Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer (raw, json)
Hash identifier: ryMuuJ9+tdmGpKRWR6iiol7pdcDHotoKMwDVC41BqzE=
Subject key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EEB3F8D2EC440F417833B25F689B51B3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 17 Apr 2024 08:49:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 20552
AS: 44896
AS: 50606
AS: 57665
AS: 196872
AS: 204700
IP: 31.222.16.0/21
IP: 91.199.97.0/24
IP: 91.216.30.0/24
IP: 109.232.24.0/21
IP: 164.40.240.0/21
IP: 185.1.4.0/22
IP: 185.13.168.0/22
IP: 185.24.200.0/22
IP: 185.52.168.0/22
IP: 185.56.172.0/22
IP: 185.101.232.0/22
IP: 185.119.12.0/22
IP: 185.174.120.0/22
IP: 185.188.164.0/22
IP: 185.215.72.0/23
IP: 185.226.44.0/22
IP: 185.241.104.0/22
IP: 193.42.154.0/24
IP: 194.126.233.0/24
IP: 194.126.245.0/24
IP: 194.126.251.0/24
IP: 194.127.97.0/24
IP: 213.92.128.0/17
IP: 213.156.96.0/19
IP: 217.168.128.0/20
IP: 2001:7f8:4b::/48
IP: 2a00:9660::/32
IP: 2a02:d88::/32
IP: 2a02:54e0::/29
IP: 2a02:6640::/32
IP: 2a0b:a6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:3f:8d:2e:c4:40:f4:17:83:3b:25:f6:89:b5:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 08:49:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:d0:ea:e7:96:7d:69:b3:5c:de:24:9b:82:
31:d5:47:e5:18:10:22:57:18:2d:6a:6d:e2:e1:ac:
cd:86:da:f6:09:ae:67:d8:ff:7a:39:14:b3:92:5a:
8b:97:2a:56:aa:74:19:15:14:dd:20:ac:ea:de:59:
f1:ae:cc:df:1e:3c:2d:db:b7:56:c8:a9:4b:fa:fa:
a0:c3:94:a1:be:fb:33:3c:ec:81:4a:70:36:c8:1c:
ef:98:c5:a7:63:ee:e7:53:35:50:7c:a9:58:cc:51:
04:69:aa:eb:ea:b0:43:4d:a4:ae:f6:fe:be:44:ee:
d4:69:91:2c:27:6f:2c:e9:57:0b:fc:2a:d4:97:6c:
7d:0b:23:91:fa:08:2e:2d:6e:18:95:b4:d9:06:65:
2b:e6:16:8d:52:2c:dd:fc:67:99:1a:8b:ce:02:90:
71:e6:af:61:b9:91:55:cb:a3:cf:18:29:b2:aa:8c:
94:3a:8d:25:88:0a:f3:98:1c:3b:28:83:02:37:23:
54:8c:09:77:3f:aa:e0:19:b2:42:12:5b:57:af:60:
b7:76:32:f5:a2:29:ae:af:7d:01:b0:98:ac:3f:15:
60:ab:28:47:23:0d:06:5c:86:07:7e:19:a5:b4:d9:
e1:64:58:db:64:4c:ca:2e:6a:18:98:8f:dc:fe:20:
15:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.16.0/21
91.199.97.0/24
91.216.30.0/24
109.232.24.0/21
164.40.240.0/21
185.1.4.0/22
185.13.168.0/22
185.24.200.0/22
185.52.168.0/22
185.56.172.0/22
185.101.232.0/22
185.119.12.0/22
185.174.120.0/22
185.188.164.0/22
185.215.72.0/23
185.226.44.0/22
185.241.104.0/22
193.42.154.0/24
194.126.233.0/24
194.126.245.0/24
194.126.251.0/24
194.127.97.0/24
213.92.128.0/17
213.156.96.0/19
217.168.128.0/20
IPv6:
2001:7f8:4b::/48
2a00:9660::/32
2a02:d88::/32
2a02:54e0::/29
2a02:6640::/32
2a0b:a6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20552
44896
50606
57665
196872
204700
Signature Algorithm: sha256WithRSAEncryption
4a:6f:30:fa:b3:48:fb:1d:22:4e:01:92:1a:7d:2a:2a:e0:7b:
ed:b9:e5:41:49:0d:fd:28:cf:a6:16:bc:cc:05:61:5f:d9:9d:
e8:1a:88:9e:45:4d:79:00:e9:e1:da:9a:c9:11:b4:b6:41:84:
ac:fe:61:4c:e8:bc:f7:fa:5b:f1:40:0d:75:05:87:42:0b:ff:
7b:be:a9:22:86:0f:f3:08:af:9e:36:c0:7b:f4:07:2d:eb:d3:
27:6f:2c:a0:1c:c7:8e:99:65:79:e1:f4:dd:6e:77:45:11:28:
ec:a1:d1:df:8b:46:2a:f8:31:87:56:d4:f3:a5:23:f7:82:a0:
db:4b:00:1f:28:36:83:da:d7:3c:fd:90:19:21:dd:e1:a5:82:
1c:e1:ed:3c:bd:09:dd:35:4c:9b:ba:9c:39:f6:d8:0f:9b:2d:
5b:11:f5:ae:f6:a7:42:d9:9f:a0:b3:2f:db:2b:7c:db:29:b1:
7a:21:a6:b8:c1:df:6e:b2:18:5c:2b:df:6a:e4:0e:ef:90:b0:
8d:ef:a3:39:66:c8:cb:7c:c8:fa:08:ba:91:bd:97:d2:8f:77:
c0:c0:41:a3:f9:8b:25:f9:83:27:8e:20:13:7d:89:86:80:e8:
a2:c8:be:37:ec:1f:9f:8c:83:8e:1c:96:85:b8:b1:ad:42:59:
bf:f2:76:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:04:46 2024 by rpki-client on console-fra.rpki-client.org