Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
File: OwiJEFfOiidoEQQFlcyqxAjfUaY.cer (raw, json)
Hash identifier: qgTVVuLRA9BDxBw4lg2IEhHfApxZdjqzLb34oI2bwUY=
Subject key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3042
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:11:01 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328970
IP: 102.217.188.0/22
IP: 2c0f:5b00::/32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Apr 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12354 (0x3042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:11:01 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3679CB8AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5d:66:da:b5:dd:9b:70:6d:a9:71:d5:ca:37:
aa:2e:52:7d:95:4e:7f:83:62:99:73:67:5e:e8:19:
07:23:09:43:ab:7c:17:0e:12:95:92:1d:7f:1a:f9:
82:a0:96:ad:11:9b:95:a5:14:c7:4a:e0:b4:0f:d6:
6d:94:c3:27:13:8f:f1:40:64:5c:0a:20:9a:c9:8b:
ba:63:00:15:47:59:52:ee:d6:d9:e7:8d:8c:de:71:
4f:80:19:e4:d2:68:56:2d:5c:fd:f9:f6:0a:9d:6f:
ff:52:53:21:b4:dc:45:92:a8:4c:87:e4:ab:a5:09:
58:da:fb:7e:e3:c8:e6:8e:f1:b0:af:48:25:b5:ae:
08:29:08:45:aa:bb:11:5e:3b:66:cf:90:06:df:fc:
04:b7:dc:3b:d6:d9:f2:7e:7b:46:2a:9a:5b:08:5a:
5d:34:bd:55:9a:78:0d:21:4b:50:df:81:1c:8a:41:
38:43:85:1e:c3:84:5b:a1:6e:1b:bd:28:bb:8f:fe:
cd:11:58:db:d7:bb:0c:8b:c5:c8:28:50:1d:4e:39:
fc:9e:cd:27:b9:55:31:75:cd:b0:80:c1:16:f0:17:
bf:b4:c0:e4:d8:19:c8:c7:37:ea:80:6f:c0:ff:5f:
81:97:0c:64:49:25:87:ec:a7:98:ab:75:46:7a:39:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328970
sbgp-ipAddrBlock: critical
IPv4:
102.217.188.0/22
IPv6:
2c0f:5b00::/32
Signature Algorithm: sha256WithRSAEncryption
a5:ef:6a:05:00:a2:f7:61:bc:96:5f:ed:3a:f4:39:52:7d:f6:
4d:28:52:f9:33:b1:3b:9c:27:e0:9f:ae:90:3e:e2:88:3e:73:
43:3e:4b:9b:15:f4:93:a3:f0:f6:ff:d3:3f:6d:56:b0:c0:b3:
2f:98:e6:5f:fb:9c:f6:af:73:39:3a:dc:3d:55:09:8b:93:13:
bf:33:5a:98:e0:dd:6f:bc:c0:35:31:a5:da:49:fe:ef:a4:d6:
ce:a4:05:cd:93:01:d5:9f:3a:1b:09:8a:25:b5:23:fa:0c:0c:
b7:78:75:c5:3b:50:66:25:4f:0f:8c:0a:c0:cf:4b:ef:b5:9c:
d6:58:3a:42:c0:1b:66:79:01:57:63:1f:45:b3:ac:4d:ff:12:
61:c3:0e:e2:3e:dd:75:3b:18:f9:bf:cb:e7:57:0c:ef:38:e0:
b0:f2:3e:13:7f:25:14:9b:a1:bc:e4:ec:7a:ad:8c:93:6c:47:
90:3e:ac:82:68:77:7b:76:80:6f:a6:3d:89:ab:ca:e6:ad:80:
43:15:48:1c:d3:ff:4d:60:4f:e8:7f:92:96:e7:69:10:30:df:
df:89:1d:f3:13:93:84:c5:fa:66:cb:e7:bf:16:c7:15:e5:9c:
65:b2:03:af:29:4a:46:10:12:b3:cc:6f:e5:b3:59:ba:46:cf:
a7:9f:79:b7
-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgICMEIwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMzExMDFaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjc5Q0I4QUYxMTAvBgNVBAUTKDNCMDg4OTEwNTdDRThBMjc2ODExMDQw
NTk1Q0NBQUM0MDhERjUxQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDvXWbatd2bcG2pcdXKN6ouUn2VTn+DYplzZ17oGQcjCUOrfBcOEpWSHX8a+YKg
lq0Rm5WlFMdK4LQP1m2UwycTj/FAZFwKIJrJi7pjABVHWVLu1tnnjYzecU+AGeTS
aFYtXP359gqdb/9SUyG03EWSqEyH5KulCVja+37jyOaO8bCvSCW1rggpCEWquxFe
O2bPkAbf/AS33DvW2fJ+e0YqmlsIWl00vVWaeA0hS1DfgRyKQThDhR7DhFuhbhu9
KLuP/s0RWNvXuwyLxcgoUB1OOfyezSe5VTF1zbCAwRbwF7+0wOTYGcjHN+qAb8D/
X4GXDGRJJYfsp5irdUZ6OTIbAgMBAAGjggMaMIIDFjAdBgNVHQ4EFgQUOwiJEFfO
iidoEQQFlcyqxAjfUaYwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY3OUNCOC9CRTIyQzhDNjQ1RTgx
MUVDQkU5Njc3MTlEOEEwMTRDRS8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzlDQjgvQkUyMkM4QzY0NUU4MTFFQ0JFOTY3NzE5RDhBMDE0Q0UvT3dpSkVG
Zk9paWRvRVFRRmxjeXF4QWpmVWFZLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFBQowLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJm2bwwDQQCAAIwBwMF
ACwPWwAwDQYJKoZIhvcNAQELBQADggEBAKXvagUAovdhvJZf7Tr0OVJ99k0oUvkz
sTucJ+CfrpA+4og+c0M+S5sV9JOj8Pb/0z9tVrDAsy+Y5l/7nPavczk63D1VCYuT
E78zWpjg3W+8wDUxpdpJ/u+k1s6kBc2TAdWfOhsJiiW1I/oMDLd4dcU7UGYlTw+M
CsDPS++1nNZYOkLAG2Z5AVdjH0WzrE3/EmHDDuI+3XU7GPm/y+dXDO844LDyPhN/
JRSbobzk7HqtjJNsR5A+rIJod3t2gG+mPYmryuatgEMVSBzT/01gT+h/kpbnaRAw
39+JHfMTk4TF+mbL578WxxXlnGWyA68pSkYQErPMb+WzWbpGz6efebc=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:56:26 2025 by rpki-client