Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer (raw, json)
Hash identifier: nPP4KhWninwms3druPM0KZ6FmJl+OJHw9P6x1VMzN4A=
Subject key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA993DEA43C988A977355CD931A0E087
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 14:34:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 41175
AS: 42595
AS: 49419
AS: 205788
IP: 45.80.56.0/22
IP: 45.83.60.0/22
IP: 45.93.240.0/22
IP: 45.137.208.0/22
IP: 81.201.208.0/20
IP: 84.19.128.0/19
IP: 91.192.252.0/22
IP: 91.223.51.0/24
IP: 91.224.36.0/23
IP: 185.56.212.0/22
IP: 185.57.168.0/22
IP: 185.114.104.0/22
IP: 185.224.56.0/22
IP: 188.65.152.0/21
IP: 193.41.118.0/23
IP: 193.138.74.0/24
IP: 193.254.192.0/23
IP: 195.78.36.0/23
IP: 2a00:e900::/29
IP: 2a01:4400::/32
IP: 2a02:5120::/32
IP: 2a0b:fd80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:3d:ea:43:c9:88:a9:77:35:5c:d9:31:a0:e0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:34:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cfeace714c29568ef197007b141d12758cc415d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:64:a7:a3:71:0c:09:5e:c7:d4:99:d0:5f:df:
33:6e:a2:20:44:63:e4:98:da:3c:70:85:30:01:14:
8b:77:f2:1d:0b:48:12:7c:dd:6f:bd:a2:8c:57:7c:
ba:2d:6c:86:b8:42:2c:04:f3:ae:00:38:70:44:9c:
4d:e4:29:8f:07:8a:95:19:c0:85:80:58:c6:4c:0c:
2f:a8:aa:f1:97:8a:d1:cf:cb:b8:37:81:a1:62:76:
a6:c0:0a:fe:ba:de:14:b8:af:10:86:3f:12:e2:2e:
5c:e2:51:b8:64:bb:4c:e4:13:22:99:0f:b6:72:6d:
a7:d1:25:1b:2b:2f:a5:e5:3e:70:35:bb:c0:50:6f:
ff:7b:13:a4:55:a7:a9:5a:0b:26:b5:b7:ca:38:01:
fd:21:82:a4:59:2c:f8:4a:c9:fd:2e:2e:8d:cd:6a:
8c:8c:31:f6:70:44:c6:a3:fc:20:48:28:dc:bc:bd:
2b:a2:50:47:75:57:4f:dd:9d:18:d7:93:f4:70:9f:
cc:fc:48:1d:50:c9:7d:65:92:70:43:69:12:75:8e:
3c:f3:4f:77:b3:cb:fa:42:c9:7a:85:2a:f9:1b:3a:
ef:12:2c:b8:9d:1e:ae:d3:0c:b4:c3:f2:7f:12:16:
8f:58:13:74:8b:da:c9:4d:f7:7d:ff:fd:da:bc:3e:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.56.0/22
45.83.60.0/22
45.93.240.0/22
45.137.208.0/22
81.201.208.0/20
84.19.128.0/19
91.192.252.0/22
91.223.51.0/24
91.224.36.0/23
185.56.212.0/22
185.57.168.0/22
185.114.104.0/22
185.224.56.0/22
188.65.152.0/21
193.41.118.0/23
193.138.74.0/24
193.254.192.0/23
195.78.36.0/23
IPv6:
2a00:e900::/29
2a01:4400::/32
2a02:5120::/32
2a0b:fd80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41175
42595
49419
205788
Signature Algorithm: sha256WithRSAEncryption
af:a4:e1:be:a9:4d:82:ba:1b:e1:40:d1:81:11:23:77:1b:a7:
69:d5:33:1d:e8:8d:c3:75:e7:f1:f1:d3:ed:f5:cf:19:f7:a7:
05:51:70:38:ff:b1:50:57:c4:f0:71:7a:ff:f7:01:ff:ec:b7:
31:4c:2f:44:e8:2d:77:90:4a:df:62:de:fa:69:6f:c4:56:78:
81:1b:6c:65:c4:81:5b:94:d4:8d:59:9c:d6:0b:21:dc:6f:8f:
bf:82:3e:ba:a5:92:1a:3d:88:11:c1:12:42:c9:f5:da:9a:8a:
f7:da:57:a2:df:4c:d3:cc:98:21:c7:4f:45:f8:7b:cc:b6:8e:
3b:7e:db:23:08:a3:e6:18:8c:2c:c5:86:08:20:86:ae:8b:f7:
4c:1a:8c:27:07:ba:aa:7c:3c:86:9c:9c:01:bb:ad:f5:1d:22:
95:02:1d:f3:0e:6d:fa:c8:0a:9a:5e:e9:1e:a4:a4:9e:c8:5f:
47:30:3d:37:a9:49:a7:e3:cd:f5:68:ed:80:3f:ea:c1:17:90:
e2:c7:bc:ae:49:10:96:b8:6e:b9:f1:8f:13:da:25:b8:bf:5e:
4b:bc:ec:e3:62:9e:28:8e:c3:45:c9:a2:55:c8:a1:dc:00:10:
dc:a9:e5:21:f6:47:30:4e:84:c9:24:98:a5:e4:51:72:c8:8a:
78:9f:59:e5
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgISAYzKmT3qQ8mIqXc1XNkxoOCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTQzNDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmVhY2U3MTRjMjk1NjhlZjE5NzAwN2IxNDFkMTI3NThjYzQxNWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWSno3EMCV7H1JnQX98zbqIgRGPk
mNo8cIUwARSLd/IdC0gSfN1vvaKMV3y6LWyGuEIsBPOuADhwRJxN5CmPB4qVGcCF
gFjGTAwvqKrxl4rRz8u4N4GhYnamwAr+ut4UuK8Qhj8S4i5c4lG4ZLtM5BMimQ+2
cm2n0SUbKy+l5T5wNbvAUG//exOkVaepWgsmtbfKOAH9IYKkWSz4Ssn9Li6NzWqM
jDH2cETGo/wgSCjcvL0rolBHdVdP3Z0Y15P0cJ/M/EgdUMl9ZZJwQ2kSdY488093
s8v6Qsl6hSr5GzrvEiy4nR6u0wy0w/J/EhaPWBN0i9rJTfd9//3avD43dwIDAQAB
o4IDPDCCAzgwHQYDVR0OBBYEFM/qznFMKVaO8ZcAexQdEnWMxBXVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2ZjMWJl
Zi1lNzJiLTRhNDUtOTQ2My04ZmQzOTRiNTM1N2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvZmMxYmVm
LWU3MmItNGE0NS05NDYzLThmZDM5NGI1MzU3Yy8xL3otck9jVXdwVm83eGx3QjdG
QjBTZFl6RUZkVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGrBggrBgEF
BQcBBwEB/wSBmzCBmDByBAIAATBsAwQCLVA4AwQCLVM8AwQCLV3wAwQCLYnQAwQE
UcnQAwQFVBOAAwQCW8D8AwQAW98zAwQBW+AkAwQCuTjUAwQCuTmoAwQCuXJoAwQC
ueA4AwQDvEGYAwQBwSl2AwQAwYpKAwQBwf7AAwQBw04kMCIEAgACMBwDBQMqAOkA
AwUAKgFEAAMFACoCUSADBQMqC/2AMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwCg
1wIDAKZjAgMAwQsCAwMj3DANBgkqhkiG9w0BAQsFAAOCAQEAr6ThvqlNgrob4UDR
gREjdxunadUzHeiNw3Xn8fHT7fXPGfenBVFwOP+xUFfE8HF6//cB/+y3MUwvROgt
d5BK32Le+mlvxFZ4gRtsZcSBW5TUjVmc1gsh3G+Pv4I+uqWSGj2IEcESQsn12pqK
99pXot9M08yYIcdPRfh7zLaOO37bIwij5hiMLMWGCCCGrov3TBqMJwe6qnw8hpyc
Abut9R0ilQId8w5t+sgKml7pHqSknshfRzA9N6lJp+PN9WjtgD/qwReQ4se8rkkQ
lrhuufGPE9oluL9eS7zs42KeKI7DRcmiVcih3AAQ3KnlIfZHME6EySSYpeRRcsiK
eJ9Z5Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:23:52 2024 by rpki-client on console-fra.rpki-client.org