Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/AS199762/0/AS199376.asa
File: AS199376.asa (raw, json)
Hash identifier: xsaUbhlY8t8/U14i1D2Hc4HLHTkuG0sn9sFfE3rz48o=
Subject key identifier: C6:A5:06:2C:AA:F5:DD:69:6E:B3:6C:FC:16:7F:FB:55:04:F3:2A:32
Certificate issuer: /CN=c22623a353617d3480e3b1c17f70197ef91d0344
Certificate serial: 4DD1853E83D9231138C18419F5A819729AC9111E
Authority key identifier: C2:26:23:A3:53:61:7D:34:80:E3:B1:C1:7F:70:19:7E:F9:1D:03:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiYjo1NhfTSA47HBf3AZfvkdA0Q.cer
Subject info access: rsync://rpki.co/repo/AS199762/0/AS199376.asa
Signing time: Sun 16 Apr 2023 23:12:13 +0000
ASPA not before: Sun 16 Apr 2023 23:07:13 +0000
ASPA not after: Sun 14 Apr 2024 23:12:13 +0000
Customer AS: 199376
Provider Set: AS: 41051
AS: 199762
Validation: OK
Signature path: rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.crl
rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiYjo1NhfTSA47HBf3AZfvkdA0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Apr 2023 22:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d1:85:3e:83:d9:23:11:38:c1:84:19:f5:a8:19:72:9a:c9:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22623a353617d3480e3b1c17f70197ef91d0344
Validity
Not Before: Apr 16 23:07:13 2023 GMT
Not After : Apr 14 23:12:13 2024 GMT
Subject: CN=C6A5062CAAF5DD696EB36CFC167FFB5504F32A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:b1:91:51:5b:ee:f0:15:19:f8:0d:63:dc:
a0:2a:31:46:ef:7e:35:da:41:db:37:ea:fc:cd:e1:
92:e1:45:5d:76:f6:8f:76:d2:73:e6:1b:ea:6a:71:
46:80:c2:d7:12:0e:61:ba:ad:a1:6f:72:c9:9a:34:
70:90:61:4b:65:ed:8f:e3:5f:3b:a2:d7:cd:d7:da:
40:73:cd:2f:f5:ef:50:68:83:dc:43:b3:ee:89:ed:
da:aa:dc:fe:df:a5:07:cb:e3:2b:42:a3:e4:ba:fb:
51:ec:c3:0a:6a:cd:d2:04:af:cb:b9:48:bf:bc:23:
1a:05:f4:80:82:b5:03:e8:f1:1e:59:f3:ab:f3:48:
32:59:d5:ee:c7:57:82:a2:a0:60:32:56:c0:6b:b0:
aa:4e:ad:de:9a:fa:a4:8f:ab:ab:71:a1:9f:21:e1:
68:cd:da:4e:b0:31:af:b3:c4:ac:cc:02:3c:95:4c:
6f:d7:24:c0:80:2d:64:a4:24:13:d1:ae:6e:ed:7e:
a1:58:8c:1a:02:a9:e5:f5:65:eb:a1:81:4c:73:1a:
1f:4e:d3:a7:5f:ba:e4:cf:80:0a:46:5d:1a:ea:d5:
a3:33:4f:18:39:09:0c:fe:aa:52:31:11:98:59:43:
b1:1a:a0:05:97:91:e0:10:48:84:06:fc:f5:72:21:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A5:06:2C:AA:F5:DD:69:6E:B3:6C:FC:16:7F:FB:55:04:F3:2A:32
X509v3 Authority Key Identifier:
keyid:C2:26:23:A3:53:61:7D:34:80:E3:B1:C1:7F:70:19:7E:F9:1D:03:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiYjo1NhfTSA47HBf3AZfvkdA0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS199762/0/AS199376.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199376
Signature Algorithm: sha256WithRSAEncryption
b7:40:1e:af:8a:17:28:a2:21:26:cd:6e:63:42:d1:97:c6:64:
2c:ab:8b:e7:21:9f:08:c4:e3:e4:0f:95:8a:3d:77:fe:3d:5c:
1a:de:87:1b:e4:af:be:18:2d:27:e7:b5:aa:26:fd:50:a2:b4:
b2:81:ac:92:4a:c9:7e:6f:b3:d5:73:52:9a:41:a4:39:52:8d:
6f:1b:ee:5a:bd:46:54:4b:8a:88:87:33:21:64:a7:07:be:df:
8d:fc:c3:31:36:cd:59:33:9b:e2:77:ed:1c:7e:15:18:bc:83:
24:40:ea:74:d9:f7:74:3f:c7:3d:c4:89:43:da:3a:d2:ef:e9:
05:78:49:3f:94:03:54:3a:d0:08:a9:3f:6d:36:71:c6:67:3e:
5a:11:da:c7:b0:a7:c5:1e:84:93:dd:0e:ca:2b:0d:01:a1:22:
0b:89:cc:b1:79:0c:4d:37:a8:e6:44:fc:f4:86:94:57:de:0f:
dd:35:97:24:d4:1c:82:a7:bb:17:a3:2f:bb:72:85:08:a2:78:
e6:c1:ce:ef:bf:8c:8b:28:c1:31:2e:d4:8e:e3:75:b5:89:c4:
17:ca:15:3d:3d:72:a2:ec:4d:2b:95:fb:fd:f3:60:c7:3a:a5:
0e:9b:57:d7:c7:91:ee:0f:58:73:cf:6d:9e:ac:1f:20:2b:50:
2e:81:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 16 23:28:55 2023 by rpki-client on console-fra.rpki-client.org