
Autonomous System Provider Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/FjSf5hX1GmGhKMu9AG7WVIl8m1M.asa
File: FjSf5hX1GmGhKMu9AG7WVIl8m1M.asa (raw, json)
Hash identifier: wsCvp2J+eZeizU8nrXHkLPhcjyqZ5euDlwLssA/nlwg=
Subject key identifier: 16:34:9F:E6:15:F5:1A:61:A1:28:CB:BD:00:6E:D6:54:89:7C:9B:53
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: A1C7752FF8B1D2E01D
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/FjSf5hX1GmGhKMu9AG7WVIl8m1M.asa
Signing time: Fri 16 Dec 2022 12:30:02 +0000
ASPA not before: Fri 16 Dec 2022 12:29:57 +0000
ASPA not after: Sat 16 Dec 2023 12:29:57 +0000
Customer AS: 15562
Provider Set: AS: 2914
AS: 8283
AS: 51088
AS: 206238
Validation: OK
Signature path: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Mar 2023 17:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a1:c7:75:2f:f8:b1:d2:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Dec 16 12:29:57 2022 GMT
Not After : Dec 16 12:29:57 2023 GMT
Subject: CN=1671193591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:c7:74:d9:08:85:b6:0c:8a:cf:71:35:fc:
2f:45:87:77:9e:ab:e5:51:0b:b3:7b:17:ee:5f:f1:
c2:2c:62:0e:0c:d7:db:4e:a5:9a:0d:e5:1c:44:4c:
92:c3:ef:1c:04:fd:e0:bb:52:f0:3a:30:52:39:d8:
c3:3c:5b:bd:71:e0:b5:fc:40:c7:35:72:e1:2c:6f:
82:b8:e1:ff:39:e3:c5:17:1c:33:74:16:f8:c8:d2:
82:16:fa:0a:77:e1:7d:24:fe:7b:e7:90:83:93:c4:
2e:b1:b2:6d:5a:14:4d:2f:69:4a:1d:07:af:3c:04:
29:4a:a4:e4:48:5d:52:74:5c:b3:c8:18:84:24:4d:
b5:09:f3:87:06:e0:f2:b0:b0:23:db:57:3c:f6:02:
6c:b7:e9:4d:9f:63:fd:8c:1c:1a:32:a6:22:6d:3d:
aa:6d:7f:42:86:1d:ec:ba:c8:d9:93:63:3f:7a:d8:
88:23:1c:91:28:15:8b:65:3f:15:f3:92:85:82:17:
5f:fb:e9:83:73:4f:7d:64:ff:89:42:75:67:ab:c4:
b3:66:09:1e:92:7e:69:be:c3:d6:7d:fe:5e:07:96:
6f:51:ef:12:9f:75:f0:7c:34:86:e1:68:10:3f:b4:
34:09:7d:65:e1:7f:a0:d1:fc:7b:74:45:fb:96:66:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature
X509v3 Subject Key Identifier:
16:34:9F:E6:15:F5:1A:61:A1:28:CB:BD:00:6E:D6:54:89:7C:9B:53
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15562
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/FjSf5hX1GmGhKMu9AG7WVIl8m1M.asa
Signature Algorithm: sha256WithRSAEncryption
77:4e:54:d3:36:1a:b4:1c:4c:14:1e:6d:d8:b6:88:a8:02:f7:
65:e5:18:5f:40:95:97:17:e1:90:90:04:be:e0:7d:02:df:18:
49:ba:70:84:fb:df:f4:28:e4:f3:ec:67:a9:25:75:0a:cf:ac:
44:46:79:39:ed:48:47:15:2d:c7:85:3e:28:66:e7:86:80:01:
b9:90:d1:84:37:69:93:1d:c2:fb:1b:b0:b1:4c:58:18:5b:36:
21:b0:1f:a1:dd:c7:25:fa:de:af:78:0e:27:7c:23:11:34:1f:
03:a3:24:67:e0:d3:6b:8d:c4:ef:43:b1:e1:92:44:63:73:73:
d8:99:98:b0:c5:22:7d:b0:3f:57:26:4c:aa:a7:b5:fc:63:36:
a7:3d:4f:7c:c5:59:94:ff:9b:50:66:5c:ac:a5:c2:90:88:c7:
11:db:61:86:8e:06:74:22:c6:d2:49:f0:76:65:ba:56:ab:dd:
fc:05:42:e5:43:b8:cc:50:e9:68:35:8d:6d:e4:e9:40:66:d3:
a6:30:9f:20:f7:37:37:24:fb:87:08:70:64:67:6d:06:03:28:
11:ff:9f:70:32:0c:65:ab:50:d9:cb:4a:01:50:cd:55:7f:12:
ef:2b:3f:60:57:28:77:8b:50:23:30:d3:fb:41:ed:fe:af:8f:
ef:4b:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 15 11:32:22 2023 by rpki-client on console-ams.rpki-client.org