Autonomous System Provider Authorization
$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa
File: AS21957.asa (raw, json)
Hash identifier: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=
Subject key identifier: 2E:92:84:25:BB:E8:B5:1B:92:41:4D:3D:34:25:EE:9A:AB:35:45:7F
Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Certificate serial: 5C3130C34A4183F9730E200F901A8F293F8114D9
Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa
Signing time: Sat 28 Sep 2024 19:50:53 +0000
ASPA not before: Sat 28 Sep 2024 19:45:53 +0000
ASPA not after: Sat 27 Sep 2025 19:50:53 +0000
Customer ASID: 21957
Providers: AS: 970
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:31:30:c3:4a:41:83:f9:73:0e:20:0f:90:1a:8f:29:3f:81:14:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351
Validity
Not Before: Sep 28 19:45:53 2024 GMT
Not After : Sep 27 19:50:53 2025 GMT
Subject: CN=2E928425BBE8B51B92414D3D3425EE9AAB35457F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:8f:4b:bb:a8:cc:50:b8:d8:35:da:7a:b1:
b6:c9:98:66:06:22:32:9f:ee:2a:37:c4:85:0f:f6:
fd:fb:9a:43:16:69:f9:9d:82:a1:f9:a7:d8:36:f6:
8d:db:cd:6f:49:ac:4e:59:0d:12:ca:e6:07:70:cd:
1b:ab:b1:f1:8e:8d:23:f6:6a:ab:bf:c4:37:a0:01:
7c:e1:3b:a8:23:e1:d8:f6:f8:ea:8b:be:e4:60:6c:
bf:4d:a7:14:41:ae:8b:5f:d1:6a:60:b7:cc:95:68:
a7:7c:42:23:6d:1e:e5:7e:4a:d4:a2:a7:ed:62:85:
7b:4c:de:97:6b:b4:f9:ac:64:a8:2b:6a:6e:b0:4e:
53:fe:c7:78:1b:70:53:3e:f3:e4:c8:47:9d:ec:f1:
5a:72:d7:b8:04:bb:c8:75:3e:ea:65:d5:8f:8f:9e:
de:a1:c7:26:84:42:77:ec:92:f4:f5:d5:87:e1:ea:
f6:23:b5:fa:fc:2b:61:23:31:07:3b:46:15:bf:46:
f7:99:6b:f7:90:b2:14:7e:8c:75:f5:48:41:62:56:
ce:72:94:4d:6f:69:75:d2:e1:09:78:0d:5f:7b:c8:
c4:c7:45:1a:6a:70:aa:38:d7:61:07:41:3f:7d:3c:
90:a1:83:ef:7d:a1:20:b3:82:b8:f6:0c:34:83:cd:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:92:84:25:BB:E8:B5:1B:92:41:4D:3D:34:25:EE:9A:AB:35:45:7F
X509v3 Authority Key Identifier:
keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer
Subject Information Access:
Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/AS21957.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21957
Signature Algorithm: sha256WithRSAEncryption
4a:61:8c:41:41:9c:b4:a4:eb:fd:2d:8d:a7:4a:61:58:ab:de:
62:7e:9b:2f:ff:02:0c:df:34:5f:d7:66:9b:97:31:ab:66:99:
ef:20:2a:2c:4b:68:36:1f:fd:92:16:0f:ec:24:2d:99:7f:80:
cc:28:80:e6:b0:c2:1e:7a:39:a8:bb:82:85:47:de:e4:e2:e7:
37:72:b3:7a:69:7e:ab:96:78:27:60:98:e4:2b:5e:c7:05:3f:
11:59:d2:76:98:51:04:6e:8b:7b:fe:98:ab:42:93:70:5b:57:
3e:50:dc:86:24:4c:b6:2c:c4:55:cd:9c:d8:dd:bb:b8:db:b3:
e7:1d:8e:18:d7:2d:6a:a5:3f:cc:48:8c:be:19:81:ba:01:41:
75:79:47:7c:f2:a9:62:b7:20:d6:9b:48:d9:54:e8:b6:08:b5:
79:1c:21:52:33:ad:a4:15:f5:b1:54:75:33:f9:83:f1:1a:cf:
c6:2d:3b:0d:77:b8:c3:4a:08:14:72:6c:53:44:0b:e3:15:e0:
bf:d4:21:a7:32:66:52:10:95:37:8b:df:ad:f5:16:e5:d4:87:
78:d8:44:1f:47:3e:f9:8a:76:1b:30:d8:7b:3a:b0:9a:e2:6a:
9e:d1:89:b3:70:d2:56:94:07:62:11:2c:fd:f7:3e:69:02:51:
44:2d:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 20:56:09 2024 by rpki-client on console-fra.rpki-client.org