Autonomous System Provider Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/5m80fwYws_3FiFD7JiQjAqZ1RYQ.asa
File: 5m80fwYws_3FiFD7JiQjAqZ1RYQ.asa (raw, json)
Hash identifier: gjLGMSykEekyUIYVPL6ciRnNbD1GHyT2f78Z3resXG4=
Subject key identifier: E6:6F:34:7F:06:30:B3:FD:C5:88:50:FB:26:24:23:02:A6:75:45:84
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: A1C7752FF8B1D2E020
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/5m80fwYws_3FiFD7JiQjAqZ1RYQ.asa
Signing time: Tue 27 Feb 2024 18:32:14 +0000
ASPA not before: Tue 27 Feb 2024 18:29:33 +0000
ASPA not after: Wed 26 Feb 2025 18:29:33 +0000
Customer ASID: 15562
Providers: AS: 2914
AS: 8283
AS: 51088
AS: 206238
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a1:c7:75:2f:f8:b1:d2:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Feb 27 18:29:33 2024 GMT
Not After : Feb 26 18:29:33 2025 GMT
Subject: CN=Simple Root CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8b:04:10:5e:8c:6f:a4:61:8f:b5:b7:e5:6f:
45:f2:f4:fd:3a:71:a9:32:8a:49:0c:bf:72:d3:94:
e6:b3:8f:62:43:98:67:64:a5:e2:69:b9:b0:3c:a1:
27:f5:46:ad:41:4e:0a:95:f7:ff:d9:79:05:5e:b8:
e7:98:67:00:fe:36:f9:0b:fd:b6:26:53:35:59:16:
5c:15:f2:b0:25:71:96:05:ff:47:5b:6a:a5:cf:d2:
93:29:3d:3b:be:41:45:a7:cf:87:e8:d4:ee:30:f5:
ff:9e:e1:05:14:c9:60:59:55:7f:75:2e:71:e6:08:
c5:b8:69:a1:06:95:e2:2a:12:22:34:08:53:a8:57:
57:43:02:68:23:70:42:9e:0b:78:1b:8a:cb:86:ed:
33:1e:c0:07:f7:f1:25:b3:85:d6:93:9e:c7:a0:a4:
9c:8f:69:8a:02:81:cc:5a:b2:c9:c4:2f:41:46:2a:
95:5d:f6:7b:c4:06:ee:60:39:eb:1c:5b:86:a5:92:
a9:f8:10:81:e2:65:49:21:3f:da:e4:b9:d4:1f:f9:
29:e8:38:a1:e7:cd:f7:15:b5:99:d0:0b:bd:a4:aa:
94:05:80:fb:27:44:13:fc:b1:aa:bc:74:93:5f:4c:
d2:f7:11:ab:e7:3d:ef:83:c8:25:09:e7:28:00:e2:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Subject Key Identifier:
E6:6F:34:7F:06:30:B3:FD:C5:88:50:FB:26:24:23:02:A6:75:45:84
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15562
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/5m80fwYws_3FiFD7JiQjAqZ1RYQ.asa
Signature Algorithm: sha256WithRSAEncryption
6e:2b:29:51:bb:77:db:90:62:44:73:72:53:4e:28:90:82:17:
f8:29:14:94:6e:e0:a3:c4:a1:fb:63:3c:e2:4e:2f:ae:a4:b6:
87:e3:0f:c2:66:68:6a:cf:d3:e5:90:df:a2:0d:c1:65:d7:2c:
12:29:cc:8b:86:82:5e:8b:94:de:b1:96:43:54:3c:c1:a5:e2:
70:ca:2b:1a:04:b1:6d:4e:ac:94:d6:80:6a:9a:90:38:89:7c:
94:cb:5c:a4:4c:ed:89:40:c5:54:11:59:eb:b9:d2:3b:de:15:
3d:2e:10:99:0b:fb:cc:02:cf:da:02:ab:5a:b6:58:53:ec:73:
f0:88:75:22:e7:da:30:22:d1:bf:07:d1:b7:92:68:c8:36:13:
31:b6:05:17:80:02:f0:dc:d7:b5:46:eb:bf:c5:8a:bc:67:fa:
5c:2f:b8:56:21:25:10:84:22:f3:da:30:c0:b3:02:60:e2:b5:
06:a7:6f:41:9e:75:8e:a8:c3:7c:eb:21:dc:87:b6:37:21:fb:
48:22:f8:b8:f9:31:f4:2a:47:45:69:3d:b2:58:f3:ab:09:de:
b4:7d:1d:6b:65:71:76:e3:8d:32:55:7f:6e:b0:61:a6:32:dd:
db:60:2d:52:c9:91:02:e7:e6:64:62:2f:f7:ef:15:dd:e4:d9:
9c:16:ac:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:10:47 2024 by rpki-client on console-fra.rpki-client.org