Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer
File: dcjJkAtWu9sDakNBBZ4XBUAdCjU.cer (raw, json)
Hash identifier: AUaSbjFehFprHXoJbfLc5JAev9kc3aF+eGBVh6mybeI=
Subject key identifier: 75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0184F52FAB29D6742BE49AB5A062AE7FF3F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.mft
caRepository: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/
Notify URL: https://rpki.zappiehost.com/rrdp/notification.xml
Certificate not before: Fri 09 Dec 2022 04:40:52 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 61138
AS: 200681
AS: 203033
AS: 203856 -- 203858
IP: 5.253.84.0/22
IP: 185.90.60.0/22
IP: 185.99.132.0/22
IP: 185.121.160.0/22
IP: 185.121.168.0/22
IP: 185.121.176.0/22
IP: 185.147.32.0/22
IP: 185.195.236.0/22
IP: 185.214.172.0/22
IP: 185.236.212.0/22
IP: 2a05:dfc0::/29
IP: 2a06:1280::/29
IP: 2a06:9f40::/29
IP: 2a06:9f80::/29
IP: 2a06:a000::/29
IP: 2a07:54c0::/29
IP: 2a09:54c0::/29
IP: 2a0a:6040::/29
IP: 2a0b:9e40::/29
IP: 2a0d:d900::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f5:2f:ab:29:d6:74:2b:e4:9a:b5:a0:62:ae:7f:f3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 9 04:40:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75c8c9900b56bbdb036a4341059e1705401d0a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:a4:32:5e:39:2d:a0:bd:85:f9:3e:4a:90:
7d:c5:3f:72:75:9f:ff:80:a7:76:37:ca:ee:7a:f5:
c4:ec:05:27:3d:69:02:74:bf:f2:93:2c:d7:b9:2f:
c2:b0:a3:ae:ec:44:47:80:7b:41:8e:14:be:ce:69:
b4:8c:8d:29:8c:a8:ee:d7:4c:ae:3f:05:0c:1a:c0:
bb:ae:a0:9a:94:d3:a5:a1:50:d2:cd:36:a9:d3:6a:
1e:ed:a6:9b:08:67:dc:08:53:09:56:40:d6:17:e9:
0c:18:ad:84:5c:25:f8:53:ae:31:d8:84:b4:c3:e7:
e0:1e:34:b1:fd:c9:85:e0:24:61:73:d3:84:87:36:
84:6b:fa:a7:be:0d:f3:4d:fd:f5:e4:dc:cc:5e:32:
e3:91:74:f9:99:7a:d8:55:71:e3:ce:be:b8:33:8c:
07:d1:e8:e3:51:84:62:8a:c8:b5:f2:28:4f:a1:60:
0d:cc:9c:a4:75:6a:1d:37:0a:dd:fa:81:62:c7:ba:
68:c6:1b:c6:3d:b2:b5:96:df:58:f3:fd:7f:ec:9a:
56:ba:4a:3b:eb:cb:90:dc:09:14:a3:a2:05:52:45:
56:0a:3e:15:18:ec:a8:08:90:14:05:90:32:9a:56:
a7:93:f9:a4:0e:a2:8d:b6:a7:a8:a9:6a:e1:72:b4:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C8:C9:90:0B:56:BB:DB:03:6A:43:41:05:9E:17:05:40:1D:0A:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2
RPKI Manifest - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/75C8C9900B56BBDB036A4341059E1705401D0A35.mft
RPKI Notify - URI:https://rpki.zappiehost.com/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/22
185.90.60.0/22
185.99.132.0/22
185.121.160.0/22
185.121.168.0/22
185.121.176.0/22
185.147.32.0/22
185.195.236.0/22
185.214.172.0/22
185.236.212.0/22
IPv6:
2a05:dfc0::/29
2a06:1280::/29
2a06:9f40::/29
2a06:9f80::/29
2a06:a000::/29
2a07:54c0::/29
2a09:54c0::/29
2a0a:6040::/29
2a0b:9e40::/29
2a0d:d900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61138
200681
203033
203856-203858
Signature Algorithm: sha256WithRSAEncryption
14:cd:a2:29:ee:c7:bd:42:88:34:e9:1c:4a:57:58:d9:63:d6:
a1:28:b3:56:16:b8:19:79:aa:47:75:2a:e8:4b:30:5e:ff:55:
48:01:e4:22:8d:71:8e:87:64:a0:7a:8c:ac:52:03:6b:92:88:
8f:5e:3b:e3:c9:c3:38:ba:93:ca:3a:49:23:57:ad:09:36:12:
f0:9b:62:1a:49:27:f6:23:4b:84:cb:ed:88:1b:25:89:41:33:
46:86:b2:54:bd:ef:46:c2:7c:79:02:4b:65:ec:53:e1:5d:bc:
23:d9:1c:17:26:bd:dc:d7:e1:ba:3f:dc:3d:c2:22:18:cb:6a:
fb:99:4c:7c:97:1d:8c:96:71:aa:8c:53:5d:e3:fd:89:43:7a:
de:64:86:5a:f3:64:2c:14:2b:32:67:a4:db:74:d8:21:14:4a:
30:5a:c7:90:f4:36:3c:51:58:bf:08:b2:1d:25:b3:cd:57:6d:
83:59:d2:88:e2:10:dd:58:06:97:41:bb:76:5e:f1:d7:34:5a:
60:ac:47:23:28:6c:1c:b4:eb:c3:ef:ec:4a:46:f7:cb:2e:f1:
bb:6c:16:42:2d:41:89:fb:14:eb:c7:ae:8b:4a:4c:07:98:06:
9d:b9:50:c2:e7:67:97:32:91:4b:31:a5:a7:1f:a4:8f:06:24:
b5:13:96:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:26:19 2025 by rpki-client