Autonomous System Provider Authorization
$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/2/AS219418.asa
File: AS219418.asa (raw, json)
Hash identifier: 85zYMAfPgJ7347VD1GJbW6WPSxglg1aAJlGhje3Kuxs=
Subject key identifier: 94:9B:F9:ED:00:21:99:EB:2C:A4:D8:3E:61:2A:64:D8:F2:89:1E:09
Certificate issuer: /CN=185b1d68a461fa242686542750142382adf2c53b
Certificate serial: 1C9082EFDB743FD6DEFA1D5DFA5654C688F28518
Authority key identifier: 18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject info access: rsync://krill.byhill.de/repo/byhill-ca/2/AS219418.asa
Signing time: Sun 28 Jun 2026 15:24:14 +0000
ASPA not before: Sun 28 Jun 2026 15:19:14 +0000
ASPA not after: Sun 27 Jun 2027 15:24:14 +0000
Customer ASID: 219418
Providers: AS: 47272
AS: 197324
AS: 204464
AS: 213449
AS: 215147
Validation: OK
Signature path: rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.mft
rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 18:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:90:82:ef:db:74:3f:d6:de:fa:1d:5d:fa:56:54:c6:88:f2:85:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185b1d68a461fa242686542750142382adf2c53b
Validity
Not Before: Jun 28 15:19:14 2026 GMT
Not After : Jun 27 15:24:14 2027 GMT
Subject: CN=949BF9ED002199EB2CA4D83E612A64D8F2891E09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f8:76:e1:8f:fd:c3:dd:4c:54:83:36:c6:df:
7c:20:d9:33:52:e4:31:5f:a6:f6:fe:37:90:a4:7f:
dc:87:29:c4:ee:4b:7c:d4:3e:4f:4d:0a:67:db:c5:
eb:99:b0:f8:51:44:c3:e1:ce:f5:e6:b1:78:91:3f:
5e:18:11:90:bb:69:0e:3b:b3:42:56:2f:a0:40:91:
46:ad:00:ac:a0:a0:21:fe:fc:59:d1:d5:19:bc:22:
3a:6a:62:0a:b0:f4:44:44:4e:36:b2:b3:89:97:2a:
0d:31:37:54:d9:fd:40:ed:ae:e2:c4:e0:4d:52:33:
fe:40:b9:e5:35:28:70:84:b6:b1:48:d5:a2:f2:5c:
14:9b:a5:82:c7:64:99:6e:cc:f7:3a:bf:c8:75:8e:
9f:11:02:69:bf:55:3d:cd:79:ce:79:ca:f4:01:88:
8d:ad:04:bb:e1:48:05:d9:35:01:1b:bb:d5:a5:9a:
d2:50:8a:b6:ed:f5:1c:9c:ae:3f:42:c1:17:47:d1:
4f:a0:05:12:de:5c:09:a1:c0:f7:d3:75:8e:0c:bd:
89:37:78:13:f6:6b:7f:32:e1:fe:07:99:13:0a:4f:
fa:4d:c9:13:c5:59:f7:6b:01:a7:d3:0d:69:59:57:
99:3a:ea:25:4e:e9:e1:1c:e8:1f:bf:db:19:45:d4:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:F9:ED:00:21:99:EB:2C:A4:D8:3E:61:2A:64:D8:F2:89:1E:09
X509v3 Authority Key Identifier:
keyid:18:5B:1D:68:A4:61:FA:24:26:86:54:27:50:14:23:82:AD:F2:C5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.byhill.de/repo/byhill-ca/2/185B1D68A461FA242686542750142382ADF2C53B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GFsdaKRh-iQmhlQnUBQjgq3yxTs.cer
Subject Information Access:
Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/2/AS219418.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219418
Signature Algorithm: sha256WithRSAEncryption
67:8e:42:13:67:ce:7d:6a:a0:34:12:5d:89:7a:de:9c:a3:c6:
2f:7f:a6:06:1b:76:b7:9a:c8:3a:ba:7a:b0:d2:bf:e5:fa:b4:
3e:67:41:59:28:c4:be:5b:7a:e9:bf:cb:43:6a:1d:50:86:84:
99:ca:a7:50:4d:0c:4f:2e:4b:1a:f7:6e:81:32:b7:39:c2:a3:
a2:a7:3a:9a:71:f3:5d:4e:71:5c:c7:7e:79:de:13:5f:2e:c0:
ad:f3:1a:75:19:4b:2d:72:4e:40:1d:e5:50:63:eb:a4:87:a8:
8e:ab:5a:7a:71:d0:57:cb:27:26:ce:ef:c8:29:e4:d2:a0:1d:
58:94:2b:f0:63:89:e7:e5:cd:34:13:e4:4f:11:91:12:1e:0c:
9d:ed:b7:2f:98:bf:aa:92:0d:95:e4:48:55:f3:16:d7:b2:de:
a5:f8:14:d4:5b:ae:c7:5e:fa:6e:17:c5:49:c2:69:83:20:f1:
d8:7a:de:ad:4b:50:ca:e8:44:35:71:af:f2:86:47:2c:c1:94:
cd:9c:f5:b4:16:b6:4f:24:c5:49:34:f2:b9:59:c4:94:a9:90:
d8:cf:84:1b:62:94:b2:4e:36:10:01:2d:81:15:00:a5:c4:18:
53:a7:48:a7:a3:90:d4:56:8a:44:3f:57:10:85:b3:95:a2:59:
0c:6d:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:25 2026 by rpki-client