
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
File: P2d_OhisqubJf4H5muh5RlTgQQs.cer (raw, json)
Hash identifier: h1L8MgMA9bEMS8zFP/uWlycHKsZtNHTvRk5lHkcKqF8=
Subject key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 324D
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:01:01 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 33762
AS: 37070
AS: 37105
AS: 37597
AS: 327685
AS: 327840
IP: 41.56.0.0/16
IP: 41.73.32.0/19
IP: 41.191.124.0/22
IP: 41.208.192.0/18
IP: 41.213.0.0/17
IP: 41.216.192.0/20
IP: 41.242.192.0/18
IP: 154.73.252.0/22
IP: 196.2.96.0/19
IP: 196.46.64.0/21
IP: 197.184.0.0/15
IP: 2001:43e8::/32
IP: 2c0e:8000::/24
IP: 2c0f:ffd8::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12877 (0x324d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 05:01:01 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36BBF41AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:24:3e:70:15:e9:03:f2:6b:88:75:7d:09:52:
87:ae:a3:a6:cd:0a:92:c2:d7:9a:8c:e7:5b:f9:44:
87:99:2a:63:d7:c4:c2:b2:a3:ac:b0:3e:95:96:85:
8a:3a:e3:b2:c8:59:ee:91:97:46:e0:dd:14:65:3d:
ba:1a:14:13:9d:e2:3a:70:b6:38:80:4e:33:6f:e3:
3e:17:c7:13:48:5a:44:a7:44:60:2a:88:82:f9:ed:
09:e6:0e:85:76:8e:6a:5b:e4:e5:14:6b:c2:30:49:
0d:ea:e4:5f:cf:1f:b3:95:a8:62:8b:40:68:ab:2f:
9c:89:f6:d3:12:ad:ff:9f:3b:ec:04:07:be:16:17:
52:2a:19:51:71:1d:c7:6c:35:2c:ba:92:98:09:3e:
3e:be:e8:8f:a7:75:04:25:3a:5a:a5:0e:70:72:a7:
74:40:fd:e7:44:3a:d8:d9:5e:b7:41:a1:3a:90:f5:
9e:2a:87:79:7a:5c:eb:1d:05:ed:de:62:64:86:a6:
00:0e:f4:47:03:fc:dd:75:6f:11:11:ac:71:a1:07:
1e:9b:f1:e2:4b:3a:98:32:30:e4:ff:25:7c:06:1b:
6e:4f:1b:ab:c8:3b:d5:d0:c1:39:5e:86:ea:dd:bc:
4b:d7:8e:da:0e:25:24:22:ca:b3:98:fd:92:41:29:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33762
37070
37105
37597
327685
327840
sbgp-ipAddrBlock: critical
IPv4:
41.56.0.0/16
41.73.32.0/19
41.191.124.0/22
41.208.192.0/18
41.213.0.0/17
41.216.192.0/20
41.242.192.0/18
154.73.252.0/22
196.2.96.0/19
196.46.64.0/21
197.184.0.0/15
IPv6:
2001:43e8::/32
2c0e:8000::/24
2c0f:ffd8::/32
Signature Algorithm: sha256WithRSAEncryption
b0:57:c1:76:89:6d:2a:f8:48:f9:78:4b:ee:dc:39:cb:3f:a1:
0a:7f:d6:02:1b:90:1e:51:c5:66:28:23:79:8d:f4:00:f8:04:
f6:53:bc:a5:ed:2a:33:3c:5f:7d:1e:73:3c:b0:f3:df:f6:08:
2d:ff:d9:02:59:90:fd:12:30:49:86:69:7b:1b:ab:f6:de:22:
fe:97:7b:8d:01:c2:72:a0:c4:39:9c:97:8e:6f:6f:1f:bc:05:
93:f6:4d:53:dd:ef:b8:5b:fe:3e:40:02:8b:ef:cf:80:fc:3a:
48:e5:7c:21:b1:4f:6e:95:b5:6b:bb:03:78:04:b5:c0:bf:30:
bf:0a:85:74:be:fc:e3:5f:71:15:3b:d2:20:00:c7:d9:84:5a:
fc:93:c6:4b:0d:6d:bd:c9:82:16:9d:bb:01:52:97:3b:18:b7:
f4:86:c3:b1:c9:cf:46:ee:d4:ae:3d:9d:ec:00:6d:86:73:5f:
76:d2:65:0c:dc:28:94:4a:0d:12:25:80:f5:78:23:4c:d8:fd:
a7:f0:fc:b9:ef:d1:aa:c6:38:1c:05:16:c5:c3:0b:72:00:a6:
f2:08:68:cc:03:02:72:6e:15:80:52:e5:93:8e:d0:4a:f8:75:
43:6b:71:de:6e:da:92:58:c9:62:0b:2a:ab:f2:91:08:8b:45:
cb:d8:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:36:31 2025 by rpki-client