.0/22
IP: 185.186.64.0/22
IP: 185.227.68.0/22
IP: 185.234.72.0/22
IP: 185.242.224.0/22
IP: 193.31.28.0/22
IP: 193.34.76.0/22
IP: 193.105.165.0/24
IP: 193.105.177.0/24
IP: 193.105.184.0/24
IP: 193.105.207.0/24
IP: 193.221.192.0/22
IP: 194.31.140.0/22
IP: 194.50.16.0/22
IP: 194.56.224.0/22
IP: 212.107.12.0/22
IP: 2a0b:b80::/29
IP: 2a0b:7080::/29
IP: 2a0d:77c0::/29
IP: 2a0e:c7c0::/29
IP: 2a0e:e800::/29
IP: 2a0f:8ac0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4f:8f:73:b6:3e:5c:ff:3d:6a:fc:95:5b:2c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:41:50:47:07:28:b3:34:60:89:30:38:b2:
8f:f3:76:94:f2:f7:97:4f:e5:0a:a0:2c:d6:63:53:
8d:34:e0:b1:70:e3:ad:15:47:29:ac:24:7c:67:57:
2b:34:b8:74:e8:65:04:4e:b8:dc:6b:27:f0:a6:5d:
8c:b6:e5:e2:8e:97:84:5c:78:ea:ff:48:f6:ec:96:
04:3e:d0:8a:2d:8d:5b:53:2b:18:1b:47:18:ca:94:
dd:94:cb:a5:31:97:42:17:e3:8d:f3:70:e8:38:80:
8d:bd:08:db:36:63:44:29:20:e5:fe:48:27:1c:14:
f7:71:23:3a:bd:56:bf:05:97:85:fe:37:ec:19:24:
ab:39:9d:43:00:89:05:74:fa:38:b4:7a:c5:f6:d8:
bb:e8:79:33:b3:bd:2c:d9:59:52:d9:7d:09:32:59:
ca:33:38:27:fa:23:04:f5:96:30:81:01:2b:14:9f:
1d:c8:08:bf:ab:eb:1f:f3:28:34:ad:c1:3c:f4:fc:
90:ab:44:83:e3:81:f5:6e:d3:cd:fd:72:20:f0:ac:
78:5d:52:41:39:7c:4e:48:d4:7f:b1:78:a5:f1:fd:
ed:2c:d6:b9:2f:e8:6d:d3:11:8b:bd:f2:62:56:fb:
eb:90:a5:0a:1c:54:04:af:34:09:e6:13:a8:c1:0d:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/22
45.81.20.0/22
45.90.144.0/22
45.140.220.0/22
45.154.196.0/22
77.83.240.0/22
78.108.216.0/22
83.143.116.0/22
85.202.160.0/22
89.190.156.0/22
178.218.144.0/22
185.185.40.0/22
185.186.64.0/22
185.227.68.0/22
185.234.72.0/22
185.242.224.0/22
193.31.28.0/22
193.34.76.0/22
193.105.165.0/24
193.105.177.0/24
193.105.184.0/24
193.105.207.0/24
193.221.192.0/22
194.31.140.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b80::/29
2a0b:7080::/29
2a0d:77c0::/29
2a0e:c7c0::/29
2a0e:e800::/29
2a0f:8ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43603
207837
Signature Algorithm: sha256WithRSAEncryption
8d:bd:22:4a:2f:ea:c7:18:fe:03:1e:7e:b9:cf:36:1a:b0:6a:
78:64:af:5a:58:92:8d:1e:b6:cf:96:08:c2:a2:77:76:7f:31:
46:0e:a5:33:f4:95:aa:3e:99:bc:e4:01:25:0d:93:29:51:a3:
b5:2b:03:18:4e:1a:c5:89:ba:42:93:87:77:28:9a:2a:21:64:
68:4e:30:c3:fe:d6:34:20:ac:bb:0b:84:35:f2:93:42:27:22:
3b:7d:fb:b4:3d:72:04:82:1d:4e:48:8b:3f:1c:8c:f0:75:78:
e4:d4:39:e5:e7:b1:40:a4:59:f1:5d:19:46:c4:03:65:1e:06:
c8:c8:08:44:32:6d:1f:24:d0:b7:27:0d:65:4c:91:67:f8:4e:
62:c0:21:99:c5:77:18:01:f7:82:26:43:3c:4d:35:d8:43:05:
be:ce:74:3a:2b:3d:15:84:b1:48:ed:6b:ab:de:ab:ec:63:52:
aa:71:d4:19:28:61:64:69:5d:a4:31:47:4b:e9:4d:0d:64:bf:
03:ee:34:37:f4:ae:5a:93:a4:e0:fb:5c:2c:70:94:a2:ce:1d:
ce:f3:e3:35:68:84:16:73:4b:27:0e:0d:13:98:2e:43:ef:e1:
cd:de:b1:8d:69:cf:bf:b0:b5:4c:35:1a:60:55:2e:23:24:78:
77:d0:ef:32
-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgISAYzEJU+Pc7Y+XP89avyVWywZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWE3YjBkOGRlODI1MWQzNmQ3YzgzZmFmNmJjN2VmZWM3M2I1MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dFBUEcHKLM0YIkwOLKP83aU8veX
T+UKoCzWY1ONNOCxcOOtFUcprCR8Z1crNLh06GUETrjcayfwpl2MtuXijpeEXHjq
/0j27JYEPtCKLY1bUysYG0cYypTdlMulMZdCF+ON83DoOICNvQjbNmNEKSDl/kgn
HBT3cSM6vVa/BZeF/jfsGSSrOZ1DAIkFdPo4tHrF9ti76Hkzs70s2VlS2X0JMlnK
Mzgn+iME9ZYwgQErFJ8dyAi/q+sf8yg0rcE89PyQq0SD44H1btPN/XIg8Kx4XVJB
OXxOSNR/sXil8f3tLNa5L+ht0xGLvfJiVvvrkKUKHFQErzQJ5hOowQ0VGQIDAQAB
o4IDfjCCA3owHQYDVR0OBBYEFLGnsNjeglHTbXyD+va8fv7HO1A0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2YxMzRj
OC1mODE0LTRiNzEtOTU3Yi0zOTRhY2QyMWYzOWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvZjEzNGM4
LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5Yi8xL3NhZXcyTjZDVWROdGZJUDY5
cngtX3NjN1VEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIH3BggrBgEF
BQcBBwEB/wSB5zCB5DCBrwQCAAEwgagDBAICOKQDBAIFtjADBAItURQDBAItWpAD
BAItjNwDBAItmsQDBAJNU/ADBAJObNgDBAJTj3QDBAJVyqADBAJZvpwDBAKy2pAD
BAK5uSgDBAK5ukADBAK540QDBAK56kgDBAK58uADBALBHxwDBALBIkwDBADBaaUD
BADBabEDBADBabgDBADBac8DBALB3cADBALCH4wDBALCMhADBALCOOADBALUawww
MAQCAAIwKgMFAyoLC4ADBQMqC3CAAwUDKg13wAMFAyoOx8ADBQMqDugAAwUDKg+K
wDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAqlMCAwMr3TANBgkqhkiG9w0BAQsF
AAOCAQEAjb0iSi/qxxj+Ax5+uc82GrBqeGSvWliSjR62z5YIwqJ3dn8xRg6lM/SV
qj6ZvOQBJQ2TKVGjtSsDGE4axYm6QpOHdyiaKiFkaE4ww/7WNCCsuwuENfKTQici
O337tD1yBIIdTkiLPxyM8HV45NQ55eexQKRZ8V0ZRsQDZR4GyMgIRDJtHyTQtycN
ZUyRZ/hOYsAhmcV3GAH3giZDPE012EMFvs50Ois9FYSxSO1rq96r7GNSqnHUGShh
ZGldpDFHS+lNDWS/A+40N/SuWpOk4PtcLHCUos4dzvPjNWiEFnNLJw4NE5guQ+/h
zd6xjWnPv7C1TDUaYFUuIyR4d9DvMg==
-----END CERTIFICATE-----
Generated at Thu Apr 18 22:20:50 2024 by rpki-client on console-ams.rpki-client.org