Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
File: _47Skrq7L4ZA7kbxs1kWS4BTj1U.cer (raw, json)
Hash identifier: 46pVXcWC2NjDtzMIMeS+YYUKm7ZevHh2KqlwfRpLBFg=
Subject key identifier: FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D3B
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:30:38 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 328808
IP: 102.217.244.0/22
IP: 102.220.228.0/22
IP: 2c0f:4500::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11579 (0x2d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:30:38 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F3621C8AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:84:b2:ee:a2:86:42:89:a9:d6:0e:98:4e:
9a:5a:98:6b:b0:21:2e:1a:0e:b0:b4:05:52:26:32:
0e:58:06:de:7a:da:f8:7f:35:0f:2f:a1:7a:9a:89:
a9:5c:3f:67:33:46:10:27:42:cf:7c:c3:13:20:e1:
61:79:fd:a8:ea:3c:d4:cc:ec:d8:1e:c6:56:6e:28:
ac:6e:43:b2:06:42:50:f5:4c:7d:89:ae:dd:df:33:
fd:3c:02:17:36:43:84:f3:58:46:9e:45:53:50:c8:
b4:0a:98:9b:43:31:33:47:42:96:ce:4e:b3:0c:13:
58:62:6c:26:4f:87:a2:e5:ec:fe:0b:88:d3:47:8f:
ea:cd:3a:3a:d7:7e:5b:a1:b8:58:e6:9b:14:a8:dc:
83:2a:7a:6d:da:48:62:53:d6:3b:ed:a2:50:e3:35:
77:0b:af:83:29:7d:07:56:c0:f2:a7:af:7c:8c:4e:
0b:ea:5b:ba:06:3f:a9:ed:4e:a5:ef:40:25:7f:4c:
a0:d1:90:18:c0:79:31:2e:59:22:13:c8:35:47:1a:
01:04:76:31:26:4f:14:a0:02:8d:f5:da:26:7e:73:
74:ec:20:ae:3e:5b:0e:77:fc:51:e3:43:1f:4f:44:
f0:75:6d:b8:e3:5a:73:ff:7f:85:45:d2:5d:3c:26:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
328808
sbgp-ipAddrBlock: critical
IPv4:
102.217.244.0/22
102.220.228.0/22
IPv6:
2c0f:4500::/32
Signature Algorithm: sha256WithRSAEncryption
8c:25:ac:19:55:cb:73:91:75:e5:46:ad:bf:80:6e:7e:18:9f:
94:39:59:87:37:10:4e:f0:3a:29:64:ad:17:de:43:98:5d:0a:
4c:80:4e:b7:3a:6a:2e:e7:17:67:1a:69:79:be:da:a9:1a:34:
61:e6:2a:60:d5:ce:0e:f5:66:8b:f3:e3:d6:18:ad:db:78:42:
3a:db:42:f4:3a:96:12:d7:89:dd:58:d6:35:e3:b8:58:e8:04:
bb:e5:40:b5:37:d3:58:53:06:58:ee:53:64:57:d5:2f:5c:02:
60:94:25:67:ca:ee:a6:64:7d:df:68:88:c3:df:09:72:a3:a8:
2b:0a:47:ee:6f:01:a7:88:7a:80:ee:27:93:9a:14:f3:3d:52:
0b:16:98:f5:11:0b:7b:1a:45:e6:c9:d0:ae:39:b8:dc:4e:18:
c4:6a:1a:0f:61:a1:82:df:5f:91:5c:fe:5c:cb:ca:4b:74:9e:
3c:b5:0c:f8:66:1c:b2:5a:2b:09:17:b8:8a:00:07:26:1e:b6:
8a:48:d8:c7:fe:cf:29:a8:45:69:88:f0:71:27:70:64:66:e3:
7a:1f:c8:be:9d:8c:f5:b2:7f:b2:c2:fa:3e:be:49:b1:14:37:
fd:26:5b:37:9f:2b:e2:0c:d0:61:76:c9:8a:4a:10:e9:57:4b:
cd:36:3b:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:53:20 2025 by rpki-client