Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
File: su7525PeEaAlPVqoxT7Mrg-cPTM.cer (raw, json)
Hash identifier: ZXS2+fLj2l5PwFBxXr/55xwnandKGll2QocOyo3T57M=
Subject key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D6902D7F744EA283BB215A5AE7017
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51139
IP: 178.249.224.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:69:02:d7:f7:44:ea:28:3b:b2:15:a5:ae:70:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:eb:00:96:0c:16:69:df:94:4a:ee:6f:e7:
c4:68:12:ff:3e:ed:f5:6f:a7:29:78:05:98:7e:23:
2c:17:e7:8e:3a:17:be:e0:72:99:3d:f1:00:dc:f7:
83:0c:29:11:37:d9:22:4f:6b:92:db:a2:e0:48:bc:
ab:d6:da:94:fb:c7:1b:65:0d:74:c8:71:4c:bb:a5:
83:9d:de:4d:42:cd:6c:33:65:12:2b:d8:cc:18:e3:
c6:0e:89:46:37:bb:4b:e9:de:e0:02:ea:d5:c1:00:
b6:70:f6:3d:c4:fb:d8:5b:6a:6c:11:32:47:c7:f1:
e2:e4:03:d5:ea:15:24:39:36:d0:9d:95:5c:d3:9a:
c4:0f:08:d9:9c:d9:5d:01:0b:43:7f:10:6e:16:7a:
2a:ca:a7:26:c3:76:f4:98:9e:fd:da:19:f9:0e:a7:
b6:80:d2:91:e6:20:c6:91:53:30:33:a3:2b:f1:40:
34:39:a1:60:22:75:f0:ed:7f:5e:4a:43:75:e5:04:
e7:04:c6:5f:7b:12:f7:e7:1f:7a:cf:e7:5a:29:bb:
88:b6:fc:2d:59:12:d9:5b:06:d0:24:a7:84:18:db:
c6:93:45:20:c9:1a:1c:d2:05:93:7e:ca:66:78:ec:
00:94:54:cc:ce:df:66:fa:fc:6a:1a:ab:f7:54:ee:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.224.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51139
Signature Algorithm: sha256WithRSAEncryption
97:b5:fd:12:0f:8e:aa:a2:90:47:a7:fa:42:f5:6e:f4:c3:f1:
9e:4b:4a:7b:25:a6:21:0e:fa:68:52:ce:da:7b:8b:b6:06:f3:
e3:e6:de:07:26:95:4e:04:ff:1a:03:37:33:88:95:7d:7a:dc:
e2:b2:ad:88:4c:07:29:a9:3b:55:f7:8d:c9:d7:9b:b5:b7:12:
c9:d7:0c:ef:d9:37:3b:70:e4:1f:a8:3f:9b:c5:a4:a2:38:1f:
d6:e0:00:f7:7a:ea:b1:0c:3e:03:d4:c3:45:44:3e:78:07:cb:
51:d8:2d:97:c6:2c:00:79:bd:ec:cf:14:19:60:4d:43:f2:55:
bc:5d:b6:b4:a4:44:a9:65:ca:a5:06:12:f9:5a:52:24:27:3d:
af:b4:31:ea:49:18:ec:27:c6:46:d4:cd:0c:be:9a:13:21:76:
90:e3:87:f1:5f:c3:ba:3d:5a:49:2b:ab:6e:dc:0c:36:dc:4b:
19:f1:86:e5:63:6e:cc:89:d7:e0:96:c6:a8:86:c3:a7:db:8f:
84:88:c3:77:b7:f3:14:50:f8:90:ca:b0:68:d4:57:21:d4:65:
3b:59:23:3a:17:bd:fc:33:69:51:e5:de:6b:03:fe:97:44:90:
f6:93:04:a7:40:98:78:5d:82:72:16:d9:0f:fc:a0:0e:f9:da:
1f:9f:87:4a
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYzCbWkC1/dE6ig7shWlrnAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmVlZjlkYjkzZGUxMWEwMjUzZDVhYThjNTNlY2NhZTBmOWMzZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRnrAJYMFmnflErub+fEaBL/Pu31
b6cpeAWYfiMsF+eOOhe+4HKZPfEA3PeDDCkRN9kiT2uS26LgSLyr1tqU+8cbZQ10
yHFMu6WDnd5NQs1sM2USK9jMGOPGDolGN7tL6d7gAurVwQC2cPY9xPvYW2psETJH
x/Hi5APV6hUkOTbQnZVc05rEDwjZnNldAQtDfxBuFnoqyqcmw3b0mJ792hn5Dqe2
gNKR5iDGkVMwM6Mr8UA0OaFgInXw7X9eSkN15QTnBMZfexL35x96z+daKbuItvwt
WRLZWwbQJKeEGNvGk0UgyRoc0gWTfspmeOwAlFTMzt9m+vxqGqv3VO5QzQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFLLu+duT3hGgJT1aqMU+zK4PnD0zMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzczZTkw
ZC0wNTUzLTRmZTYtOTZkZS1kZWVmOGQxNTQ5NTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvNzNlOTBk
LTA1NTMtNGZlNi05NmRlLWRlZWY4ZDE1NDk1MC8xL3N1NzUyNVBlRWFBbFBWcW94
VDdNcmctY1BUTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDsvngMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDHwzANBgkqhkiG9w0BAQsFAAOCAQEAl7X9Eg+OqqKQR6f6QvVu9MPxnktKeyWm
IQ76aFLO2nuLtgbz4+beByaVTgT/GgM3M4iVfXrc4rKtiEwHKak7VfeNydebtbcS
ydcM79k3O3DkH6g/m8Wkojgf1uAA93rqsQw+A9TDRUQ+eAfLUdgtl8YsAHm97M8U
GWBNQ/JVvF22tKREqWXKpQYS+VpSJCc9r7Qx6kkY7CfGRtTNDL6aEyF2kOOH8V/D
uj1aSSurbtwMNtxLGfGG5WNuzInX4JbGqIbDp9uPhIjDd7fzFFD4kMqwaNRXIdRl
O1kjOhe9/DNpUeXeawP+l0SQ9pMEp0CYeF2CchbZD/ygDvnaH5+HSg==
-----END CERTIFICATE-----
Generated at Fri May 3 02:16:55 2024 by rpki-client on console-ams.rpki-client.org