
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
File: ripe-to-afrinic.cer (raw, json)
Hash identifier: 64eh2w7qQrFQVPaQrRJ4kA83gUgE3EDvm0D0AWHCXHM=
Subject key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 12
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Manifest: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
caRepository: rsync://rpki.afrinic.net/repository/ripe/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Mon 30 Mar 2020 14:17:12 +0000
Certificate not after: Sun 30 Mar 2025 00:00:00 +0000
Subordinate resources: IP: 62.8.64.0/19
IP: 62.12.96.0/19
IP: 62.24.96.0/19
IP: 62.61.192.0/18
IP: 62.68.32.0/19
IP: 62.68.224.0/19
IP: 62.114.0.0/16
IP: 62.117.32.0/19
IP: 62.135.0.0/17
IP: 62.139.0.0/16
IP: 62.140.64.0/18
IP: 62.173.32.0/19
IP: 62.193.64.0/18
IP: 62.193.160.0/19
IP: 62.240.32.0/19
IP: 62.240.96.0/19
IP: 62.241.128.0/19
IP: 62.251.128.0/17
IP: 77.220.0.0/19
IP: 80.67.128.0/20
IP: 80.72.96.0/20
IP: 80.75.160.0/19
IP: 80.87.64.0/19
IP: 80.88.0.0/20
IP: 80.95.0.0/20
IP: 80.240.192.0/20
IP: 80.246.0.0/20
IP: 80.248.0.0/20
IP: 80.248.64.0/20
IP: 80.249.64.0/20
IP: 80.250.32.0/20
IP: 81.4.0.0/18
IP: 81.10.0.0/17
IP: 81.21.96.0/20
IP: 81.22.64.0/19
IP: 81.26.64.0/20
IP: 81.29.96.0/20
IP: 81.91.224.0/20
IP: 81.192.0.0/16
IP: 82.101.128.0/18
IP: 82.128.0.0/17
IP: 82.129.128.0/17
IP: 82.151.64.0/19
IP: 82.201.128.0/17
IP: 83.143.24.0/21
IP: 84.36.0.0/16
IP: 84.205.96.0/19
IP: 84.233.0.0/17
IP: 87.255.96.0/19
IP: 193.17.215.0/24
IP: 193.19.232.0/22
IP: 193.41.146.0/23
IP: 193.95.0.0/17
IP: 193.108.23.0/24
IP: 193.108.28.0/24
IP: 193.108.214.0/24
IP: 193.108.252.0/22
IP: 193.109.66.0/23
IP: 193.110.104.0/23
IP: 193.188.7.0/24
IP: 193.189.0.0 -- 193.189.65.255
IP: 193.189.128.0/24
IP: 193.194.1.0 -- 193.194.5.255
IP: 193.194.32.0 -- 193.194.95.255
IP: 193.194.128.0/24
IP: 193.194.160.0/19
IP: 193.221.218.0/24
IP: 193.227.0.0/18
IP: 193.227.128.0/24
IP: 194.6.224.0/24
IP: 194.9.64.0/23
IP: 194.9.82.0/23
IP: 194.79.96.0/19
IP: 194.204.192.0/18
IP: 195.24.80.0/21
IP: 195.24.192.0/19
IP: 195.39.218.0/23
IP: 195.43.0.0/19
IP: 195.166.224.0/19
IP: 195.202.64.0/19
IP: 195.234.120.0/22
IP: 195.234.168.0/24
IP: 195.234.185.0/24
IP: 195.234.252.0/22
IP: 195.246.32.0/19
IP: 212.0.128.0/19
IP: 212.12.224.0/19
IP: 212.22.160.0/19
IP: 212.49.64.0/19
IP: 212.52.128.0/19
IP: 212.60.64.0/19
IP: 212.85.192.0/19
IP: 212.88.96.0/19
IP: 212.96.0.0/19
IP: 212.100.64.0/19
IP: 212.103.160.0/19
IP: 212.122.224.0/19
IP: 212.217.0.0/17
IP: 213.55.64.0/18
IP: 213.131.64.0/19
IP: 213.136.96.0/19
IP: 213.147.64.0/19
IP: 213.150.96.0/19
IP: 213.150.160.0 -- 213.150.223.255
IP: 213.152.64.0/19
IP: 213.154.32.0 -- 213.154.95.255
IP: 213.158.160.0/19
IP: 213.172.128.0/19
IP: 213.179.160.0/19
IP: 213.181.224.0/19
IP: 213.193.32.0/19
IP: 213.212.192.0/18
IP: 213.247.0.0/19
IP: 213.255.128.0/19
IP: 217.14.80.0/20
IP: 217.20.224.0/20
IP: 217.21.112.0/20
IP: 217.29.128.0/20
IP: 217.29.208.0/20
IP: 217.52.0.0/14
IP: 217.64.96.0/20
IP: 217.77.64.0/20
IP: 217.78.64.0/20
IP: 217.117.0.0/20
IP: 217.139.0.0/16
IP: 217.170.144.0/20
IP: 217.199.144.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Apr 2023 07:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Mar 30 14:17:12 2020 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:8f:6e:75:b0:3f:47:9b:27:91:6b:90:05:
5c:03:dd:44:85:3f:23:bb:04:77:62:a7:17:6a:84:
7a:98:52:c3:3e:9e:83:3b:b8:12:1d:69:6e:8b:30:
4b:c4:ec:e2:23:02:66:04:0d:50:92:26:7b:41:93:
d7:9e:ee:39:d4:1a:01:d5:04:2e:ac:a1:db:4c:09:
f7:f9:39:75:da:cd:d4:9a:51:3b:dc:3d:54:0f:c3:
5c:01:77:b3:51:a9:78:69:87:b0:78:69:01:1d:ec:
b6:e0:6f:ef:a4:cd:80:31:21:20:08:eb:4f:be:df:
2c:da:c8:7a:25:11:b7:ca:c6:e3:81:ee:2f:89:79:
28:fb:2a:98:28:d7:a1:65:90:15:18:4b:df:67:16:
7d:bb:96:ab:0e:53:81:e2:4b:68:26:ad:06:dc:98:
bf:75:0d:28:6a:7d:0f:b6:b7:f4:35:8b:a9:3f:2b:
8e:b0:2e:58:af:82:f1:da:64:c5:7b:11:c2:60:06:
9c:7a:f1:db:29:a3:6a:23:4f:ca:4e:d9:9c:f1:92:
13:3d:0b:ae:d1:f1:35:bf:4d:44:5e:02:65:22:f8:
d5:d0:0c:63:38:1e:07:44:44:16:45:7c:6b:3d:e5:
5a:e7:19:df:bb:20:65:14:3b:6d:c6:3e:cf:34:df:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/ripe/
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.8.64.0/19
62.12.96.0/19
62.24.96.0/19
62.61.192.0/18
62.68.32.0/19
62.68.224.0/19
62.114.0.0/16
62.117.32.0/19
62.135.0.0/17
62.139.0.0/16
62.140.64.0/18
62.173.32.0/19
62.193.64.0/18
62.193.160.0/19
62.240.32.0/19
62.240.96.0/19
62.241.128.0/19
62.251.128.0/17
77.220.0.0/19
80.67.128.0/20
80.72.96.0/20
80.75.160.0/19
80.87.64.0/19
80.88.0.0/20
80.95.0.0/20
80.240.192.0/20
80.246.0.0/20
80.248.0.0/20
80.248.64.0/20
80.249.64.0/20
80.250.32.0/20
81.4.0.0/18
81.10.0.0/17
81.21.96.0/20
81.22.64.0/19
81.26.64.0/20
81.29.96.0/20
81.91.224.0/20
81.192.0.0/16
82.101.128.0/18
82.128.0.0/17
82.129.128.0/17
82.151.64.0/19
82.201.128.0/17
83.143.24.0/21
84.36.0.0/16
84.205.96.0/19
84.233.0.0/17
87.255.96.0/19
193.17.215.0/24
193.19.232.0/22
193.41.146.0/23
193.95.0.0/17
193.108.23.0/24
193.108.28.0/24
193.108.214.0/24
193.108.252.0/22
193.109.66.0/23
193.110.104.0/23
193.188.7.0/24
193.189.0.0-193.189.65.255
193.189.128.0/24
193.194.1.0-193.194.5.255
193.194.32.0-193.194.95.255
193.194.128.0/24
193.194.160.0/19
193.221.218.0/24
193.227.0.0/18
193.227.128.0/24
194.6.224.0/24
194.9.64.0/23
194.9.82.0/23
194.79.96.0/19
194.204.192.0/18
195.24.80.0/21
195.24.192.0/19
195.39.218.0/23
195.43.0.0/19
195.166.224.0/19
195.202.64.0/19
195.234.120.0/22
195.234.168.0/24
195.234.185.0/24
195.234.252.0/22
195.246.32.0/19
212.0.128.0/19
212.12.224.0/19
212.22.160.0/19
212.49.64.0/19
212.52.128.0/19
212.60.64.0/19
212.85.192.0/19
212.88.96.0/19
212.96.0.0/19
212.100.64.0/19
212.103.160.0/19
212.122.224.0/19
212.217.0.0/17
213.55.64.0/18
213.131.64.0/19
213.136.96.0/19
213.147.64.0/19
213.150.96.0/19
213.150.160.0-213.150.223.255
213.152.64.0/19
213.154.32.0-213.154.95.255
213.158.160.0/19
213.172.128.0/19
213.179.160.0/19
213.181.224.0/19
213.193.32.0/19
213.212.192.0/18
213.247.0.0/19
213.255.128.0/19
217.14.80.0/20
217.20.224.0/20
217.21.112.0/20
217.29.128.0/20
217.29.208.0/20
217.52.0.0/14
217.64.96.0/20
217.77.64.0/20
217.78.64.0/20
217.117.0.0/20
217.139.0.0/16
217.170.144.0/20
217.199.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:9c:a6:64:c1:ee:b6:cd:a9:f0:a2:e4:14:2d:f3:2b:d6:d1:
c0:bd:70:7b:29:e3:95:c8:71:ef:3a:8f:bb:96:7b:ea:e2:96:
34:17:5a:e3:81:65:9c:b1:c1:c6:4e:20:42:5a:a8:49:43:04:
2b:64:f0:31:f7:5f:ab:b4:b6:ad:8f:d3:18:4a:ba:94:90:d9:
84:ba:58:49:f5:7b:5f:14:a9:0c:83:ba:b2:66:ce:56:0e:56:
58:70:c2:84:5c:45:e4:c9:6e:15:57:67:59:35:e5:03:cb:9c:
4a:c8:70:c8:ae:4d:82:12:1a:12:ad:38:71:4a:e0:c8:9d:87:
00:21:d8:a6:e8:a7:7a:6c:06:2a:af:41:eb:28:75:c1:5b:cf:
f1:82:69:bb:98:1a:48:8b:fe:13:0d:71:e1:12:f0:9a:f8:16:
e8:15:c3:ea:d4:98:3a:e4:09:ee:3c:72:e3:dd:e9:5b:78:db:
16:88:d7:ee:82:41:d3:60:68:26:be:73:3b:f0:38:a0:32:c1:
cd:91:a2:39:95:dc:bd:42:c3:4c:f4:ee:c2:51:2e:33:54:16:
4a:4b:02:dd:87:03:9b:24:cf:b7:12:37:30:b2:3e:3e:c5:4f:
4d:0e:fe:87:5f:dd:e3:97:8e:ff:37:6f:5c:2a:9e:fc:d6:e2:
17:e0:b8:e4
-----BEGIN CERTIFICATE-----
MIIIfDCCB2SgAwIBAgIBEjANBgkqhkiG9w0BAQsFADAjMSEwHwYDVQQDExhBZnJp
TklDLVJvb3QtQ2VydGlmaWNhdGUwHhcNMjAwMzMwMTQxNzEyWhcNMjUwMzMwMDAw
MDAwWjBLMRYwFAYDVQQDEw1SSVBFVE9BRlJJTklDMTEwLwYDVQQFEyg3RjdBQzE4
MDg5Nzk4M0UyOUU5MzdDMEExODc4MDNDMDcyNzU1NTQ1MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAxYePbnWwP0ebJ5FrkAVcA91EhT8juwR3YqcXaoR6
mFLDPp6DO7gSHWluizBLxOziIwJmBA1QkiZ7QZPXnu451BoB1QQurKHbTAn3+Tl1
2s3UmlE73D1UD8NcAXezUal4aYeweGkBHey24G/vpM2AMSEgCOtPvt8s2sh6JRG3
ysbjge4viXko+yqYKNehZZAVGEvfZxZ9u5arDlOB4ktoJq0G3Ji/dQ0oan0Ptrf0
NYupPyuOsC5Yr4Lx2mTFexHCYAacevHbKaNqI0/KTtmc8ZITPQuu0fE1v01EXgJl
IvjV0AxjOB4HREQWRXxrPeVa5xnfuyBlFDttxj7PNN/khQIDAQABo4IFkTCCBY0w
HQYDVR0OBBYEFH96wYCJeYPinpN8Chh4A8BydVVFMB8GA1UdIwQYMBaAFOtoDzj1
1scbtLEGuL0GWFAS2jG2MA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
MHUGA1UdHwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBv
c2l0b3J5LzA0RThCMEQ4MEY0RDExRTBCNjU3RDg5MzEzNjdBRTdELzYyZ1BPUFhX
eHh1MHNRYTR2UVpZVUJMYU1iWS5jcmwwSwYIKwYBBQUHAQEEPzA9MDsGCCsGAQUF
BzAChi9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9BZnJpTklD
LmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0
dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCB1AYIKwYBBQUH
AQsEgccwgcQwNQYIKwYBBQUHMAWGKXJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9y
ZXBvc2l0b3J5L3JpcGUvMFQGCCsGAQUFBzAKhkhyc3luYzovL3Jwa2kuYWZyaW5p
Yy5uZXQvcmVwb3NpdG9yeS9yaXBlL2YzckJnSWw1Zy1LZWszd0tHSGdEd0hKMVZV
VS5tZnQwNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMIIDPAYIKwYBBQUHAQcBAf8EggMrMIIDJzCCAyMEAgABMIID
GwMEBT4IQAMEBT4MYAMEBT4YYAMEBj49wAMEBT5EIAMEBT5E4AMDAD5yAwQFPnUg
AwQHPocAAwMAPosDBAY+jEADBAU+rSADBAY+wUADBAU+waADBAU+8CADBAU+8GAD
BAU+8YADBAc++4ADBAVN3AADBARQQ4ADBARQSGADBAVQS6ADBAVQV0ADBARQWAAD
BARQXwADBARQ8MADBARQ9gADBARQ+AADBARQ+EADBARQ+UADBARQ+iADBAZRBAAD
BAdRCgADBARRFWADBAVRFkADBARRGkADBARRHWADBARRW+ADAwBRwAMEBlJlgAME
B1KAAAMEB1KBgAMEBVKXQAMEB1LJgAMEA1OPGAMDAFQkAwQFVM1gAwQHVOkAAwQF
V/9gAwQAwRHXAwQCwRPoAwQBwSmSAwQHwV8AAwQAwWwXAwQAwWwcAwQAwWzWAwQC
wWz8AwQBwW1CAwQBwW5oAwQAwbwHMAsDAwDBvQMEAcG9QAMEAMG9gDAMAwQAwcIB
AwQBwcIEMAwDBAXBwiADBAXBwkADBADBwoADBAXBwqADBADB3doDBAbB4wADBADB
44ADBADCBuADBAHCCUADBAHCCVIDBAXCT2ADBAbCzMADBAPDGFADBAXDGMADBAHD
J9oDBAXDKwADBAXDpuADBAXDykADBALD6ngDBADD6qgDBADD6rkDBALD6vwDBAXD
9iADBAXUAIADBAXUDOADBAXUFqADBAXUMUADBAXUNIADBAXUPEADBAXUVcADBAXU
WGADBAXUYAADBAXUZEADBAXUZ6ADBAXUeuADBAfU2QADBAbVN0ADBAXVg0ADBAXV
iGADBAXVk0ADBAXVlmAwDAMEBdWWoAMEBdWWwAMEBdWYQDAMAwQF1ZogAwQF1ZpA
AwQF1Z6gAwQF1ayAAwQF1bOgAwQF1bXgAwQF1cEgAwQG1dTAAwQF1fcAAwQF1f+A
AwQE2Q5QAwQE2RTgAwQE2RVwAwQE2R2AAwQE2R3QAwMC2TQDBATZQGADBATZTUAD
BATZTkADBATZdQADAwDZiwMEBNmqkAMEBNnHkDANBgkqhkiG9w0BAQsFAAOCAQEA
pJymZMHuts2p8KLkFC3zK9bRwL1weynjlchx7zqPu5Z76uKWNBda44FlnLHBxk4g
QlqoSUMEK2TwMfdfq7S2rY/TGEq6lJDZhLpYSfV7XxSpDIO6smbOVg5WWHDChFxF
5MluFVdnWTXlA8ucSshwyK5NghIaEq04cUrgyJ2HACHYpuinemwGKq9B6yh1wVvP
8YJpu5gaSIv+Ew1x4RLwmvgW6BXD6tSYOuQJ7jxy493pW3jbFojX7oJB02BoJr5z
O/A4oDLBzZGiOZXcvULDTPTuwlEuM1QWSksC3YcDmyTPtxI3MLI+PsVPTQ7+h1/d
45eO/zdvXCqe/NbiF+C45A==
-----END CERTIFICATE-----
Generated at Wed Mar 15 11:52:53 2023 by rpki-client on console-fra.rpki-client.org