Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
File: QS0Z-aThegTQm63JAqsLCQgk6tc.cer (raw, json)
Hash identifier: Bnt6ra+82dYlGoK9qfFhz02Pv4SjpzKzBFsLhSbhLeQ=
Subject key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2DB0
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:56:54 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 36958
IP: 41.86.32.0/19
IP: 41.191.120.0/22
IP: 41.222.204.0/22
IP: 41.223.216.0/22
IP: 197.157.96.0/19
IP: 2c0f:fef0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11696 (0x2db0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:56:54 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36FFD1EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:44:48:e2:3f:5e:5f:c4:bc:80:80:6b:84:
7f:d6:b2:fe:ce:f5:5a:2a:09:02:59:77:50:8b:0d:
3d:f5:df:7e:5f:51:0e:8e:18:29:4c:6d:fb:58:16:
c1:28:35:95:c1:e0:44:db:dd:91:e7:e3:8c:90:1b:
ad:b6:1a:58:b1:a2:86:d3:0e:e6:0f:62:5b:91:52:
a2:e2:2f:a0:7f:e6:86:fe:33:49:73:03:e5:2f:29:
6b:18:02:2e:9a:62:f0:d0:11:87:8f:94:75:18:ae:
0b:51:2a:2d:04:de:a6:36:c3:43:1b:a2:77:bd:5e:
fd:01:bf:90:1d:eb:48:64:f0:0e:e9:a5:7d:33:3b:
b0:3a:fc:1b:98:75:60:09:ee:33:43:e2:ed:71:de:
a8:34:ca:2e:78:c9:03:92:d0:12:75:72:fe:b5:47:
f4:50:79:f4:01:8f:e0:45:27:42:38:26:39:a7:9f:
e2:64:27:58:f0:0f:1d:d2:3e:c4:43:5b:b6:4c:12:
d1:c1:17:29:f8:c9:a5:7a:87:8e:01:e1:8b:26:88:
1b:1f:bf:fb:73:c1:3d:19:41:b4:00:0a:06:0b:64:
be:3f:52:43:36:bd:fa:2d:6c:0b:8e:cb:fc:1b:a2:
bb:b8:4a:86:06:d7:05:6f:6e:e7:a5:c8:ff:2c:c2:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
36958
sbgp-ipAddrBlock: critical
IPv4:
41.86.32.0/19
41.191.120.0/22
41.222.204.0/22
41.223.216.0/22
197.157.96.0/19
IPv6:
2c0f:fef0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:87:5e:4f:47:7e:54:29:16:ba:5e:b3:68:4e:10:e1:da:ed:
fa:3f:d4:71:2e:2b:7f:0e:5a:b8:a2:8c:74:2d:9b:7b:99:2f:
28:d5:de:c9:ba:6c:b0:79:ab:ba:c2:f4:26:4c:41:4d:d7:21:
72:19:ba:73:df:f2:59:57:cd:36:0b:fc:ee:30:16:ea:a2:56:
9c:93:dc:24:90:9f:8c:b5:ab:10:1a:49:56:eb:b8:63:54:be:
78:36:ad:4d:5f:5d:13:c8:c9:50:f1:1d:c1:5e:35:3f:ea:96:
57:8c:54:3a:f4:16:a5:f2:32:15:81:55:71:ba:97:db:15:49:
1e:ed:dc:0a:75:60:83:88:3b:3e:07:42:50:98:19:aa:72:5b:
77:63:81:81:4f:68:c0:05:0c:c1:99:14:d7:c3:b4:e3:62:0d:
1a:7c:f0:ea:2d:54:0a:61:b9:82:6d:6d:cf:63:c1:1f:0e:37:
fe:f2:23:f3:04:45:0e:64:18:a9:2e:cb:97:85:57:5b:34:76:
2c:29:b0:fc:dc:73:ac:47:e6:1d:45:4e:22:8d:e8:2c:23:36:
2f:59:c6:1e:2d:83:ad:23:d1:06:4c:ed:fa:39:a1:01:b2:3e:
3a:71:b3:19:25:a8:67:cd:8e:91:68:d2:1a:0a:1e:a9:08:9e:
fb:bd:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:36:32 2025 by rpki-client