Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
File: v7CXo2wjJdEDH_QJG6AKhkWdQog.cer (raw, json)
Hash identifier: ZsJYJvSHFK1ObS4EWgOv+a0tVfLK0Zb58q6+aMxiKi0=
Subject key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B939DC0DD7882C2261F5A257713009
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:16 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 8696
AS: 12301
AS: 20523
AS: 20922
AS: 34588
IP: 62.77.192.0/22
IP: 62.77.200.0 -- 62.77.239.255
IP: 62.77.242.0 -- 62.77.247.255
IP: 79.120.128.0/19
IP: 79.120.168.0/23
IP: 79.120.176.0 -- 79.120.247.255
IP: 79.120.250.0/23
IP: 81.0.64.0 -- 81.0.81.255
IP: 81.0.88.0/23
IP: 81.0.96.0/23
IP: 81.0.100.0 -- 81.0.107.255
IP: 81.0.110.0 -- 81.0.121.255
IP: 81.0.124.0/23
IP: 81.94.176.0/20
IP: 82.131.160.0 -- 82.131.181.255
IP: 82.131.192.0/22
IP: 82.131.199.0/24
IP: 82.131.208.0/21
IP: 82.141.128.0/18
IP: 82.144.160.0/22
IP: 82.144.168.0/22
IP: 82.144.178.0 -- 82.144.187.255
IP: 82.144.190.0/23
IP: 87.97.64.0/20
IP: 89.186.98.0 -- 89.186.101.255
IP: 89.186.104.0/23
IP: 89.186.116.0/23
IP: 91.82.8.0 -- 91.82.23.255
IP: 91.82.40.0 -- 91.82.55.255
IP: 91.82.58.0/23
IP: 91.82.62.0/23
IP: 91.82.72.0 -- 91.82.81.255
IP: 91.82.84.0 -- 91.82.129.255
IP: 91.82.148.0 -- 91.82.159.255
IP: 91.82.174.0/23
IP: 91.82.184.0/22
IP: 91.82.192.0 -- 91.82.209.255
IP: 91.82.216.0 -- 91.82.227.255
IP: 91.82.236.0/22
IP: 91.82.244.0 -- 91.82.249.255
IP: 91.82.252.0/22
IP: 91.83.40.0 -- 91.83.51.255
IP: 91.83.56.0 -- 91.83.93.255
IP: 91.83.96.0 -- 91.83.101.255
IP: 91.83.104.0 -- 91.83.109.255
IP: 91.83.112.0/21
IP: 91.83.122.0 -- 91.83.135.255
IP: 91.83.146.0 -- 91.83.153.255
IP: 91.83.156.0 -- 91.83.179.255
IP: 91.83.208.0 -- 91.83.251.255
IP: 91.83.254.0/23
IP: 94.125.248.0/21
IP: 185.50.28.0/22
IP: 193.68.32.0/19
IP: 193.91.64.0/19
IP: 193.226.194.0 -- 193.226.211.255
IP: 193.226.216.0 -- 193.226.225.255
IP: 193.226.228.0/22
IP: 193.226.234.0 -- 193.226.237.255
IP: 193.226.242.0/23
IP: 193.226.250.0 -- 193.226.255.255
IP: 194.143.224.0/19
IP: 194.169.253.0/24
IP: 195.184.0.0/19
IP: 212.24.160.0/19
IP: 212.108.192.0/18
IP: 213.16.64.0/18
IP: 213.163.0.0/18
IP: 213.197.64.0/21
IP: 213.197.96.0/19
IP: 213.253.192.0/18
IP: 217.150.128.0/20
IP: 2001:1aa0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:39:dc:0d:d7:88:2c:22:61:f5:a2:57:71:30:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:75:94:1e:ee:02:30:73:d2:fe:03:be:0c:
82:1f:aa:c4:c2:ae:2f:20:8f:ad:b0:86:07:d8:f3:
85:04:e5:41:3a:b7:61:c1:82:ac:c2:14:ed:b4:f8:
a6:c5:10:08:6e:7f:31:0c:50:3f:42:60:f2:e1:a3:
4a:54:e1:79:06:6b:dd:5c:3a:74:9d:7c:49:af:02:
b4:12:3a:62:73:d7:92:01:5a:0e:3e:39:15:e1:ad:
0c:b2:5e:14:45:2b:7e:7d:c9:61:32:8a:82:14:7f:
21:bf:5f:42:a0:6e:ec:3d:ce:c6:e1:ef:99:09:a3:
ce:aa:d4:1b:bf:1f:d7:24:a3:5f:44:e1:60:0d:cb:
48:28:38:ea:63:ab:ea:c6:5c:42:32:47:4f:79:6a:
fe:a7:76:1c:57:00:7a:7c:9e:8d:20:9f:e0:6e:73:
09:50:30:a4:25:5b:c9:54:5e:25:8c:4b:29:ec:3d:
d1:19:64:46:43:40:58:cf:a5:50:1d:b8:47:85:6e:
0b:94:cc:03:fc:40:35:f2:f4:9d:5c:8a:72:46:fc:
2c:ca:37:10:e4:9b:65:61:99:67:cc:05:d6:8f:fd:
bd:20:95:0d:97:b2:0e:3b:bf:03:cd:fc:46:40:ce:
33:be:9d:7a:c1:e3:11:05:13:76:ca:4f:01:f2:1d:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.77.192.0/22
62.77.200.0-62.77.239.255
62.77.242.0-62.77.247.255
79.120.128.0/19
79.120.168.0/23
79.120.176.0-79.120.247.255
79.120.250.0/23
81.0.64.0-81.0.81.255
81.0.88.0/23
81.0.96.0/23
81.0.100.0-81.0.107.255
81.0.110.0-81.0.121.255
81.0.124.0/23
81.94.176.0/20
82.131.160.0-82.131.181.255
82.131.192.0/22
82.131.199.0/24
82.131.208.0/21
82.141.128.0/18
82.144.160.0/22
82.144.168.0/22
82.144.178.0-82.144.187.255
82.144.190.0/23
87.97.64.0/20
89.186.98.0-89.186.101.255
89.186.104.0/23
89.186.116.0/23
91.82.8.0-91.82.23.255
91.82.40.0-91.82.55.255
91.82.58.0/23
91.82.62.0/23
91.82.72.0-91.82.81.255
91.82.84.0-91.82.129.255
91.82.148.0-91.82.159.255
91.82.174.0/23
91.82.184.0/22
91.82.192.0-91.82.209.255
91.82.216.0-91.82.227.255
91.82.236.0/22
91.82.244.0-91.82.249.255
91.82.252.0/22
91.83.40.0-91.83.51.255
91.83.56.0-91.83.93.255
91.83.96.0-91.83.101.255
91.83.104.0-91.83.109.255
91.83.112.0/21
91.83.122.0-91.83.135.255
91.83.146.0-91.83.153.255
91.83.156.0-91.83.179.255
91.83.208.0-91.83.251.255
91.83.254.0/23
94.125.248.0/21
185.50.28.0/22
193.68.32.0/19
193.91.64.0/19
193.226.194.0-193.226.211.255
193.226.216.0-193.226.225.255
193.226.228.0/22
193.226.234.0-193.226.237.255
193.226.242.0/23
193.226.250.0-193.226.255.255
194.143.224.0/19
194.169.253.0/24
195.184.0.0/19
212.24.160.0/19
212.108.192.0/18
213.16.64.0/18
213.163.0.0/18
213.197.64.0/21
213.197.96.0/19
213.253.192.0/18
217.150.128.0/20
IPv6:
2001:1aa0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8696
12301
20523
20922
34588
Signature Algorithm: sha256WithRSAEncryption
a3:a8:80:c4:d0:c1:37:20:c9:a5:27:56:46:b1:69:6e:57:8c:
08:d2:11:6a:96:1e:12:a8:22:92:ff:a9:6e:b9:bf:41:a2:60:
9a:aa:1d:64:83:c9:28:07:fa:d8:4d:87:1d:f8:d4:6e:d4:e0:
7f:98:87:8a:ba:43:8a:da:46:6b:d0:10:11:f9:d8:2f:e1:a3:
24:77:a6:c3:60:c2:5a:7c:92:e2:5c:9f:6c:21:bf:d6:a6:95:
a6:65:2e:a1:9d:12:12:15:18:52:4a:99:95:45:5a:4c:a0:f9:
7e:4f:78:e0:75:42:b9:3f:2e:64:78:9a:fa:1e:b6:7e:03:1b:
a3:99:d3:22:e7:dd:a0:8a:40:a6:66:51:7e:80:24:80:5f:51:
7c:13:70:b3:a7:7a:79:3c:9a:4e:f0:ad:0f:c2:46:bf:e5:a0:
56:8c:ac:49:83:61:da:78:66:c3:15:6b:93:7f:e4:8f:38:01:
db:e7:b4:73:5b:54:59:1e:e6:5c:d1:b8:18:d5:36:9c:99:12:
96:29:16:39:a1:96:60:b7:6a:51:34:5f:33:87:fb:f5:53:4c:
1b:e4:f4:f8:da:34:34:dc:a6:af:c7:69:b8:35:c8:61:79:e6:
27:7c:89:51:0d:6f:b4:22:e8:5c:ec:d3:9c:c5:e9:13:83:92:
30:8b:1e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 07:33:43 2024 by rpki-client on console-ams.rpki-client.org