Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/AS202939/0/AS202939.asa
File: AS202939.asa (raw, json)
Hash identifier: I0UYMaAy+a9DZhRqvCRFI8goFAoHIAlv9eVa8eqVoqE=
Subject key identifier: 94:57:B6:B1:06:A3:AD:F8:6E:29:55:20:CD:98:5B:E0:B0:1C:4F:BC
Certificate issuer: /CN=d88dfdd9debf6fdbddf9409e4d09c086cc0486fc
Certificate serial: 317C68FBEAFCAAD2DE02D7B550107E0EC0B61021
Authority key identifier: D8:8D:FD:D9:DE:BF:6F:DB:DD:F9:40:9E:4D:09:C0:86:CC:04:86:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2I392d6_b9vd-UCeTQnAhswEhvw.cer
Subject info access: rsync://rpki.co/repo/AS202939/0/AS202939.asa
Signing time: Sun 14 May 2023 01:29:39 +0000
ASPA not before: Sun 14 May 2023 01:24:39 +0000
ASPA not after: Sun 12 May 2024 01:29:39 +0000
Customer ASID: 202939
Provider set: AS: 6939
AS: 20473
AS: 34927
Validation: OK
Signature path: rsync://rpki.co/repo/AS202939/0/D88DFDD9DEBF6FDBDDF9409E4D09C086CC0486FC.crl
rsync://rpki.co/repo/AS202939/0/D88DFDD9DEBF6FDBDDF9409E4D09C086CC0486FC.mft
rsync://rpki.ripe.net/repository/DEFAULT/2I392d6_b9vd-UCeTQnAhswEhvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 May 2023 23:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:7c:68:fb:ea:fc:aa:d2:de:02:d7:b5:50:10:7e:0e:c0:b6:10:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d88dfdd9debf6fdbddf9409e4d09c086cc0486fc
Validity
Not Before: May 14 01:24:39 2023 GMT
Not After : May 12 01:29:39 2024 GMT
Subject: CN=9457B6B106A3ADF86E295520CD985BE0B01C4FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:df:c0:e1:0f:f6:a5:5c:f1:45:43:c0:75:
ca:09:21:48:a0:e8:55:26:1d:8b:53:c2:38:f4:97:
0c:a9:ac:41:7e:4b:55:2d:3e:8a:24:c1:1b:f2:ab:
15:de:ce:45:e9:2f:b9:39:5e:0a:bc:be:0d:4b:61:
c3:26:c7:a7:55:bb:8a:55:e3:fc:aa:65:7a:75:4c:
70:3f:e7:a3:04:63:cc:81:0c:94:c4:37:5e:b5:c9:
b3:e4:19:2f:e6:50:a3:af:25:e9:7c:59:b5:b0:01:
61:19:f1:7e:c7:3e:fd:72:ac:43:9a:dc:6e:11:2b:
fc:23:7f:5f:87:f0:7b:0f:42:cf:13:37:e2:aa:e9:
ab:b6:0e:16:de:42:5b:14:87:a6:7f:da:73:62:33:
ce:e7:f9:0c:c4:3b:15:71:33:e5:06:bf:7b:6e:01:
1d:0d:cd:d5:23:82:f4:6a:46:6a:c0:3e:dd:e7:5b:
81:7c:0d:c7:03:bc:35:dd:8b:f0:df:ea:ce:50:a8:
e0:d0:a6:77:4d:c4:da:0e:9e:54:a3:13:19:45:c1:
0e:f2:64:6a:ac:fc:74:d7:1d:a3:05:ff:2c:dd:b3:
c2:aa:1f:46:34:27:b9:8d:db:ac:cf:be:0d:ea:06:
fe:f4:55:d3:82:75:85:8c:21:9d:11:33:2f:bd:2b:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:B6:B1:06:A3:AD:F8:6E:29:55:20:CD:98:5B:E0:B0:1C:4F:BC
X509v3 Authority Key Identifier:
keyid:D8:8D:FD:D9:DE:BF:6F:DB:DD:F9:40:9E:4D:09:C0:86:CC:04:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS202939/0/D88DFDD9DEBF6FDBDDF9409E4D09C086CC0486FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2I392d6_b9vd-UCeTQnAhswEhvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS202939/0/AS202939.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202939
Signature Algorithm: sha256WithRSAEncryption
8d:a9:12:e6:11:50:ff:71:96:9a:e9:55:f7:7f:23:9f:91:ac:
71:b2:29:ed:40:7b:3a:25:14:3b:5d:26:4a:c0:b5:80:96:7e:
a9:99:5d:1b:7c:d6:56:69:14:4e:29:a5:be:76:3b:db:15:d3:
33:1c:11:17:c1:15:02:ea:74:a7:12:bd:c4:27:0c:53:b4:48:
77:3a:29:44:c5:43:b7:b6:25:39:f9:ea:cd:aa:bb:fd:6c:9a:
91:ba:46:3b:50:3a:8b:f1:9a:9a:0e:7f:68:45:f0:bc:6c:f7:
07:e5:24:e8:33:92:bb:b7:66:06:4e:67:62:d1:81:96:67:d6:
1b:c1:c9:37:06:9d:b4:73:98:7f:ad:39:e4:86:a3:4d:a4:65:
8c:0c:fb:2a:aa:8d:79:8e:66:66:0e:c7:be:74:6d:62:86:c2:
68:f4:ba:8f:b3:da:e0:63:a4:c2:cc:c8:84:82:6e:e8:93:66:
2d:db:5d:1b:4e:e2:5e:1e:48:da:3e:fc:2d:ba:18:39:d3:c9:
59:e6:81:e6:29:26:da:a7:86:7b:fd:87:30:b5:8b:84:36:32:
d2:9a:78:83:76:1b:a4:26:63:de:a4:1f:95:a8:b9:27:37:05:
16:00:96:27:63:d8:4e:cc:c7:2b:fe:3a:6e:3e:ba:bd:6b:56:
21:56:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 14 02:03:04 2023 by rpki-client on console-fra.rpki-client.org