Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
File: DRUACGUUibpRRLPxfr7M37lFZAs.cer (raw, json)
Hash identifier: Aa+KLfHT6Fwj0damWT7IwLoMv0YwmNC+RgPsWcQFRC8=
Subject key identifier: 0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3093
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:27:16 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37575
IP: 41.79.124.0/22
IP: 102.222.140.0/22
IP: 2c0f:f498::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12435 (0x3093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 03:27:16 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FBB68AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:ef:b6:01:97:f7:b8:fa:ab:bc:eb:a1:44:
42:04:bf:09:79:22:70:b6:5a:8e:90:e9:af:ab:79:
81:91:e1:03:96:7e:f0:dd:b8:d7:53:53:75:60:b9:
aa:c7:7c:6c:12:71:58:76:c1:92:46:38:65:3d:cf:
26:40:cf:aa:41:a0:0c:31:c3:f1:de:89:d5:d1:07:
2f:13:12:0f:fe:f0:c9:2d:2b:12:62:45:b2:a2:05:
e4:a6:8c:ad:e3:c9:b9:f9:5c:12:bc:7c:a1:ea:fa:
b4:f8:cf:fc:cd:bf:03:cc:3f:77:84:63:ba:f3:23:
f0:cc:f8:cc:5c:01:97:85:3a:a3:15:0e:e5:dd:54:
5e:d5:d8:75:b3:c7:43:d3:f9:e1:a7:be:c4:b5:2d:
15:6f:e1:de:18:05:d2:76:66:29:84:2a:5b:8f:a6:
99:af:8d:0b:49:aa:a3:4c:ff:52:8f:99:bf:77:8c:
87:90:46:41:77:13:67:32:8d:d1:32:7e:0c:13:ce:
5b:79:25:0e:ab:12:2b:ed:bb:dd:b1:91:dc:ba:5c:
1f:0e:a0:61:8f:54:39:70:9f:18:5a:40:54:75:27:
81:92:26:1b:23:ad:62:2d:17:ba:6a:b7:1b:8e:61:
f6:4e:a3:f6:62:3d:f4:dc:ee:60:45:f3:a7:0c:e5:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37575
sbgp-ipAddrBlock: critical
IPv4:
41.79.124.0/22
102.222.140.0/22
IPv6:
2c0f:f498::/32
Signature Algorithm: sha256WithRSAEncryption
3c:98:e2:d3:a8:b5:6d:dd:ed:66:90:cf:bd:5c:a3:ad:94:fb:
36:b4:e6:30:91:e6:82:6d:15:73:64:81:78:ed:41:93:63:e7:
f8:7c:8c:b4:2e:65:32:52:88:73:31:6a:d3:e0:ef:ac:85:03:
d3:0e:4b:a8:20:4d:be:bb:f1:41:a4:33:e0:f5:25:64:f5:4c:
2b:fa:89:7a:75:a8:ba:af:5d:90:18:32:04:a7:ec:b9:6f:bc:
65:cb:bf:10:f9:d9:a8:16:80:d0:b2:67:05:33:90:f6:a2:1c:
5c:95:12:cb:5b:63:56:43:f8:05:d8:cb:b7:09:34:73:ef:d4:
0f:55:9b:1b:4d:8a:e1:49:6f:32:bc:f9:2c:a4:e7:bf:fc:ba:
d1:83:d0:ac:7a:57:6b:59:20:cf:05:19:85:0a:60:e7:50:ca:
09:91:fc:a2:e7:ac:2b:9b:b2:80:4a:21:b9:49:d9:5e:3a:e4:
e6:d2:a6:54:d1:4c:6d:15:9e:22:0e:0f:5b:a4:0e:b2:95:56:
70:c9:fb:85:4b:95:63:bc:ef:49:2f:6c:19:08:02:bd:9c:6f:
f2:4b:f0:13:d4:42:d4:a9:4e:fc:90:42:79:8b:a8:0f:40:91:
4b:1d:a5:b5:2b:3d:05:ae:fa:19:09:8f:3b:ae:48:33:fd:bd:
4b:ae:d9:10
-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgICMJMwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMzI3MTZaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkZCQjY4QUYxMTAvBgNVBAUTKDBEMTUwMDA4NjUxNDg5QkE1MTQ0QjNG
MTdFQkVDQ0RGQjk0NTY0MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGne+2AZf3uPqrvOuhREIEvwl5InC2Wo6Q6a+reYGR4QOWfvDduNdTU3VguarH
fGwScVh2wZJGOGU9zyZAz6pBoAwxw/HeidXRBy8TEg/+8MktKxJiRbKiBeSmjK3j
ybn5XBK8fKHq+rT4z/zNvwPMP3eEY7rzI/DM+MxcAZeFOqMVDuXdVF7V2HWzx0PT
+eGnvsS1LRVv4d4YBdJ2ZimEKluPppmvjQtJqqNM/1KPmb93jIeQRkF3E2cyjdEy
fgwTzlt5JQ6rEivtu92xkdy6XB8OoGGPVDlwnxhaQFR1J4GSJhsjrWItF7pqtxuO
YfZOo/ZiPfTc7mBF86cM5fOFAgMBAAGjggMgMIIDHDAdBgNVHQ4EFgQUDRUACGUU
ibpRRLPxfr7M37lFZAswHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGQkI2OC9ERUZCMTdGMDc2NzMx
MUVCQkExRjY4NkRGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RkJCNjgvREVGQjE3RjA3NjczMTFFQkJBMUY2ODZERjhBRUEyMjgvRFJVQUNH
VVVpYnBSUkxQeGZyN00zN2xGWkFzLm1mdDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMAkscwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAIpT3wDBAJm3owwDQQC
AAIwBwMFACwP9JgwDQYJKoZIhvcNAQELBQADggEBADyY4tOotW3d7WaQz71co62U
+za05jCR5oJtFXNkgXjtQZNj5/h8jLQuZTJSiHMxatPg76yFA9MOS6ggTb678UGk
M+D1JWT1TCv6iXp1qLqvXZAYMgSn7LlvvGXLvxD52agWgNCyZwUzkPaiHFyVEstb
Y1ZD+AXYy7cJNHPv1A9VmxtNiuFJbzK8+Syk57/8utGD0Kx6V2tZIM8FGYUKYOdQ
ygmR/KLnrCubsoBKIblJ2V465ObSplTRTG0VniIOD1ukDrKVVnDJ+4VLlWO870kv
bBkIAr2cb/JL8BPUQtSpTvyQQnmLqA9AkUsdpbUrPQWu+hkJjzuuSDP9vUuu2RA=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:34:28 2025 by rpki-client