Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OGKY2dDrccqQ9IahYTSvE2HSccg.cer
File: OGKY2dDrccqQ9IahYTSvE2HSccg.cer (raw, json)
Hash identifier: FNYbkhPONyxHS1oqozskllhyXCq04o1udNj/rKz8KjU=
Subject key identifier: 38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2FD3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:48:15 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37716
AS: 328010
IP: 196.49.19.0/24
IP: 196.49.74.0/24
IP: 196.60.76.0/24
IP: 196.223.47.0/24
IP: 2001:43f8:b60::/47
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12243 (0x2fd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:48:15 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F366D2C6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:d4:a4:cd:73:0b:02:16:dc:38:61:41:8e:
05:a1:7b:6b:19:71:cb:05:77:7a:9f:cc:2b:5e:ae:
cd:3a:87:6e:58:74:79:27:ec:4f:17:d6:9e:08:25:
92:1c:76:f8:a4:a6:7c:83:ec:18:c3:13:0c:54:83:
a5:85:d8:f2:35:09:43:15:9f:d4:60:9d:ad:47:19:
1b:d7:65:dd:b1:4c:e0:8f:0b:f1:96:23:bf:05:c1:
a9:ed:3a:f7:df:93:5d:53:53:a1:94:ee:52:26:9b:
0f:a0:a8:44:3c:5f:02:02:0e:25:3c:94:0c:c8:80:
69:33:b7:8a:09:5f:83:98:38:33:45:43:f0:a9:4e:
2c:0b:e1:04:be:16:37:f9:32:1f:de:fa:cf:23:01:
a4:15:36:63:69:f2:4e:9b:3f:3d:bc:6a:eb:67:69:
ec:aa:fe:3c:c6:72:2c:1d:95:b5:88:01:6c:9a:a8:
e0:73:bc:d8:43:db:45:88:3b:d0:3d:45:3d:c1:50:
4a:1d:af:27:e9:42:6b:62:7e:d7:33:e8:12:87:5a:
ed:49:31:20:9c:b7:1e:10:9b:6c:82:e6:49:a0:4a:
f1:3a:f3:72:b0:ef:8e:0b:8a:58:88:c7:15:e0:c8:
61:5e:62:e5:4d:75:70:df:22:71:7e:e2:33:80:eb:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:98:D9:D0:EB:71:CA:90:F4:86:A1:61:34:AF:13:61:D2:71:C8
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F366D2C6/0BEC0256711A11EB9EB6B41CF8AEA228/OGKY2dDrccqQ9IahYTSvE2HSccg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37716
328010
sbgp-ipAddrBlock: critical
IPv4:
196.49.19.0/24
196.49.74.0/24
196.60.76.0/24
196.223.47.0/24
IPv6:
2001:43f8:b60::/47
Signature Algorithm: sha256WithRSAEncryption
3d:88:c8:68:30:93:45:1e:51:87:17:f7:26:49:97:42:97:bf:
0d:da:ce:bf:44:c7:84:4f:35:1f:61:63:a6:46:52:1c:ed:c0:
02:30:a0:f2:db:01:63:84:46:5d:8c:b1:d2:65:c5:8b:ba:4c:
ee:e3:cc:c0:e1:74:f2:b3:e9:18:77:5e:3e:9b:08:a8:1e:19:
98:c3:83:ec:31:77:19:60:70:44:f2:4a:94:58:c2:0c:cb:99:
6b:16:38:a1:e4:0d:a4:86:7e:63:f9:70:dc:3c:3a:c4:e3:b8:
82:3e:5b:ae:3e:d5:67:8a:ae:7a:6e:ef:d5:a4:4c:84:12:49:
fa:ec:26:ca:2d:11:80:ae:bf:7a:74:ae:af:0b:d0:45:4b:22:
c0:52:e9:d7:79:5b:05:55:d1:14:7d:3d:e1:45:d1:23:6d:ed:
c8:67:6d:ba:3c:b3:05:4b:f1:3f:7b:e8:6a:1b:df:24:00:0e:
fb:58:03:6b:8b:a2:cc:c6:7e:52:51:87:69:72:a2:85:cd:14:
71:7e:00:14:6b:79:c6:d0:44:00:a7:04:70:60:9c:0b:f2:a8:
59:c8:d3:e2:0b:b5:f3:bb:f9:b2:83:92:b8:a5:37:62:10:83:
97:0e:fc:f2:0a:c2:e8:df:fb:7f:28:90:9c:f1:cb:50:3a:64:
60:23:ae:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:45:49 2025 by rpki-client