Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
File: OdAwrgr6xpErCxM_96NC94TQ6ow.cer (raw, json)
Hash identifier: cxuv6lbEWfoGVmQi/N6yhpyMMRCywc3+YkqxT7sGQw0=
Subject key identifier: 39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
Authority key identifier: 2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
Certificate issuer: /CN=AFRINIC/serialNumber=2B57897A7CA964C3C8B7F7BDDAA7A4DA34A98F80
Certificate serial: 2F79
Authority info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
Manifest: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
caRepository: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Wed 01 Jan 2025 02:30:22 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: AS: 37682
AS: 328630
IP: 102.36.148.0/22
IP: 102.68.108.0/22
IP: 102.134.112.0/22
IP: 102.176.244.0/22
IP: 102.211.96.0/22
IP: 102.215.204.0/22
IP: 102.219.52.0/22
IP: 102.222.96.0/22
IP: 154.73.8.0/22
IP: 196.50.4.0/22
IP: 2c0f:eac0::/32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12153 (0x2f79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFRINIC
Validity
Not Before: Jan 1 02:30:22 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=F36F0163AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:64:49:f9:ce:cd:94:58:8e:d8:a9:6f:51:
95:1b:e5:a5:73:a4:a1:3b:52:b0:a7:53:99:d1:a9:
99:1d:37:45:27:1a:b9:12:c0:19:60:93:fb:db:6e:
2a:37:e4:57:11:fd:0b:30:5b:3b:92:25:eb:8a:07:
db:b0:a8:56:95:36:2a:1f:cd:06:60:d0:69:ff:36:
8f:d4:b9:ab:96:72:50:af:00:57:b3:27:cd:47:6c:
7d:d0:f2:16:a0:5f:98:ae:8a:7e:b1:66:6a:c8:03:
b3:aa:e0:73:c6:16:10:7c:38:c2:31:fe:7f:28:7c:
5e:77:56:fd:79:39:c0:4e:c1:f5:49:df:02:98:73:
78:1e:fb:1a:18:d0:c0:7c:59:e0:f7:7e:e6:f0:b3:
41:d9:56:b6:18:36:ef:55:46:6f:f5:f7:e1:e1:ff:
3e:73:fe:e0:40:d0:69:81:54:41:70:1a:3e:41:86:
0c:b1:b3:b8:51:ae:8d:58:8d:80:16:c3:cc:9e:db:
b2:2a:a7:99:88:c0:c2:f6:3d:24:da:f7:56:44:73:
f7:81:b8:f7:0f:9c:72:d2:11:02:f6:ca:73:e2:56:
1a:71:31:27:a5:a6:f5:fe:cd:c7:3c:30:ab:91:78:
03:b4:90:09:e6:ca:ed:96:d1:21:3e:70:b8:7f:61:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
X509v3 Authority Key Identifier:
keyid:2B:57:89:7A:7C:A9:64:C3:C8:B7:F7:BD:DA:A7:A4:DA:34:A9:8F:80
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
37682
328630
sbgp-ipAddrBlock: critical
IPv4:
102.36.148.0/22
102.68.108.0/22
102.134.112.0/22
102.176.244.0/22
102.211.96.0/22
102.215.204.0/22
102.219.52.0/22
102.222.96.0/22
154.73.8.0/22
196.50.4.0/22
IPv6:
2c0f:eac0::/32
Signature Algorithm: sha256WithRSAEncryption
72:c2:3c:63:ad:29:fb:e1:aa:31:1c:97:ce:61:a8:3e:3d:6c:
37:c4:53:3a:31:90:d2:39:49:15:b0:6d:04:95:59:66:69:d1:
24:56:06:9f:d7:88:fc:07:79:2a:0f:68:dc:69:2b:56:32:0b:
01:0c:98:2d:a2:0b:86:8d:a6:26:31:a2:22:a8:71:bd:c8:40:
91:17:85:24:ca:a3:03:05:da:1f:59:d1:f7:cc:cf:51:df:31:
5b:83:2e:c0:36:b2:37:5a:ba:61:c4:59:07:ba:68:ba:de:bf:
0e:f8:32:ca:bb:1a:83:7f:0a:0e:e9:77:af:57:2d:db:d5:2e:
a8:b6:44:d3:0c:bb:b4:f1:ff:f7:78:1c:2e:43:64:25:73:a2:
43:08:11:e4:5b:62:4d:6b:33:ff:db:02:8b:cb:54:b5:12:44:
c0:3d:d1:ba:af:71:97:cc:13:b7:ba:f2:e2:60:3d:fb:2d:22:
8e:65:99:6c:86:97:17:26:f7:00:db:4e:dd:5c:ae:b2:d4:46:
df:44:59:95:fa:ff:f9:b6:e6:f1:0d:b0:68:04:c7:ef:eb:d7:
5b:89:7d:2b:77:35:a7:ce:b8:9b:3f:2f:4b:fa:d0:ef:68:a1:
16:b6:8e:dc:aa:6c:d1:a1:df:c0:6e:aa:c7:ef:02:0b:46:aa:
0b:1c:58:06
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgICL3kwDQYJKoZIhvcNAQELBQAwRTEQMA4GA1UEAxMHQUZS
SU5JQzExMC8GA1UEBRMoMkI1Nzg5N0E3Q0E5NjRDM0M4QjdGN0JEREFBN0E0REEz
NEE5OEY4MDAeFw0yNTAxMDEwMjMwMjJaFw0yNjAzMzEwMDAwMDBaMEgxEzARBgNV
BAMTCkYzNkYwMTYzQUYxMTAvBgNVBAUTKDM5RDAzMEFFMEFGQUM2OTEyQjBCMTMz
RkY3QTM0MkY3ODREMEVBOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCcaGRJ+c7NlFiO2KlvUZUb5aVzpKE7UrCnU5nRqZkdN0UnGrkSwBlgk/vbbio3
5FcR/QswWzuSJeuKB9uwqFaVNiofzQZg0Gn/No/UuauWclCvAFezJ81HbH3Q8hag
X5iuin6xZmrIA7Oq4HPGFhB8OMIx/n8ofF53Vv15OcBOwfVJ3wKYc3ge+xoY0MB8
WeD3fubws0HZVrYYNu9VRm/19+Hh/z5z/uBA0GmBVEFwGj5Bhgyxs7hRro1YjYAW
w8ye27Iqp5mIwML2PSTa91ZEc/eBuPcPnHLSEQL2ynPiVhpxMSelpvX+zcc8MKuR
eAO0kAnmyu2W0SE+cLh/YVEZAgMBAAGjggNVMIIDUTAdBgNVHQ4EFgQUOdAwrgr6
xpErCxM/96NC94TQ6owwHwYDVR0jBBgwFoAUK1eJenypZMPIt/e92qek2jSpj4Aw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wXAYDVR0fBFUwUzBRoE+g
TYZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZyaW5pYy9L
MWVKZW55cFpNUEl0X2U5MnFlazJqU3BqNEEuY3JsMG8GCCsGAQUFBwEBBGMwYTBf
BggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkv
MDRFOEIwRDgwRjREMTFFMEI2NTdEODkzMTM2N0FFN0QvYWZyaW5pYy1jYS5jZXIw
TwYDVR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczov
L3Jwa2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwggFFBggrBgEFBQcBCwSC
ATcwggEzMGwGCCsGAQUFBzAFhmByc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVw
b3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9yeS9GMzZGMDE2My84ODVEQzY0NEZDOUEx
MUU5ODE3OUIyM0RGOEFFQTIyOC8wNQYIKwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5h
ZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGLBggrBgEFBQcwCoZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhBRUEyMjgvT2RBd3Jn
cjZ4cEVyQ3hNXzk2TkM5NFRRNm93Lm1mdDAfBggrBgEFBQcBCAEB/wQQMA6gDDAK
AgMAkzICAwUDtjBkBggrBgEFBQcBBwEB/wRVMFMwQgQCAAEwPAMEAmYklAMEAmZE
bAMEAmaGcAMEAmaw9AMEAmbTYAMEAmbXzAMEAmbbNAMEAmbeYAMEAppJCAMEAsQy
BDANBAIAAjAHAwUALA/qwDANBgkqhkiG9w0BAQsFAAOCAQEAcsI8Y60p++GqMRyX
zmGoPj1sN8RTOjGQ0jlJFbBtBJVZZmnRJFYGn9eI/Ad5Kg9o3GkrVjILAQyYLaIL
ho2mJjGiIqhxvchAkReFJMqjAwXaH1nR98zPUd8xW4MuwDayN1q6YcRZB7pout6/
Dvgyyrsag38KDul3r1ct29UuqLZE0wy7tPH/93gcLkNkJXOiQwgR5FtiTWsz/9sC
i8tUtRJEwD3Ruq9xl8wTt7ry4mA9+y0ijmWZbIaXFyb3ANtO3VyustRG30RZlfr/
+bbm8Q2waATH7+vXW4l9K3c1p864mz8vS/rQ72ihFraO3Kps0aHfwG6qx+8CC0aq
CxxYBg==
-----END CERTIFICATE-----
Generated at Wed Apr 2 08:51:17 2025 by rpki-client