Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
File: OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer (raw, json)
Hash identifier: CO+ZLBUJvxvktUIYafmnoVIF09tvCLO+45RmqqbYp3c=
Subject key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2CBF
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:01:08 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36963
IP: 41.74.48.0/20
IP: 41.77.88.0/21
IP: 41.138.72.0/21
IP: 41.190.244.0/22
IP: 41.223.140.0/22
IP: 105.235.240.0/20
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11455 (0x2cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:01:08 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3610F96AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:43:6e:ff:40:27:02:51:64:ca:9b:d3:a7:
d5:1b:27:74:bd:d2:20:3f:c5:c1:58:98:4a:83:c6:
f4:cb:78:85:4d:60:eb:c8:34:fe:e1:a3:d8:ab:37:
96:39:a8:1e:5c:4b:c5:8d:53:f6:6b:9f:bf:60:f2:
09:ff:c2:61:5f:19:b5:95:49:a3:89:3d:2b:21:13:
60:51:2d:5f:b3:fa:fc:6c:29:b3:34:8a:70:c3:a2:
99:56:28:fd:e7:46:80:5c:81:d1:ae:3b:01:20:0b:
5c:53:cd:00:f9:0b:b9:82:17:92:8e:40:24:71:2e:
90:7d:90:ed:0d:f2:11:e2:8d:3f:40:fd:2c:79:ef:
5c:10:fc:81:6b:76:d1:ce:01:64:74:3a:bb:a0:2c:
ca:12:47:83:bf:92:0d:0a:53:12:0e:63:59:38:5b:
7a:5d:e5:a9:19:85:24:70:f9:e9:0f:2e:c2:a7:b7:
e6:cc:60:7e:47:48:f3:80:b4:4a:8a:53:8f:3b:bd:
7a:1d:62:4c:ed:d9:d0:bd:84:c3:fd:8b:77:53:95:
08:38:fb:d0:58:f1:fc:2c:f4:22:c2:31:ed:36:ee:
e7:97:53:2a:30:1c:e3:98:bf:27:b2:ab:a4:75:7d:
0e:86:b7:fb:c6:f2:0c:ef:42:43:de:d3:4d:99:09:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36963
sbgp-ipAddrBlock: critical
IPv4:
41.74.48.0/20
41.77.88.0/21
41.138.72.0/21
41.190.244.0/22
41.223.140.0/22
105.235.240.0/20
Signature Algorithm: sha256WithRSAEncryption
01:9a:0e:58:ff:29:14:94:1b:20:d7:db:44:8b:79:89:3f:71:
51:82:0e:70:88:c6:a5:ee:0b:23:eb:a4:65:f1:98:8f:84:00:
e5:f4:93:57:1a:1c:86:f5:25:73:60:6e:92:4e:97:bc:b8:5c:
de:49:54:8f:cd:23:e6:e5:41:ea:8b:93:fa:c9:70:e1:72:75:
13:c1:50:79:d2:ea:a7:35:63:25:db:15:fb:46:b3:d6:b3:f9:
3c:0e:ee:0d:31:d5:57:3c:9c:1f:45:5f:4b:0b:bc:8a:72:ff:
eb:37:fb:29:53:14:da:df:cf:fa:e3:bf:2f:05:a7:5f:9c:e7:
ae:b5:de:c6:8c:b2:ce:e0:44:d9:18:e2:75:9d:11:25:c7:da:
40:ff:27:64:f3:56:c9:18:db:65:66:72:ca:81:0c:4b:97:8f:
9c:35:b1:3d:eb:32:4c:59:77:7f:ca:94:2d:9f:77:c5:cf:1a:
4e:13:e3:64:f1:2c:03:ea:c1:e8:9e:38:5c:84:2a:a6:fa:f3:
6c:6f:9e:bc:f0:15:54:65:20:3d:07:8a:09:40:f8:e8:68:62:
64:74:05:21:43:9d:70:ba:dd:6b:a1:c9:8e:6f:03:06:52:a9:
0a:d7:a5:1b:2a:db:18:92:0d:b1:8d:4f:2a:71:65:b4:72:52:
f7:a7:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:33:27 2025 by rpki-client