Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
File: oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer (raw, json)
Hash identifier: ADIsO9IDql6Up1yKWKnG8N3R40LhpV5+1k0pkxbW38Y=
Subject key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Authority key identifier: B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
Certificate issuer: /CN=ARINTOAFRINIC/serialNumber=B87C5A75F3D957413AB998646946D4541D511455
Certificate serial: 16C2
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:58:46 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 45.221.224.0/19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5826 (0x16c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ARINTOAFRINIC
Validity
Not Before: Jan 1 00:58:46 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36776F1AR
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:09:3f:b7:05:a9:7a:3c:63:b4:0e:0b:99:
f4:1f:e5:8b:ac:7b:0b:70:58:fc:11:bc:6f:3a:a8:
a6:bf:9d:0e:16:07:d7:7a:02:8f:bd:82:90:31:2a:
e1:bb:22:f1:d4:63:d8:cd:c0:28:e1:84:05:2e:3a:
1c:0a:33:9c:aa:c5:38:af:92:9b:bd:5d:61:ae:fb:
ec:af:e9:e1:1d:86:6d:a3:30:52:ee:61:c0:e8:c8:
03:6e:8a:57:4e:69:48:d5:26:b0:71:49:2b:57:8c:
b1:1f:58:66:f1:d7:4d:24:a4:bb:67:a8:8a:53:56:
54:7b:60:2e:ce:fd:6d:b7:e1:54:02:8b:c9:62:52:
15:f2:19:a0:bc:9d:8d:60:f9:f7:ca:36:e2:6d:6e:
5c:91:95:f0:b6:a6:b9:61:5a:12:ae:94:2d:24:e1:
91:b2:8c:ff:44:f7:d8:62:af:8d:22:7d:1c:3e:fa:
b2:43:02:cc:8f:d0:2c:67:bb:fa:02:b0:60:3e:60:
90:58:d7:37:f2:7c:18:05:5c:9a:c7:47:07:b9:77:
6d:c6:37:ed:60:e1:a6:fc:f7:a2:13:bc:c6:b3:94:
d4:a2:88:da:13:06:cb:e2:f5:f9:39:6b:fc:1f:f7:
c5:89:a7:af:7a:82:fa:24:ee:55:e9:3e:14:72:8d:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
X509v3 Authority Key Identifier:
keyid:B8:7C:5A:75:F3:D9:57:41:3A:B9:98:64:69:46:D4:54:1D:51:14:55
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
sbgp-ipAddrBlock: critical
IPv4:
45.221.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:fd:e6:94:4d:95:2e:cb:e5:2c:da:2b:9d:99:71:49:67:e9:
44:f0:04:aa:65:be:dc:41:bc:07:69:6d:ce:33:a0:e5:97:53:
6b:6f:6a:bb:a5:02:31:c4:85:1b:48:4a:5c:5f:7b:41:7b:4a:
3f:f9:3d:32:81:62:b8:7d:c8:01:ba:58:55:46:47:a1:59:c5:
89:7a:5c:95:9f:98:fb:f6:87:40:2a:5f:55:6f:94:fc:aa:3d:
fb:f4:08:a3:d4:fd:ce:87:68:37:81:05:f3:b2:57:46:23:8d:
14:a6:b9:17:9f:b6:92:43:ac:42:d9:7a:55:51:3b:a4:5d:4d:
9b:c5:a7:6a:a0:1e:1c:68:57:dc:d0:7d:0e:7a:8e:96:45:4a:
d9:35:d6:e1:09:f2:b8:d1:7b:d6:fa:24:e4:17:17:95:a8:1c:
e7:f1:fa:9a:e3:f3:34:ff:96:5a:0b:a7:b2:c0:fe:ca:03:32:
55:3a:c7:c7:86:e2:b6:c1:2a:b6:bb:d5:cd:b5:40:08:e2:16:
00:7a:0e:1f:e6:ce:ac:67:cf:71:e9:76:e6:b5:f6:5c:37:2c:
fc:3b:95:cb:62:51:a3:8c:08:9b:cf:94:5d:09:87:1f:12:32:
96:0d:de:19:bd:d3:e3:e4:8a:60:99:f0:60:54:e6:a3:1c:5e:
54:25:c0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 22:42:09 2025 by rpki-client