Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer (raw, json)
Hash identifier: 5d9VpGgI2M8JK+Z2Qw+t1RNWzLXbFOeQjYgfRNq45dg=
Subject key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500C129BB9BB2150548B7485E73A687
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210015
IP: 2.58.176.0/22
IP: 45.80.248.0/22
IP: 141.98.68.0/22
IP: 152.89.228.0/22
IP: 193.151.160.0/22
IP: 2a0d:e7c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c1:29:bb:9b:b2:15:05:48:b7:48:5e:73:a6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:39:f1:c9:00:e9:f9:5c:61:45:9f:f9:9b:41:
28:50:57:df:ed:68:41:10:2b:24:f7:74:ec:bf:3f:
82:bf:8a:59:47:e3:39:d8:97:01:dd:e9:11:80:c3:
9a:76:78:dc:f8:e4:58:1d:dd:c9:9c:6e:9c:c3:30:
6b:47:96:81:9e:42:7e:3c:04:68:aa:b0:b4:c8:f1:
93:9d:d4:b9:67:22:ea:60:21:db:a3:fd:b9:77:0d:
45:3f:e0:2c:ae:d8:6f:37:ba:cd:55:19:3c:20:28:
6b:24:ac:45:fe:b2:25:16:ef:53:ee:f2:95:d2:df:
33:b6:21:5a:da:31:99:71:4d:f3:cf:3f:3f:fc:e2:
d6:c6:b4:45:2a:5c:91:61:d6:7e:89:58:1b:07:2a:
e9:7c:1f:a4:27:c1:29:cf:e6:38:05:f2:fc:b4:48:
fb:f0:20:bb:83:ed:28:68:39:e3:48:84:34:2e:99:
c8:c8:06:91:e8:c9:15:e8:9c:1a:54:42:1c:48:59:
a3:86:0b:e0:15:6d:a1:4c:f9:c9:90:3e:4a:60:aa:
47:66:24:85:65:f5:d7:ce:5c:e5:8e:b1:e4:bd:19:
2a:02:e6:2d:73:4b:f1:40:82:14:84:36:db:97:f0:
f3:4e:49:8c:93:09:1a:1d:83:40:58:65:58:10:dd:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.176.0/22
45.80.248.0/22
141.98.68.0/22
152.89.228.0/22
193.151.160.0/22
IPv6:
2a0d:e7c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210015
Signature Algorithm: sha256WithRSAEncryption
95:82:cd:6d:3a:1e:e2:07:28:d4:eb:7b:07:bf:d9:d8:b1:75:
f4:b6:6b:ee:10:7a:86:0d:de:2a:80:d4:fa:63:eb:09:1a:3d:
cd:b7:a7:e9:04:42:95:6c:2a:71:a6:68:1e:a1:1b:2c:83:15:
19:7b:b1:37:ec:b3:d1:1b:22:ea:6c:11:cc:6f:c2:c5:5c:22:
24:15:b8:78:96:7f:8f:e7:cc:ab:6d:f6:ae:b6:a3:b9:3a:61:
c2:e4:98:6c:61:be:2d:48:9d:79:a5:7d:e4:05:c6:51:e1:e6:
b5:7d:dd:96:92:8d:68:35:01:96:c3:c6:a3:1a:ae:43:4d:e4:
0f:4b:32:d3:b9:43:6a:e3:07:b8:03:af:24:b5:8a:5b:f4:ac:
6c:5b:65:d2:0e:fe:8e:7d:fa:65:8b:5d:e5:5e:b9:12:57:17:
e3:e1:3a:ac:a3:90:99:d7:79:c9:48:44:af:66:f0:2d:cd:96:
cb:14:03:9f:1a:e2:4e:e9:c4:6e:d3:6b:4d:8f:6e:5b:c5:e1:
9c:4b:de:aa:fa:d0:10:c9:cf:c0:e9:26:5e:e0:3c:2c:65:0c:
d5:62:48:7d:72:72:44:ec:d4:e3:6c:64:12:30:82:a4:a9:1a:
aa:25:f6:4b:de:b9:15:a3:7e:f9:d9:09:32:bc:20:11:0a:02:
52:bc:05:57
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAYzFAMEpu5uyFQVIt0hec6aHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGViMzRkZGEyZjgwOTQ5Njg0OTQ4OTIwNjMzNTFlZTBmMTBlOTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4znxyQDp+VxhRZ/5m0EoUFff7WhB
ECsk93Tsvz+Cv4pZR+M52JcB3ekRgMOadnjc+ORYHd3JnG6cwzBrR5aBnkJ+PARo
qrC0yPGTndS5ZyLqYCHbo/25dw1FP+AsrthvN7rNVRk8IChrJKxF/rIlFu9T7vKV
0t8ztiFa2jGZcU3zzz8//OLWxrRFKlyRYdZ+iVgbByrpfB+kJ8Epz+Y4BfL8tEj7
8CC7g+0oaDnjSIQ0LpnIyAaR6MkV6JwaVEIcSFmjhgvgFW2hTPnJkD5KYKpHZiSF
ZfXXzlzljrHkvRkqAuYtc0vxQIIUhDbbl/DzTkmMkwkaHYNAWGVYEN0B2QIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFMTrNN2i+AlJaElIkgYzUe4PEOkaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0L2I5NjU4
NC0xZjcxLTQ4YmItYTAyMS1hMzQ3YjU2ZjNiOWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvYjk2NTg0
LTFmNzEtNDhiYi1hMDIxLWEzNDdiNTZmM2I5YS8xL3hPczAzYUw0Q1Vsb1NVaVNC
ak5SN2c4UTZSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQCAjqwAwQCLVD4AwQCjWJEAwQCmFnkAwQCwZeg
MA0EAgACMAcDBQMqDefAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM0XzANBgkq
hkiG9w0BAQsFAAOCAQEAlYLNbToe4gco1Ot7B7/Z2LF19LZr7hB6hg3eKoDU+mPr
CRo9zben6QRClWwqcaZoHqEbLIMVGXuxN+yz0Rsi6mwRzG/CxVwiJBW4eJZ/j+fM
q232rrajuTphwuSYbGG+LUideaV95AXGUeHmtX3dlpKNaDUBlsPGoxquQ03kD0sy
07lDauMHuAOvJLWKW/SsbFtl0g7+jn36ZYtd5V65ElcX4+E6rKOQmdd5yUhEr2bw
Lc2WyxQDnxriTunEbtNrTY9uW8XhnEveqvrQEMnPwOkmXuA8LGUM1WJIfXJyROzU
42xkEjCCpKkaqiX2S965FaN++dkJMrwgEQoCUrwFVw==
-----END CERTIFICATE-----
Generated at Thu Apr 25 05:25:39 2024 by rpki-client on console-ams.rpki-client.org