Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
File: vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer (raw, json)
Hash identifier: pv3WQj1WCT7nF2iCuglkYtsYs8/HAnEZnTnkloedOM8=
Subject key identifier: BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 3170
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 04:13:21 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37254
IP: 41.76.216.0/21
IP: 102.69.168.0 -- 102.69.179.255
IP: 102.222.196.0/22
IP: 2c0f:f4a8::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12656 (0x3170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 04:13:21 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36E8561AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:57:c6:1f:45:b0:9e:d0:19:e3:14:cb:7e:
a4:d2:07:0e:12:f8:04:ad:e6:a7:8f:f2:79:02:65:
3d:cf:38:bf:55:8b:cd:61:30:b9:46:3d:6f:6d:2f:
14:b2:e8:dc:33:79:4e:a3:f4:1d:bd:92:99:b4:67:
12:b6:9b:31:a8:df:9c:53:16:4c:83:04:7f:e8:05:
05:18:6e:5b:e9:f8:2d:43:1c:40:3a:6a:97:89:ca:
bd:bb:d1:37:44:88:8e:86:cf:b1:fa:b0:99:d6:7a:
25:9c:f6:07:74:ef:29:07:19:e9:c9:49:a4:f2:f9:
cc:19:0c:eb:95:84:c0:b5:da:94:63:00:f5:1b:e5:
b0:84:e9:16:27:06:ef:42:e9:cc:81:f8:32:95:9b:
db:ac:9e:4a:89:99:d5:9a:f0:85:74:70:22:61:98:
41:37:82:2c:a6:2d:ed:7e:9c:52:e4:3c:d8:4f:2d:
43:dc:7f:ae:49:b9:c0:73:63:a4:58:c7:12:cd:c6:
d2:a5:b7:f6:8a:97:82:26:fb:e4:0d:8d:76:d8:59:
8b:38:76:e3:d9:87:75:44:48:8b:f4:e2:e1:e1:94:
ac:d7:1e:da:fc:01:73:2d:9e:99:d1:fa:6b:55:bb:
65:5c:40:a1:7d:fc:e7:7e:3e:49:77:16:a0:63:61:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37254
sbgp-ipAddrBlock: critical
IPv4:
41.76.216.0/21
102.69.168.0-102.69.179.255
102.222.196.0/22
IPv6:
2c0f:f4a8::/32
Signature Algorithm: sha256WithRSAEncryption
4b:1a:23:8f:55:63:70:3e:0a:c9:57:2b:16:4b:49:d5:22:ad:
79:09:84:86:26:d6:d8:2c:c8:f9:3a:c9:cb:15:8c:8a:9c:e9:
a7:41:ee:39:4a:fe:c6:e5:92:cb:1c:1d:a7:16:d9:ff:cd:04:
9d:8a:b5:7a:43:39:e2:60:b5:41:af:3c:5b:aa:22:4c:64:00:
4f:b7:73:24:64:ea:7e:ee:4e:7a:2b:4d:55:d8:d9:7d:9e:12:
29:79:fe:01:a9:20:a6:c4:e8:e6:60:91:43:ea:84:08:31:73:
3f:bf:f8:58:92:4f:f2:53:35:85:15:25:ed:08:08:e7:33:2a:
2b:63:27:bd:82:0a:42:f2:bb:c4:e6:4a:0a:f8:c0:d3:51:4f:
da:76:fc:49:e8:87:2f:fd:7c:99:3b:96:ee:89:7a:bf:6b:f7:
49:0c:d4:2a:b7:80:c0:83:ab:3b:7d:93:1e:61:fd:51:f0:a1:
23:63:2c:b4:e2:99:4b:6d:67:c9:ef:31:75:75:91:2a:04:39:
86:b3:8e:2c:ed:e8:a5:72:e0:03:b5:90:32:e1:f9:f4:cd:01:
67:fb:29:73:50:0b:87:2c:6c:25:4c:fd:46:cf:1e:03:d4:d1:
bd:90:76:2d:5a:95:d4:4e:30:de:6e:51:6d:81:7e:f6:04:ff:
ac:0c:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:32:44 2025 by rpki-client