Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
File: 0ffADvPrBuiBfP3B25YGBAfknA0.cer (raw, json)
Hash identifier: RA7+icPm8c866XrOzX3Hyifk3/Kp4Yr3KSV0bfPBGas=
Subject key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2E6F
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:36:44 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328608
IP: 102.219.64.0/22
IP: 102.223.44.0/22
IP: 102.223.196.0/22
IP: 2c0f:ebd0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11887 (0x2e6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 01:36:44 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F364789CAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:c0:0c:c1:b2:c0:d9:9b:7c:21:0c:4f:82:
49:14:6b:45:19:03:3b:68:d7:65:f3:0a:68:e9:89:
fe:9f:db:35:45:99:0f:fe:d8:49:ea:67:a5:85:d9:
6b:c5:cb:06:74:79:37:f2:0a:f0:22:f6:fc:fc:21:
91:c9:81:5c:75:e6:bc:81:0c:61:0a:20:94:3b:e8:
27:81:95:c9:95:4b:2b:47:17:31:ac:5c:22:ce:8e:
55:8d:0d:84:88:77:c6:17:a7:14:c0:bf:55:a5:56:
16:29:1d:09:46:4a:f2:62:f1:4d:16:8d:01:38:61:
5d:fc:2a:91:3d:09:9d:17:f5:6f:82:85:33:4e:34:
b9:68:2b:59:25:d3:60:fd:c2:f4:ff:24:2a:96:8a:
13:08:9e:39:4c:25:a1:18:5c:8b:c8:f5:88:bb:a4:
d5:90:be:13:0c:71:02:34:ac:e2:84:a1:33:a5:59:
93:82:cd:61:8a:9d:a6:7b:ec:1f:6a:08:06:0c:00:
ef:bc:29:42:99:1d:7d:eb:88:91:4a:2d:d9:1f:cc:
75:23:ac:6e:cd:9e:df:6b:db:40:fa:2b:0c:ef:54:
dc:91:92:28:8a:29:64:e0:90:e7:14:4d:34:42:1e:
f2:7f:e8:d2:fb:da:7b:f0:33:c0:28:39:18:0c:82:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328608
sbgp-ipAddrBlock: critical
IPv4:
102.219.64.0/22
102.223.44.0/22
102.223.196.0/22
IPv6:
2c0f:ebd0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:f6:94:3d:2b:9f:3f:35:1b:6a:18:fc:4f:0e:c4:d8:e6:22:
09:dc:d8:4b:85:44:bb:f5:66:7b:09:07:27:b8:fe:25:11:49:
d4:a0:60:00:72:2e:c7:69:4e:3f:ca:2b:c8:83:03:75:87:2e:
8f:c4:6e:49:8f:02:7f:ce:c6:9b:4c:8d:5d:eb:32:73:02:ea:
72:30:fb:23:ff:e1:94:73:90:07:8e:9e:24:8f:bb:53:be:02:
d7:b4:ac:3f:ff:51:bd:d5:a5:6f:f2:fb:ae:8b:76:5e:8c:67:
94:3a:17:86:3e:66:fe:05:76:bb:5f:0f:22:a1:ee:76:ba:f5:
b7:d7:fd:b9:66:62:66:eb:31:65:bf:e1:cb:a3:bb:1c:31:73:
2b:77:e4:3a:77:bb:4b:e5:b5:22:32:97:47:16:a1:c7:74:23:
d8:01:e7:51:5d:46:f1:6e:7f:89:79:41:3e:3a:87:63:60:11:
81:0a:f0:ad:8a:06:8e:5f:1a:47:47:c6:3a:69:96:97:a2:1c:
fa:10:eb:10:19:48:70:aa:dc:4a:1d:48:d9:18:01:51:5d:ae:
ac:f8:1f:d6:05:27:1e:f0:d2:49:a6:cb:2c:4e:d4:90:99:22:
17:da:f7:bc:21:3e:4d:49:f8:7f:e5:dd:a9:18:18:72:9a:f3:
ea:ce:9a:21
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgICLm8wDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMTM2NDRaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNjQ3ODlDQUYxMTAvBgNVBAUTKEQxRjdDMDBFRjNFQjA2RTg4MTdDRkRD
MURCOTYwNjA0MDdFNDlDMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDP78AMwbLA2Zt8IQxPgkkUa0UZAzto12XzCmjpif6f2zVFmQ/+2EnqZ6WF2WvF
ywZ0eTfyCvAi9vz8IZHJgVx15ryBDGEKIJQ76CeBlcmVSytHFzGsXCLOjlWNDYSI
d8YXpxTAv1WlVhYpHQlGSvJi8U0WjQE4YV38KpE9CZ0X9W+ChTNONLloK1kl02D9
wvT/JCqWihMInjlMJaEYXIvI9Yi7pNWQvhMMcQI0rOKEoTOlWZOCzWGKnaZ77B9q
CAYMAO+8KUKZHX3riJFKLdkfzHUjrG7Nnt9r20D6KwzvVNyRkiiKKWTgkOcUTTRC
HvJ/6NL72nvwM8AoORgMglSDAgMBAAGjggMmMIIDIjAdBgNVHQ4EFgQU0ffADvPr
BuiBfP3B25YGBAfknA0wHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzY0Nzg5Qy83MkVGQUY0QzkxMDEx
MUVBQkQzRjI0NzNGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDc4OUMvNzJFRkFGNEM5MTAxMTFFQUJEM0YyNDczRjhBRUEyMjgvMGZmQUR2
UHJCdWlCZlAzQjI1WUdCQWZrbkEwLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMFA6AwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAJm20ADBAJm3ywDBAJm
38QwDQQCAAIwBwMFACwP69AwDQYJKoZIhvcNAQELBQADggEBAKP2lD0rnz81G2oY
/E8OxNjmIgnc2EuFRLv1ZnsJBye4/iURSdSgYAByLsdpTj/KK8iDA3WHLo/EbkmP
An/OxptMjV3rMnMC6nIw+yP/4ZRzkAeOniSPu1O+Ate0rD//Ub3VpW/y+66Ldl6M
Z5Q6F4Y+Zv4FdrtfDyKh7na69bfX/blmYmbrMWW/4cujuxwxcyt35Dp3u0vltSIy
l0cWocd0I9gB51FdRvFuf4l5QT46h2NgEYEK8K2KBo5fGkdHxjpplpeiHPoQ6xAZ
SHCq3EodSNkYAVFdrqz4H9YFJx7w0kmmyyxO1JCZIhfa97whPk1J+H/l3akYGHKa
8+rOmiE=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:30:29 2025 by rpki-client