Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer (raw, json)
Hash identifier: 2XR9Sm9cqKsqcRlcnabIOqLiN+nVTZPKYB0LepSY25k=
Subject key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B125211F5116C44CE6C2A4EF68CE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 15743
AS: 205831
IP: 37.131.240.0/21
IP: 62.48.64.0/19
IP: 185.210.208.0/22
IP: 193.35.198.0/23
IP: 193.35.218.0/23
IP: 193.98.1.0/24
IP: 217.26.224.0/21
IP: 2a00:e68::/29
IP: 2a0b:2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:12:52:11:f5:11:6c:44:ce:6c:2a:4e:f6:8c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc127864cd43048550ed1699c584b5c14d80e098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:99:b9:61:a4:2c:c0:95:c5:11:09:90:a8:
9b:b3:5f:a5:bc:34:55:ae:f1:46:b6:c6:e3:9a:90:
a7:4d:44:87:d7:e7:0a:2f:9d:17:c6:59:f9:21:e2:
97:46:32:2f:0e:04:70:54:30:68:ee:ff:3f:ab:d0:
0a:2c:ab:5c:a8:7e:c6:b6:ae:db:c7:ae:a5:22:91:
87:6e:23:a2:4f:3d:ef:ce:91:a1:4c:99:ce:8e:fa:
37:91:1a:b3:4f:ca:47:ab:bd:48:87:5a:9e:28:8a:
17:b0:f2:eb:e4:53:d0:c8:07:7e:dd:1f:65:c7:6e:
46:c5:bb:1a:a0:50:c0:92:e4:3b:5e:9f:89:c5:cc:
2e:81:b0:ec:94:ec:58:0f:79:91:44:08:d3:92:26:
b5:23:4d:eb:8a:e6:e8:b1:5d:e1:d3:96:3e:42:d4:
aa:b1:47:d5:5b:2b:d1:ed:4d:cc:4a:85:c1:b1:bd:
d5:0f:76:0d:7f:a5:c0:a1:a1:94:74:03:5b:0d:5e:
2c:bb:e7:e1:e5:42:b2:b8:69:79:fb:96:76:26:af:
21:3d:38:94:37:2d:ae:da:1d:3b:f4:08:ad:b8:28:
fe:b5:83:17:dd:5a:34:88:42:c2:f1:1c:69:19:28:
70:9a:c1:31:c3:91:c3:a6:2f:b1:92:59:0c:6d:11:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.240.0/21
62.48.64.0/19
185.210.208.0/22
193.35.198.0/23
193.35.218.0/23
193.98.1.0/24
217.26.224.0/21
IPv6:
2a00:e68::/29
2a0b:2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15743
205831
Signature Algorithm: sha256WithRSAEncryption
79:93:c1:79:e9:bd:d6:38:dd:22:51:2b:76:89:4f:df:2f:8c:
76:28:01:23:f1:c2:a2:bf:c1:0f:92:3b:48:79:04:42:af:0a:
0d:26:1a:c2:af:d4:1a:ff:0c:d1:ee:ca:51:7f:5e:70:0b:b0:
33:70:ce:cb:9e:53:d2:99:c7:86:0f:44:f0:7a:b1:93:c9:5e:
d3:78:9a:3b:76:c5:d3:ef:bd:b1:27:78:f4:0f:cc:8e:58:57:
92:c9:4d:d4:f9:c5:ae:b4:03:3b:36:ca:83:f8:18:77:48:17:
93:8a:d8:62:db:51:f4:10:e5:5b:6c:1c:4d:be:8a:5c:61:5a:
a5:b3:69:83:1f:32:42:88:36:d4:8d:12:c4:a8:f5:20:da:e0:
7e:a4:75:68:6a:bf:9e:31:e0:e3:a2:71:cd:e6:34:65:b1:36:
ac:ab:e8:5e:da:ca:00:33:7f:ef:03:7f:39:f0:58:6c:d1:95:
82:e2:8c:b2:c1:81:6c:0c:be:3d:b6:29:45:3e:8f:2a:39:18:
a9:3d:3e:06:d7:af:f5:e0:08:5c:00:ea:6a:b8:3c:86:89:08:
9e:30:9a:0a:f0:90:4d:e7:55:31:fb:79:3e:ca:8b:8a:d8:60:
2f:e9:31:4d:2e:db:be:fd:99:76:c2:92:0f:6d:05:a8:2a:04:
a4:9e:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:04:42 2024 by rpki-client on console-fra.rpki-client.org