Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
File: ripe-to-afrinic.cer (raw, json)
Hash identifier: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=
Subject key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 45
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Manifest: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
caRepository: rsync://rpki.afrinic.net/repository/ripe/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Thu 14 Dec 2023 08:15:18 +0000
Certificate not after: Thu 14 Dec 2028 00:00:00 +0000
Subordinate resources: IP: 62.8.64.0/19
IP: 62.12.96.0/19
IP: 62.24.96.0/19
IP: 62.61.192.0/18
IP: 62.68.32.0/19
IP: 62.68.224.0/19
IP: 62.114.0.0/16
IP: 62.117.32.0/19
IP: 62.135.0.0/17
IP: 62.139.0.0/16
IP: 62.140.64.0/18
IP: 62.173.32.0/19
IP: 62.193.64.0/18
IP: 62.193.160.0/19
IP: 62.240.32.0/19
IP: 62.240.96.0/19
IP: 62.241.128.0/19
IP: 62.251.128.0/17
IP: 77.220.0.0/19
IP: 80.67.128.0/20
IP: 80.72.96.0/20
IP: 80.75.160.0/19
IP: 80.87.64.0/19
IP: 80.88.0.0/20
IP: 80.95.0.0/20
IP: 80.240.192.0/20
IP: 80.246.0.0/20
IP: 80.248.0.0/20
IP: 80.248.64.0/20
IP: 80.249.64.0/20
IP: 80.250.32.0/20
IP: 81.4.0.0/18
IP: 81.10.0.0/17
IP: 81.21.96.0/20
IP: 81.22.64.0/19
IP: 81.26.64.0/20
IP: 81.29.96.0/20
IP: 81.91.224.0/20
IP: 81.192.0.0/16
IP: 82.101.128.0/18
IP: 82.128.0.0/17
IP: 82.129.128.0/17
IP: 82.151.64.0/19
IP: 82.201.128.0/17
IP: 83.143.24.0/21
IP: 84.36.0.0/16
IP: 84.205.96.0/19
IP: 84.233.0.0/17
IP: 87.255.96.0/19
IP: 193.17.215.0/24
IP: 193.19.232.0/22
IP: 193.41.146.0/23
IP: 193.95.0.0/17
IP: 193.108.23.0/24
IP: 193.108.28.0/24
IP: 193.108.214.0/24
IP: 193.108.252.0/22
IP: 193.109.66.0/23
IP: 193.110.104.0/23
IP: 193.188.7.0/24
IP: 193.189.0.0 -- 193.189.65.255
IP: 193.189.128.0/24
IP: 193.194.1.0 -- 193.194.5.255
IP: 193.194.32.0 -- 193.194.95.255
IP: 193.194.128.0/24
IP: 193.194.160.0/19
IP: 193.221.218.0/24
IP: 193.227.0.0/18
IP: 193.227.128.0/24
IP: 194.6.224.0/24
IP: 194.9.64.0/23
IP: 194.9.82.0/23
IP: 194.79.96.0/19
IP: 194.204.192.0/18
IP: 195.24.80.0/21
IP: 195.24.192.0/19
IP: 195.39.218.0/23
IP: 195.43.0.0/19
IP: 195.166.224.0/19
IP: 195.202.64.0/19
IP: 195.234.120.0/22
IP: 195.234.168.0/24
IP: 195.234.185.0/24
IP: 195.234.252.0/22
IP: 195.246.32.0/19
IP: 212.0.128.0/19
IP: 212.12.224.0/19
IP: 212.22.160.0/19
IP: 212.49.64.0/19
IP: 212.52.128.0/19
IP: 212.60.64.0/19
IP: 212.85.192.0/19
IP: 212.88.96.0/19
IP: 212.96.0.0/19
IP: 212.100.64.0/19
IP: 212.103.160.0/19
IP: 212.122.224.0/19
IP: 212.217.0.0/17
IP: 213.55.64.0/18
IP: 213.131.64.0/19
IP: 213.136.96.0/19
IP: 213.147.64.0/19
IP: 213.150.96.0/19
IP: 213.150.160.0 -- 213.150.223.255
IP: 213.152.64.0/19
IP: 213.154.32.0 -- 213.154.95.255
IP: 213.158.160.0/19
IP: 213.172.128.0/19
IP: 213.179.160.0/19
IP: 213.181.224.0/19
IP: 213.193.32.0/19
IP: 213.212.192.0/18
IP: 213.247.0.0/19
IP: 213.255.128.0/19
IP: 217.14.80.0/20
IP: 217.20.224.0/20
IP: 217.21.112.0/20
IP: 217.29.128.0/20
IP: 217.29.208.0/20
IP: 217.52.0.0/14
IP: 217.64.96.0/20
IP: 217.77.64.0/20
IP: 217.78.64.0/20
IP: 217.117.0.0/20
IP: 217.139.0.0/16
IP: 217.170.144.0/20
IP: 217.199.144.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 May 2024 13:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Dec 14 08:15:18 2023 GMT
Not After : Dec 14 00:00:00 2028 GMT
Subject: CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:8f:6e:75:b0:3f:47:9b:27:91:6b:90:05:
5c:03:dd:44:85:3f:23:bb:04:77:62:a7:17:6a:84:
7a:98:52:c3:3e:9e:83:3b:b8:12:1d:69:6e:8b:30:
4b:c4:ec:e2:23:02:66:04:0d:50:92:26:7b:41:93:
d7:9e:ee:39:d4:1a:01:d5:04:2e:ac:a1:db:4c:09:
f7:f9:39:75:da:cd:d4:9a:51:3b:dc:3d:54:0f:c3:
5c:01:77:b3:51:a9:78:69:87:b0:78:69:01:1d:ec:
b6:e0:6f:ef:a4:cd:80:31:21:20:08:eb:4f:be:df:
2c:da:c8:7a:25:11:b7:ca:c6:e3:81:ee:2f:89:79:
28:fb:2a:98:28:d7:a1:65:90:15:18:4b:df:67:16:
7d:bb:96:ab:0e:53:81:e2:4b:68:26:ad:06:dc:98:
bf:75:0d:28:6a:7d:0f:b6:b7:f4:35:8b:a9:3f:2b:
8e:b0:2e:58:af:82:f1:da:64:c5:7b:11:c2:60:06:
9c:7a:f1:db:29:a3:6a:23:4f:ca:4e:d9:9c:f1:92:
13:3d:0b:ae:d1:f1:35:bf:4d:44:5e:02:65:22:f8:
d5:d0:0c:63:38:1e:07:44:44:16:45:7c:6b:3d:e5:
5a:e7:19:df:bb:20:65:14:3b:6d:c6:3e:cf:34:df:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/ripe/
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.8.64.0/19
62.12.96.0/19
62.24.96.0/19
62.61.192.0/18
62.68.32.0/19
62.68.224.0/19
62.114.0.0/16
62.117.32.0/19
62.135.0.0/17
62.139.0.0/16
62.140.64.0/18
62.173.32.0/19
62.193.64.0/18
62.193.160.0/19
62.240.32.0/19
62.240.96.0/19
62.241.128.0/19
62.251.128.0/17
77.220.0.0/19
80.67.128.0/20
80.72.96.0/20
80.75.160.0/19
80.87.64.0/19
80.88.0.0/20
80.95.0.0/20
80.240.192.0/20
80.246.0.0/20
80.248.0.0/20
80.248.64.0/20
80.249.64.0/20
80.250.32.0/20
81.4.0.0/18
81.10.0.0/17
81.21.96.0/20
81.22.64.0/19
81.26.64.0/20
81.29.96.0/20
81.91.224.0/20
81.192.0.0/16
82.101.128.0/18
82.128.0.0/17
82.129.128.0/17
82.151.64.0/19
82.201.128.0/17
83.143.24.0/21
84.36.0.0/16
84.205.96.0/19
84.233.0.0/17
87.255.96.0/19
193.17.215.0/24
193.19.232.0/22
193.41.146.0/23
193.95.0.0/17
193.108.23.0/24
193.108.28.0/24
193.108.214.0/24
193.108.252.0/22
193.109.66.0/23
193.110.104.0/23
193.188.7.0/24
193.189.0.0-193.189.65.255
193.189.128.0/24
193.194.1.0-193.194.5.255
193.194.32.0-193.194.95.255
193.194.128.0/24
193.194.160.0/19
193.221.218.0/24
193.227.0.0/18
193.227.128.0/24
194.6.224.0/24
194.9.64.0/23
194.9.82.0/23
194.79.96.0/19
194.204.192.0/18
195.24.80.0/21
195.24.192.0/19
195.39.218.0/23
195.43.0.0/19
195.166.224.0/19
195.202.64.0/19
195.234.120.0/22
195.234.168.0/24
195.234.185.0/24
195.234.252.0/22
195.246.32.0/19
212.0.128.0/19
212.12.224.0/19
212.22.160.0/19
212.49.64.0/19
212.52.128.0/19
212.60.64.0/19
212.85.192.0/19
212.88.96.0/19
212.96.0.0/19
212.100.64.0/19
212.103.160.0/19
212.122.224.0/19
212.217.0.0/17
213.55.64.0/18
213.131.64.0/19
213.136.96.0/19
213.147.64.0/19
213.150.96.0/19
213.150.160.0-213.150.223.255
213.152.64.0/19
213.154.32.0-213.154.95.255
213.158.160.0/19
213.172.128.0/19
213.179.160.0/19
213.181.224.0/19
213.193.32.0/19
213.212.192.0/18
213.247.0.0/19
213.255.128.0/19
217.14.80.0/20
217.20.224.0/20
217.21.112.0/20
217.29.128.0/20
217.29.208.0/20
217.52.0.0/14
217.64.96.0/20
217.77.64.0/20
217.78.64.0/20
217.117.0.0/20
217.139.0.0/16
217.170.144.0/20
217.199.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:18:82:a0:d1:96:05:6a:91:5f:4a:d4:cc:04:b6:97:9c:e8:
f0:c7:28:fb:f8:c3:95:a0:ef:a9:21:12:c9:ac:b4:a5:34:69:
d3:f7:48:3f:c7:b7:65:95:2e:90:60:75:82:85:f5:d5:a3:92:
b8:19:68:74:e2:4e:a9:7b:71:9b:28:ff:10:8e:2e:d5:4e:bd:
1b:71:8d:dd:93:4d:73:18:8a:b1:a0:55:a6:38:b9:fc:98:54:
57:a6:06:0f:15:d6:43:de:6b:cb:9b:cd:ae:a4:cf:b1:82:8d:
e6:bb:d9:6f:f1:d7:23:20:d0:4a:41:0e:18:77:8c:e1:09:eb:
a7:8e:57:ac:58:79:17:4e:8b:10:a1:5a:2f:2a:57:de:ff:a3:
31:e7:4a:c8:93:b5:58:bd:e7:69:e0:97:e4:94:be:ad:4d:7b:
ae:1e:a4:e1:ba:dc:2e:1e:48:3b:b4:a3:fd:af:a7:12:0f:dd:
e8:04:0c:76:5b:91:f0:e8:05:a8:43:5c:8a:61:2d:58:ce:d4:
ab:3b:b1:e8:2a:4c:cc:1e:3a:7d:47:be:69:03:42:fb:79:a7:
53:86:0e:20:cf:9a:d5:b3:0d:12:6d:3b:b7:48:8d:f6:3a:c0:
8c:98:ba:03:fe:31:9e:98:9b:89:9b:78:e9:ba:aa:c0:1f:8f:
1a:48:1a:1f
-----BEGIN CERTIFICATE-----
MIIIfDCCB2SgAwIBAgIBRTANBgkqhkiG9w0BAQsFADAjMSEwHwYDVQQDExhBZnJp
TklDLVJvb3QtQ2VydGlmaWNhdGUwHhcNMjMxMjE0MDgxNTE4WhcNMjgxMjE0MDAw
MDAwWjBLMRYwFAYDVQQDEw1SSVBFVE9BRlJJTklDMTEwLwYDVQQFEyg3RjdBQzE4
MDg5Nzk4M0UyOUU5MzdDMEExODc4MDNDMDcyNzU1NTQ1MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAxYePbnWwP0ebJ5FrkAVcA91EhT8juwR3YqcXaoR6
mFLDPp6DO7gSHWluizBLxOziIwJmBA1QkiZ7QZPXnu451BoB1QQurKHbTAn3+Tl1
2s3UmlE73D1UD8NcAXezUal4aYeweGkBHey24G/vpM2AMSEgCOtPvt8s2sh6JRG3
ysbjge4viXko+yqYKNehZZAVGEvfZxZ9u5arDlOB4ktoJq0G3Ji/dQ0oan0Ptrf0
NYupPyuOsC5Yr4Lx2mTFexHCYAacevHbKaNqI0/KTtmc8ZITPQuu0fE1v01EXgJl
IvjV0AxjOB4HREQWRXxrPeVa5xnfuyBlFDttxj7PNN/khQIDAQABo4IFkTCCBY0w
HQYDVR0OBBYEFH96wYCJeYPinpN8Chh4A8BydVVFMB8GA1UdIwQYMBaAFOtoDzj1
1scbtLEGuL0GWFAS2jG2MA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/
MHUGA1UdHwRuMGwwaqBooGaGZHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBv
c2l0b3J5LzA0RThCMEQ4MEY0RDExRTBCNjU3RDg5MzEzNjdBRTdELzYyZ1BPUFhX
eHh1MHNRYTR2UVpZVUJMYU1iWS5jcmwwSwYIKwYBBQUHAQEEPzA9MDsGCCsGAQUF
BzAChi9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9BZnJpTklD
LmNlcjBPBgNVHSABAf8ERTBDMEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0
dHBzOi8vcnBraS5hZnJpbmljLm5ldC9wb2xpY3kvQ1BTLnBkZjCB1AYIKwYBBQUH
AQsEgccwgcQwNQYIKwYBBQUHMAWGKXJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9y
ZXBvc2l0b3J5L3JpcGUvMFQGCCsGAQUFBzAKhkhyc3luYzovL3Jwa2kuYWZyaW5p
Yy5uZXQvcmVwb3NpdG9yeS9yaXBlL2YzckJnSWw1Zy1LZWszd0tHSGdEd0hKMVZV
VS5tZnQwNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3Rp
ZmljYXRpb24ueG1sMIIDPAYIKwYBBQUHAQcBAf8EggMrMIIDJzCCAyMEAgABMIID
GwMEBT4IQAMEBT4MYAMEBT4YYAMEBj49wAMEBT5EIAMEBT5E4AMDAD5yAwQFPnUg
AwQHPocAAwMAPosDBAY+jEADBAU+rSADBAY+wUADBAU+waADBAU+8CADBAU+8GAD
BAU+8YADBAc++4ADBAVN3AADBARQQ4ADBARQSGADBAVQS6ADBAVQV0ADBARQWAAD
BARQXwADBARQ8MADBARQ9gADBARQ+AADBARQ+EADBARQ+UADBARQ+iADBAZRBAAD
BAdRCgADBARRFWADBAVRFkADBARRGkADBARRHWADBARRW+ADAwBRwAMEBlJlgAME
B1KAAAMEB1KBgAMEBVKXQAMEB1LJgAMEA1OPGAMDAFQkAwQFVM1gAwQHVOkAAwQF
V/9gAwQAwRHXAwQCwRPoAwQBwSmSAwQHwV8AAwQAwWwXAwQAwWwcAwQAwWzWAwQC
wWz8AwQBwW1CAwQBwW5oAwQAwbwHMAsDAwDBvQMEAcG9QAMEAMG9gDAMAwQAwcIB
AwQBwcIEMAwDBAXBwiADBAXBwkADBADBwoADBAXBwqADBADB3doDBAbB4wADBADB
44ADBADCBuADBAHCCUADBAHCCVIDBAXCT2ADBAbCzMADBAPDGFADBAXDGMADBAHD
J9oDBAXDKwADBAXDpuADBAXDykADBALD6ngDBADD6qgDBADD6rkDBALD6vwDBAXD
9iADBAXUAIADBAXUDOADBAXUFqADBAXUMUADBAXUNIADBAXUPEADBAXUVcADBAXU
WGADBAXUYAADBAXUZEADBAXUZ6ADBAXUeuADBAfU2QADBAbVN0ADBAXVg0ADBAXV
iGADBAXVk0ADBAXVlmAwDAMEBdWWoAMEBdWWwAMEBdWYQDAMAwQF1ZogAwQF1ZpA
AwQF1Z6gAwQF1ayAAwQF1bOgAwQF1bXgAwQF1cEgAwQG1dTAAwQF1fcAAwQF1f+A
AwQE2Q5QAwQE2RTgAwQE2RVwAwQE2R2AAwQE2R3QAwMC2TQDBATZQGADBATZTUAD
BATZTkADBATZdQADAwDZiwMEBNmqkAMEBNnHkDANBgkqhkiG9w0BAQsFAAOCAQEA
SxiCoNGWBWqRX0rUzAS2l5zo8Mco+/jDlaDvqSESyay0pTRp0/dIP8e3ZZUukGB1
goX11aOSuBlodOJOqXtxmyj/EI4u1U69G3GN3ZNNcxiKsaBVpji5/JhUV6YGDxXW
Q95ry5vNrqTPsYKN5rvZb/HXIyDQSkEOGHeM4Qnrp45XrFh5F06LEKFaLypX3v+j
MedKyJO1WL3naeCX5JS+rU17rh6k4brcLh5IO7Sj/a+nEg/d6AQMdluR8OgFqENc
imEtWM7Uqzux6CpMzB46fUe+aQNC+3mnU4YOIM+a1bMNEm07t0iN9jrAjJi6A/4x
npibiZt46bqqwB+PGkgaHw==
-----END CERTIFICATE-----
Generated at Tue Mar 26 15:15:40 2024 by rpki-client on console-ams.rpki-client.org