Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
File: oTaOi_yA9OpasJcW0lchGTYYKFE.cer (raw, json)
Hash identifier: dtyT5gyS0fJmHw76IECX+y0SqIjs/9VDzflnVw5I/ew=
Subject key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2D99
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 00:52:28 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 11845
IP: 41.193.0.0/16
IP: 102.39.0.0/16
IP: 102.217.196.0/22
IP: 102.219.24.0/22
IP: 102.220.208.0/22
IP: 196.3.164.0 -- 196.3.179.255
IP: 196.22.192.0 -- 196.22.239.255
IP: 196.41.0.0/19
IP: 196.41.192.0/19
IP: 197.245.0.0/16
IP: 2c0f:fd58::/29
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11673 (0x2d99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 00:52:28 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F362E39EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3c:b2:9f:56:47:26:bd:94:e2:02:6a:d2:0a:
8e:5a:54:44:d6:d9:98:1e:66:fa:1d:a4:31:ed:6a:
8d:ac:c0:c4:ac:14:b4:2a:b1:67:32:57:d6:38:26:
0c:76:a1:48:05:2d:3c:1d:14:27:89:61:ef:cf:f1:
3d:a9:8f:90:c7:b6:54:60:ce:b4:fe:3c:3a:45:bc:
09:31:df:06:41:eb:16:2e:a4:4b:7d:7e:e3:e0:62:
c3:03:92:5f:2d:65:12:1e:60:a7:79:31:56:be:12:
ed:7c:2d:36:f9:c2:f3:c1:f3:24:98:82:41:4c:df:
5d:4a:ad:2e:34:11:c4:ce:b4:bb:05:61:99:89:66:
ec:d7:cd:0e:25:d9:24:85:84:dc:0c:3a:a4:e6:50:
9d:ba:77:43:20:cf:eb:92:b8:de:a1:db:e3:e4:3d:
14:e9:b9:2b:61:5d:37:a8:32:56:e8:30:3d:cd:d7:
e4:29:19:ad:80:ef:c2:6f:5b:9d:e0:2e:d7:fc:db:
a6:4c:ca:bb:fb:65:47:ba:30:20:c2:21:9d:49:9c:
60:02:c3:74:13:c6:9f:0d:28:8f:ba:f6:88:cb:5e:
78:79:69:2e:7c:e9:56:82:3a:71:71:da:07:55:79:
89:5e:a6:e4:3f:3b:50:4d:05:c8:74:62:a9:6c:7e:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
11845
sbgp-ipAddrBlock: critical
IPv4:
41.193.0.0/16
102.39.0.0/16
102.217.196.0/22
102.219.24.0/22
102.220.208.0/22
196.3.164.0-196.3.179.255
196.22.192.0-196.22.239.255
196.41.0.0/19
196.41.192.0/19
197.245.0.0/16
IPv6:
2c0f:fd58::/29
Signature Algorithm: sha256WithRSAEncryption
bc:b9:b8:7d:99:9a:2b:37:8b:77:e7:6a:41:08:9f:4a:95:28:
61:09:f8:07:7f:bd:2a:ca:59:8e:1d:89:4d:c2:b5:b6:6f:6c:
b5:34:57:51:cb:66:dc:25:f0:66:38:bf:03:15:32:2d:d8:f0:
07:ec:9a:bc:a4:2a:c0:b6:1d:ee:9f:f1:b1:01:01:01:d2:3c:
bd:6d:98:93:a2:56:e2:e0:bb:d2:69:b3:53:ba:2b:25:93:c8:
83:9f:47:ea:c3:b6:f2:a4:f6:80:1c:31:fc:b6:3a:1b:e5:11:
7d:50:ff:5c:77:ec:02:bc:2f:a2:78:e4:74:c1:06:ee:4d:64:
fb:b6:eb:ea:0d:cd:83:47:1a:46:c4:23:e0:00:9b:67:48:9c:
d0:33:30:6e:bd:54:0e:17:a3:b1:01:13:24:d8:c6:94:76:e6:
03:12:13:81:70:7a:fa:9f:70:38:1b:ca:91:f6:2c:fb:e6:69:
50:77:6a:93:be:10:5a:80:02:c0:80:e3:dc:41:20:7d:13:18:
39:0e:a7:df:11:ef:9b:f4:4e:16:3f:3f:80:40:fe:76:ad:0d:
a5:4d:43:64:79:48:9d:67:4d:76:ae:49:5f:e8:28:e4:2c:b9:
2c:69:65:52:ba:f4:b8:30:48:dc:30:00:b3:26:c9:55:7b:35:
eb:ab:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:56:23 2025 by rpki-client