Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jlexRHZCwU8RwEtkHPHY3orax4Q.cer
File: jlexRHZCwU8RwEtkHPHY3orax4Q.cer (raw, json)
Hash identifier: CzhEK5+SvXMXzcU0gkHdHAo4r6VHn4611ijiElgQFlI=
Subject key identifier: 8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B381264BFCE0CB53ACC5B5C135EBAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35213
AS: 205239
IP: 91.201.168.0/24
IP: 91.205.64.0/22
IP: 91.229.101.0/24
IP: 91.239.136.0/22
IP: 176.111.51.0/24
IP: 193.0.247.0/24
IP: 2001:678:31c::/48
IP: 2a13:61c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:81:26:4b:fc:e0:cb:53:ac:c5:b5:c1:35:eb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e57b1447642c14f11c04b641cf1d8de8adac784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:2d:1e:46:28:5a:15:21:98:1b:b0:da:9f:
2f:37:d0:2b:f1:78:05:87:08:1a:6f:63:55:27:f4:
b8:51:86:e1:fb:96:6c:24:fc:6d:43:35:1a:44:64:
06:34:85:33:7e:c8:99:e4:08:98:5f:db:8b:e6:ef:
e9:63:5b:f2:a5:38:b5:5b:dc:1b:38:c3:21:94:40:
13:e1:de:80:a4:8c:ee:0a:88:38:83:39:12:28:49:
1d:e0:f9:4d:7a:72:fa:bf:71:d0:36:6a:e7:11:3b:
bd:7f:98:9c:a3:77:b2:e3:ec:2e:19:b0:fc:2e:6e:
c0:c2:7a:b5:44:b1:5c:c6:6d:5d:3f:59:c5:dc:6d:
a4:ee:dd:a2:44:fc:91:bb:5f:06:7b:e9:14:f5:e7:
24:26:e4:6b:f3:3b:f6:1c:7e:0f:8e:44:7c:1f:d9:
5e:4d:57:7d:6d:bb:7e:18:47:de:b8:07:21:29:64:
3d:c3:3a:b6:09:61:25:20:eb:27:ba:25:bd:98:3d:
c6:5b:07:28:df:44:63:05:fa:26:6a:df:30:07:d8:
ef:6f:4c:56:72:c5:74:64:48:46:df:8b:98:39:c9:
78:61:b9:8d:84:d7:28:64:5d:21:ea:ae:12:c3:66:
e4:7c:df:8c:3b:bb:8b:0c:b8:fc:ad:b0:3d:71:35:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:B1:44:76:42:C1:4F:11:C0:4B:64:1C:F1:D8:DE:8A:DA:C7:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e1c7c9-cc80-45d7-a6d8-af334a0a1e93/1/jlexRHZCwU8RwEtkHPHY3orax4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.168.0/24
91.205.64.0/22
91.229.101.0/24
91.239.136.0/22
176.111.51.0/24
193.0.247.0/24
IPv6:
2001:678:31c::/48
2a13:61c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35213
205239
Signature Algorithm: sha256WithRSAEncryption
82:97:b4:1c:0b:6a:bb:18:2a:e2:0b:08:7d:71:42:ab:0f:86:
a2:4b:ad:1f:12:e8:f8:7d:92:70:0a:61:00:03:2c:34:09:36:
cb:e8:e6:36:91:d0:b1:57:10:5a:a9:a3:36:cc:7b:77:18:95:
41:10:ea:5a:5c:66:eb:e2:53:d2:6e:94:74:48:b2:5a:ac:25:
aa:95:16:41:bb:bb:0a:86:ee:a6:fd:e5:95:bc:46:71:bf:ed:
2d:a5:65:76:73:93:66:9c:22:93:79:4c:c4:97:07:ca:52:c0:
e8:58:d3:b0:a0:53:b2:33:2a:0b:bc:3e:7b:ca:8b:05:37:5a:
bc:b6:68:de:d1:14:c8:30:53:82:a2:f4:f9:b7:25:77:35:16:
b7:72:4e:81:16:c7:bf:28:67:89:ce:9c:37:a7:da:3b:91:42:
c3:c2:aa:21:1e:c7:54:b4:d4:35:fa:22:f9:75:98:39:c7:f8:
ae:3e:0d:82:c8:9e:3c:27:5a:0e:ad:ae:b0:a6:63:e1:fc:da:
c1:54:cb:68:7f:e3:0f:c6:0e:b9:95:e9:ff:70:47:44:a7:65:
d3:26:9d:31:92:6c:90:ba:6b:53:b3:c4:28:dd:a6:fc:e4:d6:
84:83:41:d0:5b:16:8b:18:a4:93:be:46:7c:70:c1:81:6d:cf:
d6:18:e7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:20 2025 by rpki-client on console.sobornost.net