Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/f5DbGDX56nljonlPXDJUNY30PvQ.cer
File: f5DbGDX56nljonlPXDJUNY30PvQ.cer (raw, json)
Hash identifier: 1zh5+uXgnCa/Tp1vWcdcPAR6k3BswQbCKiPV0yJ75C4=
Subject key identifier: 7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3236
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:56:11 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 329322
IP: 102.211.68.0/22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12854 (0x3236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:56:11 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36B9B8FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:8a:aa:4d:0c:0b:32:c6:32:93:4e:9c:0c:
29:14:70:ec:3d:26:0c:b3:da:4c:b6:3f:7d:13:f0:
2d:24:21:23:73:93:53:2c:9b:45:7b:6b:88:c9:0b:
00:4c:a3:7b:d6:1a:62:b7:62:87:43:e0:f1:ac:0f:
c5:63:19:61:10:93:1a:50:a8:b0:cc:04:eb:c0:5d:
9c:fe:d1:cf:72:34:1c:46:f7:2c:2b:c3:2b:fb:60:
3d:c0:a5:23:86:88:7c:77:62:a6:a8:1f:34:ad:d9:
5b:7b:60:11:bd:ff:2c:a2:b2:cd:77:40:d3:ab:d6:
fb:b2:f0:e9:50:e9:82:37:ba:f5:20:ff:00:e2:dd:
ed:b3:d5:ad:82:ea:90:ca:e4:e3:27:ee:6b:29:02:
7d:77:c5:9f:c8:9a:bc:50:ac:bb:68:f5:49:a2:eb:
c9:e9:ca:61:b0:93:f9:94:d3:8b:68:a9:97:af:0b:
9a:73:5b:31:0d:ef:23:2f:88:a2:ac:c9:fa:57:88:
65:65:dd:60:ed:c1:fa:60:42:3a:1c:0e:68:c4:be:
40:15:4c:08:07:7c:a8:d3:57:f6:67:a9:1f:32:b6:
c9:2b:a5:1c:b7:48:20:3f:10:0b:c2:1d:a3:a2:23:
e3:ad:12:58:d7:f1:0c:09:ca:c7:5f:a9:33:d6:17:
51:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:DB:18:35:F9:EA:79:63:A2:79:4F:5C:32:54:35:8D:F4:3E:F4
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9B8F/84E1F6DC440411EFA393C656762E951A/f5DbGDX56nljonlPXDJUNY30PvQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
329322
sbgp-ipAddrBlock: critical
IPv4:
102.211.68.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ea:1b:66:77:b6:bb:c0:d2:04:86:6d:07:61:23:d2:87:48:
54:fd:60:bd:e3:2c:94:27:67:3d:90:27:c1:e3:68:dd:02:d0:
7d:45:89:ec:0c:3c:61:5f:77:55:19:58:b0:4c:18:ce:21:65:
5b:56:31:8a:42:6a:64:53:c4:28:01:3f:1b:11:b5:67:7c:3b:
c0:8c:62:05:b7:37:9b:13:b2:f5:66:13:9b:b8:f8:85:b6:50:
ce:58:b1:7a:bf:2d:bc:81:65:c9:e9:a4:60:21:8d:0f:5b:60:
fd:d0:5f:32:69:6a:26:ed:a8:c6:12:a8:b0:15:ee:c9:cc:05:
98:ca:a1:f0:c0:43:11:4f:06:ae:05:4f:87:a7:b7:c0:99:ba:
be:4a:48:94:21:91:19:92:49:39:cf:a7:e2:32:00:7f:1a:0d:
1f:ee:ad:36:78:95:de:79:51:e4:d2:da:74:04:2f:4e:c5:6d:
39:73:c5:a0:4d:d1:73:bf:a8:d9:6a:08:80:80:b5:e3:23:ff:
f6:84:37:a0:4e:1a:e0:69:16:69:b8:14:38:8d:c9:23:16:a5:
83:1a:cb:00:8f:d2:40:e6:81:ea:c9:59:00:56:e9:c9:97:ae:
b4:9a:aa:27:88:73:78:69:6a:04:c4:81:b6:74:a7:64:7c:ab:
9b:82:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:41:44 2025 by rpki-client