
Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/XriN9L-QidcEmh--gAXmIequhis.cer
File: XriN9L-QidcEmh--gAXmIequhis.cer (raw, json)
Hash identifier: gllFatWJwq9jdhW1QUTuIVZTCRN126QkkZOsK/IMF+Q=
Subject key identifier: 5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 31A3
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:24:40 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328631
IP: 102.22.248.0/21
IP: 102.206.232.0/22
IP: 102.209.8.0/22
IP: 102.213.124.0/22
IP: 102.218.24.0/22
IP: 2c0f:e8a8::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12707 (0x31a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:24:40 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36A2303AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:c5:f0:45:cc:78:7d:2b:ef:91:59:aa:10:
f5:d8:e3:ed:b0:2e:98:4d:38:36:83:a0:ca:fe:e1:
4f:22:cf:2b:91:f0:2e:c8:e3:7d:4b:f6:02:a0:ac:
a6:8d:d1:7c:b3:7d:32:44:0d:23:89:9e:7c:b1:9f:
db:7f:c2:86:ef:29:bd:e9:8d:c3:37:60:95:cb:37:
45:91:76:f9:cb:8f:a1:6f:55:f3:7a:19:68:d3:30:
66:4f:39:d1:6b:34:ca:f3:6d:11:83:64:91:f0:01:
54:04:1c:e2:e9:5f:8d:e6:5e:62:f6:c2:84:24:8f:
66:be:8f:7b:1f:0e:1d:30:7b:ee:14:b6:72:72:ce:
25:fa:58:f8:6a:d3:0a:79:86:22:f3:9b:88:cf:7a:
3a:b4:5b:8e:56:bb:55:1f:4a:25:c5:1c:46:cd:ca:
9d:c9:73:66:f6:84:69:c2:d4:92:7c:0d:4e:46:41:
37:af:2c:39:c1:dd:2a:e3:a0:ae:f3:42:67:3f:fa:
07:14:28:7d:97:92:45:c5:72:1f:fb:90:bb:44:82:
31:8f:1a:8b:1e:c0:34:7b:ef:f3:9c:a3:10:0a:ff:
3b:e4:2d:dd:52:48:92:98:2c:10:00:6c:6f:66:eb:
db:9c:e3:ae:2b:b5:45:75:ab:be:fc:72:15:e4:93:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:8D:F4:BF:90:89:D7:04:9A:1F:BE:80:05:E6:21:EA:AE:86:2B
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/65715F78594311EAB30F4261F8AEA228/XriN9L-QidcEmh--gAXmIequhis.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328631
sbgp-ipAddrBlock: critical
IPv4:
102.22.248.0/21
102.206.232.0/22
102.209.8.0/22
102.213.124.0/22
102.218.24.0/22
IPv6:
2c0f:e8a8::/32
Signature Algorithm: sha256WithRSAEncryption
1d:25:85:96:df:65:50:fa:46:25:49:3f:22:13:52:0a:a4:c4:
08:ee:1c:a6:aa:b5:68:6b:e0:3c:fe:f6:72:7d:2e:83:0b:4e:
e6:57:fc:f6:b1:6d:93:09:20:1f:46:25:6a:22:dc:3e:b8:4b:
6a:36:a3:05:15:8d:21:3f:67:8b:e2:72:10:3b:32:85:df:52:
5e:65:97:21:4b:99:72:17:61:18:61:cf:87:6e:2b:5a:bf:90:
4f:f5:eb:fd:b0:fb:a3:3e:35:74:53:be:46:03:09:06:c4:8b:
18:7d:23:ee:61:e6:26:59:3f:de:fd:97:99:46:cc:5d:52:63:
69:b4:18:f2:71:32:7b:68:a4:63:30:e5:67:a2:86:2e:77:89:
c4:f3:e2:1d:73:79:d9:5b:0e:fe:30:ce:ce:ab:54:59:10:5e:
0e:10:9c:f1:9f:cd:6f:06:56:b5:64:f1:17:93:61:d7:25:73:
00:39:bb:c9:c2:ba:f3:b5:8f:ec:c4:fe:75:0a:fb:d8:47:f9:
17:4e:6b:55:de:5c:bd:51:5e:c8:41:64:fa:5f:ad:ed:e5:c6:
85:01:a4:81:0a:45:88:76:75:97:3e:f6:2c:f6:17:ed:6d:9a:
88:38:ea:42:08:ea:14:1d:8e:2b:cf:96:39:38:e1:3b:54:81:
c2:4e:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:40:30 2025 by rpki-client