Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
File: 68SoUZfDK0JWOKbH5YYLWWTmV_4.cer (raw, json)
Hash identifier: vEg34XAuQe7z2nxyCIo7f3GdZqCNv3sXSETd1uD5y/0=
Subject key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DB6
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:58:11 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 327979
IP: 41.76.104.0/21
IP: 41.222.32.0/21
IP: 154.66.196.0/22
IP: 2c0f:f850::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11702 (0x2db6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:58:11 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F363212DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:e8:6e:b8:b7:0f:81:c5:65:1f:4f:34:c7:
33:ef:cc:27:44:80:6d:f4:9a:6a:a2:df:df:ba:ef:
f7:a0:64:7f:3c:44:cc:5b:cb:bf:1c:f6:f4:fa:b4:
63:26:8a:44:2f:3d:77:96:5c:1a:da:39:2a:40:db:
34:f5:29:de:4c:c6:82:5d:06:3d:25:c2:b9:0c:af:
b1:e6:ac:6f:24:6d:81:43:6a:7c:bb:ec:9d:4d:ab:
5b:68:c7:b1:98:2b:90:9b:b2:a0:49:7c:82:8a:b3:
95:7d:28:e4:2d:e0:20:1b:50:ae:ba:03:7a:bb:ad:
57:06:bb:0a:cb:32:b4:ad:48:96:ca:4a:b8:22:db:
8a:0e:9d:2a:a5:cb:e5:58:ac:36:04:e4:59:9e:30:
42:42:e1:26:15:b8:6d:3a:11:77:43:9c:e0:7e:6d:
f0:6c:23:fc:92:cd:17:f0:ff:fa:2c:83:63:f2:d3:
e6:d8:89:72:f7:64:69:ca:c6:8b:77:9a:a5:6f:d9:
f5:7f:a9:4b:82:5c:f4:6a:3d:ca:cc:76:6e:75:85:
24:5f:84:46:ed:56:7c:3d:bf:fc:c5:da:67:cc:d8:
de:ba:18:3b:40:3f:9a:6e:56:78:07:78:84:a9:87:
93:85:df:01:e8:cf:d4:1e:87:37:87:33:53:0c:06:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
327979
sbgp-ipAddrBlock: critical
IPv4:
41.76.104.0/21
41.222.32.0/21
154.66.196.0/22
IPv6:
2c0f:f850::/32
Signature Algorithm: sha256WithRSAEncryption
7d:0f:24:4d:2f:9f:4c:db:71:89:87:bd:3f:bf:64:c6:39:0e:
a7:a5:f1:f2:75:64:74:51:50:b8:3d:ed:51:4d:ce:7e:00:a2:
a9:75:4a:28:85:ff:72:88:89:2a:71:7d:8b:2c:a4:32:82:f7:
b9:97:12:fc:2f:41:cf:5b:a0:f5:7c:f2:74:42:cd:f0:10:2b:
dd:ad:ae:c8:69:37:c0:23:29:e3:d5:b2:ab:31:1a:e3:d7:67:
4b:9a:ae:dd:2a:dc:98:e1:9c:d6:4d:96:19:56:38:73:f0:f6:
17:77:9e:45:7a:a0:d0:85:e2:51:47:99:f8:d7:42:70:a4:e7:
4f:bc:e6:ef:c2:f7:5b:2f:ef:3b:b6:63:53:21:04:17:20:89:
c3:86:7d:02:b0:fb:97:02:45:29:49:b4:00:db:75:5e:00:c8:
b7:63:57:7e:a8:b5:18:7a:b5:61:c7:ae:5a:45:2d:f1:9b:7f:
43:06:74:94:0f:f1:63:88:ce:e7:9e:be:5f:6a:7a:34:3d:5e:
10:24:48:c1:52:4f:41:f9:63:5a:17:d4:d5:d3:c2:ec:4e:6c:
36:fa:55:02:21:9e:27:1b:88:86:39:c0:d7:41:3b:07:df:a8:
ae:91:b7:43:98:26:34:5b:83:54:82:08:ca:82:e9:7e:77:7f:
d3:ee:81:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:50:11 2025 by rpki-client