RPKI Certificate
Location: ./rsync/rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer (download)
Subject key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Manifest: rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
CA Repository: rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/
Notification URL: https://rrdp.ripe.net/notification.xml
Subject Public Key Info:
Subordinate resources:
until: 2023-07-01T00:00:00Z
Resources:
1: AS: 20940
2: AS: 21342
3: AS: 21357
4: AS: 21399
5: AS: 31107 -- 31110
6: AS: 31377
7: AS: 33905
8: AS: 34164
9: AS: 34850
10: AS: 35204
11: AS: 39836
12: AS: 43639
13: AS: 48163
14: AS: 49249
15: AS: 49846
16: AS: 200005
17: AS: 213120
1: IP: 2.16.0.0/13
2: IP: 37.26.112.0/20
3: IP: 80.67.64.0/19
4: IP: 81.200.64.0/20
5: IP: 84.53.128.0/18
6: IP: 88.221.0.0/16
7: IP: 92.122.0.0/15
8: IP: 93.191.168.0/21
9: IP: 94.127.72.0/21
10: IP: 95.100.0.0/15
11: IP: 109.69.136.0/21
12: IP: 185.66.240.0/22
13: IP: 185.123.168.0/22
14: IP: 193.108.88.0/21
15: IP: 193.108.152.0/22
16: IP: 194.35.36.0/22
17: IP: 195.95.192.0/22
18: IP: 195.245.124.0/22
19: IP: 2a02:2370::/29
20: IP: 2a02:26f0::/29
21: IP: 2a0b:35c0::/29
--
$ openssl x509 -text -inform DER -in ./rsync/rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710845036184 (0xa581aa7698)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:02:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:78:94:cc:3c:fd:38:63:99:84:68:84:b0:
b1:1d:8c:95:60:40:85:28:91:eb:d2:59:ac:5a:17:
4c:9e:8a:8a:93:8e:d0:0a:37:19:e2:bf:aa:0b:0a:
0c:a5:72:c1:8c:f3:ac:d0:cd:df:40:bc:ac:51:df:
1a:7b:b4:8c:f5:50:3b:3c:90:cc:7f:db:a4:68:86:
60:6b:6d:f9:85:1e:93:9a:b1:04:d5:79:3f:55:e2:
78:4d:7f:36:b8:85:97:ab:ef:ad:ee:23:fb:79:29:
56:6f:e1:a2:be:aa:29:b5:8c:34:e4:ee:f6:9e:75:
4b:bf:94:79:28:0e:01:4c:ab:80:a9:cd:42:70:ba:
e7:7c:4a:69:50:91:45:5d:eb:74:ba:62:ec:fa:7a:
8f:69:17:9b:cb:a2:1d:c2:f6:f1:5d:ed:be:ef:b7:
aa:b3:80:c3:4e:69:6a:d0:57:b7:64:9d:a0:fa:97:
89:b8:16:1c:8c:d8:b4:36:2c:3d:26:51:f3:9b:58:
23:ec:ce:65:d6:c2:45:37:65:d3:f7:3e:ce:17:bc:
77:8a:8b:ae:34:e8:b6:8f:f1:45:d3:f5:ac:47:dd:
58:55:67:1f:b0:86:b1:f5:17:c6:ab:83:2a:c2:f4:
9b:dd:ad:85:91:3a:d2:37:3b:f3:0c:ee:fd:56:ba:
88:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.0.0/13
37.26.112.0/20
80.67.64.0/19
81.200.64.0/20
84.53.128.0/18
88.221.0.0/16
92.122.0.0/15
93.191.168.0/21
94.127.72.0/21
95.100.0.0/15
109.69.136.0/21
185.66.240.0/22
185.123.168.0/22
193.108.88.0/21
193.108.152.0/22
194.35.36.0/22
195.95.192.0/22
195.245.124.0/22
IPv6:
2a02:2370::/29
2a02:26f0::/29
2a0b:35c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20940
21342
21357
21399
31107-31110
31377
33905
34164
34850
35204
39836
43639
48163
49249
49846
200005
213120
Signature Algorithm: sha256WithRSAEncryption
47:c0:1e:27:12:50:cc:45:8e:b2:11:a8:eb:32:bb:ad:20:2d:
3b:38:32:09:84:e5:5e:d2:c1:14:3f:7b:ec:55:96:ed:dc:9e:
d9:7a:43:7d:c1:60:fe:1c:50:53:91:87:2e:e3:87:29:85:d8:
d5:f3:c7:64:30:56:9b:29:ea:01:eb:58:66:8f:7d:31:d9:bd:
fb:60:36:92:a5:88:e1:e7:7b:f1:75:fc:de:b0:7f:61:11:49:
ff:b2:e9:ea:61:48:65:4f:de:de:d6:7a:a4:06:f3:94:99:8a:
52:5b:aa:ec:46:d9:23:16:ed:82:ed:bb:03:7a:ee:96:8b:76:
c7:5f:73:15:b1:ff:61:b6:2e:7e:e6:c9:6a:2f:9d:07:d8:f4:
b1:62:65:e5:b9:1d:ae:af:08:45:ad:29:a4:6e:6f:97:ad:90:
56:0e:7d:b4:eb:b6:e3:c9:f9:20:28:b0:d5:52:2a:0f:4c:16:
e7:d1:98:11:3c:8a:65:1b:f1:5f:18:f9:de:60:da:6b:c1:c3:
3a:4c:dd:20:a6:03:12:d1:22:33:c8:b7:e0:de:b6:a4:77:81:
27:6f:bc:6d:32:15:89:d4:ef:0a:cd:1d:4a:17:5e:15:d7:10:
38:56:9c:2c:a4:3d:42:a1:9d:63:c8:18:c8:04:1e:a0:f7:76:
cf:81:e8:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jan 1 13:35:16 2022 by LibreSSL & rpki-client.