Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
File: sgkwhUDE35ubt9Yyf6e11JAIBow.cer (raw, json)
Hash identifier: XiIGVZYbJUVHLhSF/kn0p4Z9VLG8ICI/fHpjUrXaink=
Subject key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019251EBAC2DB3DB6A5362738C6515787FA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Oct 2024 10:27:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 50564
IP: 45.131.28.0/22
IP: 94.158.252.0/22
IP: 185.44.24.0/22
IP: 185.95.124.0/22
IP: 185.104.236.0/22
IP: 185.143.136.0/22
IP: 185.182.124.0/22
IP: 185.184.0.0/22
IP: 185.208.20.0/22
IP: 185.213.48.0/22
IP: 2a04:9900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:eb:ac:2d:b3:db:6a:53:62:73:8c:65:15:78:7f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 3 10:27:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:10:16:33:b2:92:2a:8e:7d:84:50:de:e5:
03:e3:86:a8:b1:52:11:6f:a4:02:21:54:63:82:7b:
35:07:39:50:da:93:8e:c0:01:e1:f0:c9:5b:9e:dc:
f7:6a:9c:bf:fc:58:52:8b:30:45:b2:43:d8:2e:35:
88:f3:3f:d4:37:b2:36:70:8d:d0:a2:7a:74:40:cf:
8e:ae:33:03:a5:fb:34:e8:b9:b1:4d:99:ec:56:27:
33:ea:d4:7a:d2:38:f8:bb:65:10:30:ed:b1:89:6f:
b8:25:6c:c1:9b:99:14:78:fc:2e:b9:62:c5:a2:9d:
cf:35:80:c3:1d:6e:54:75:af:da:ef:95:bc:be:a5:
0c:1c:58:46:ca:1b:ee:80:19:96:01:64:19:db:cb:
b3:9e:0e:39:76:3f:f9:a5:6a:4e:e0:bd:cb:f6:1a:
ce:b3:3b:c3:f4:28:d8:13:b6:d0:24:f2:4c:89:aa:
63:89:cf:49:85:42:1f:b6:40:5f:89:78:b6:d7:a9:
37:ea:b0:af:e8:00:1c:00:cf:60:4d:a4:7d:c8:66:
2b:24:ba:ff:55:1e:e2:01:f2:67:f7:7d:d4:4f:55:
76:b3:b5:62:4d:8c:e4:35:5b:e2:6c:e0:7b:8a:5f:
bc:32:88:f8:ba:1a:b3:28:f2:53:3d:24:23:7b:e0:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.28.0/22
94.158.252.0/22
185.44.24.0/22
185.95.124.0/22
185.104.236.0/22
185.143.136.0/22
185.182.124.0/22
185.184.0.0/22
185.208.20.0/22
185.213.48.0/22
IPv6:
2a04:9900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50564
Signature Algorithm: sha256WithRSAEncryption
14:45:68:aa:33:39:b9:ef:e8:74:4f:b1:c2:35:d8:06:cb:67:
cb:d4:70:2f:e7:21:69:6c:8c:e7:31:91:b1:f0:fa:67:82:07:
56:64:c4:80:b1:57:54:ba:37:c6:73:2c:23:85:eb:d6:4a:45:
3e:55:ac:c6:83:63:b8:53:37:96:ba:ec:1d:e9:a5:09:a8:b4:
27:3e:21:c9:b8:e2:33:05:92:52:24:6c:3f:ad:80:e5:09:85:
c2:9c:19:60:b5:c7:b4:b0:b5:2d:c4:b1:fa:03:b1:37:a4:f9:
dd:08:c8:08:73:9a:d5:fc:a5:f5:3d:b2:9b:e9:6c:b7:c7:28:
f5:a2:7b:f1:de:64:10:16:c8:1f:04:a8:33:3b:01:94:29:ce:
48:2f:31:d9:7f:9c:5f:72:c3:d9:cb:07:7d:23:3c:98:64:19:
83:63:49:43:c0:e1:90:fc:3e:79:fc:e2:a4:ad:9f:3f:cd:c8:
8c:7d:df:1e:1a:d3:61:61:58:06:cf:93:e7:e3:2d:f3:0f:cd:
bc:33:59:00:0a:88:2d:96:d3:ad:07:2b:9a:e1:5b:cf:d5:bb:
cc:82:a0:1d:27:08:67:19:2a:67:7a:01:d4:ad:85:35:1a:2f:
a4:15:2a:85:92:99:16:5a:8c:83:9f:a4:db:69:17:84:82:ae:
3b:27:eb:5a
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgISAZJR66wts9tqU2JzjGUVeH+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQxMDAzMTAyNzMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjA5MzA4NTQwYzRkZjliOWJiN2Q2MzI3ZmE3YjVkNDkwMDgwNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j0QFjOykiqOfYRQ3uUD44aosVIR
b6QCIVRjgns1BzlQ2pOOwAHh8Mlbntz3apy//FhSizBFskPYLjWI8z/UN7I2cI3Q
onp0QM+OrjMDpfs06LmxTZnsVicz6tR60jj4u2UQMO2xiW+4JWzBm5kUePwuuWLF
op3PNYDDHW5Uda/a75W8vqUMHFhGyhvugBmWAWQZ28uzng45dj/5pWpO4L3L9hrO
szvD9CjYE7bQJPJMiapjic9JhUIftkBfiXi216k36rCv6AAcAM9gTaR9yGYrJLr/
VR7iAfJn933UT1V2s7ViTYzkNVvibOB7il+8Moj4uhqzKPJTPSQje+CqwQIDAQAB
o4IC5TCCAuEwHQYDVR0OBBYEFLIJMIVAxN+bm7fWMn+ntdSQCAaMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzg4MGVi
Mi1mYTY1LTQ3Y2EtOGEwMC02NDgwYzNkMWY0ZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvODgwZWIy
LWZhNjUtNDdjYS04YTAwLTY0ODBjM2QxZjRlNC8xL3Nna3doVURFMzV1YnQ5WXlm
NmUxMUpBSUJvdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGCCsGAQUF
BwEHAQH/BFUwUzBCBAIAATA8AwQCLYMcAwQCXp78AwQCuSwYAwQCuV98AwQCuWjs
AwQCuY+IAwQCubZ8AwQCubgAAwQCudAUAwQCudUwMA0EAgACMAcDBQMqBJkAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDFhDANBgkqhkiG9w0BAQsFAAOCAQEAFEVo
qjM5ue/odE+xwjXYBstny9RwL+chaWyM5zGRsfD6Z4IHVmTEgLFXVLo3xnMsI4Xr
1kpFPlWsxoNjuFM3lrrsHemlCai0Jz4hybjiMwWSUiRsP62A5QmFwpwZYLXHtLC1
LcSx+gOxN6T53QjICHOa1fyl9T2ym+lst8co9aJ78d5kEBbIHwSoMzsBlCnOSC8x
2X+cX3LD2csHfSM8mGQZg2NJQ8DhkPw+efzipK2fP83IjH3fHhrTYWFYBs+T5+Mt
8w/NvDNZAAqILZbTrQcrmuFbz9W7zIKgHScIZxkqZ3oB1K2FNRovpBUqhZKZFlqM
g5+k22kXhIKuOyfrWg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:31:27 2024 by rpki-client on console-ams.rpki-client.org