Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/AS210631/0/AS211860.asa
File: AS211860.asa (raw, json)
Hash identifier: lfWwvWfcCRfDD+0YNYeGhYwsrZYIC8dle88dXGOIOFk=
Subject key identifier: 65:35:EB:62:0D:3C:27:23:5D:FA:AF:7D:B6:5E:D1:B4:19:D3:E7:4C
Certificate issuer: /CN=75ebb209e9943c15ef8158450055a1a0715fe171
Certificate serial: 1E0BA1A44C243B6A3B5F6FBF6E6C080E35E9EF56
Authority key identifier: 75:EB:B2:09:E9:94:3C:15:EF:81:58:45:00:55:A1:A0:71:5F:E1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deuyCemUPBXvgVhFAFWhoHFf4XE.cer
Subject info access: rsync://rpki.co/repo/AS210631/0/AS211860.asa
Signing time: Fri 12 May 2023 16:11:44 +0000
ASPA not before: Fri 12 May 2023 16:06:44 +0000
ASPA not after: Fri 10 May 2024 16:11:44 +0000
Customer ASID: 211860
Provider set: AS: 207656
AS: 210631
Validation: OK
Signature path: rsync://rpki.co/repo/AS210631/0/75EBB209E9943C15EF8158450055A1A0715FE171.crl
rsync://rpki.co/repo/AS210631/0/75EBB209E9943C15EF8158450055A1A0715FE171.mft
rsync://rpki.ripe.net/repository/DEFAULT/deuyCemUPBXvgVhFAFWhoHFf4XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 May 2023 14:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0b:a1:a4:4c:24:3b:6a:3b:5f:6f:bf:6e:6c:08:0e:35:e9:ef:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ebb209e9943c15ef8158450055a1a0715fe171
Validity
Not Before: May 12 16:06:44 2023 GMT
Not After : May 10 16:11:44 2024 GMT
Subject: CN=6535EB620D3C27235DFAAF7DB65ED1B419D3E74C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:02:7d:9d:da:a2:e1:cf:d7:0e:04:37:4f:
68:88:71:21:ff:5f:43:ea:61:8e:38:39:83:6a:46:
39:0e:68:36:3e:9b:9b:08:64:fb:28:af:05:d7:9b:
07:14:49:68:5d:74:e2:53:af:3c:7f:5b:23:18:dd:
12:cc:1d:0f:d1:f0:ed:4c:92:00:f6:aa:70:74:46:
dd:44:cc:67:22:ab:e8:dc:2f:74:df:cf:2b:dd:82:
37:8e:c0:f5:5c:73:e5:03:82:e3:5c:8b:7e:26:ca:
93:eb:e4:e1:c1:a3:a7:4a:94:59:95:ba:a6:b3:f3:
0c:6c:e0:ea:3e:10:16:2e:8f:e6:57:c1:8f:36:b9:
95:e4:27:55:3c:d0:ed:1a:52:29:3f:4f:e3:a9:87:
40:9d:85:c0:98:18:87:9e:33:9b:4f:a3:75:ae:94:
31:21:8b:a6:e5:47:61:aa:6a:23:df:f3:a2:ce:e2:
d8:c6:9a:87:1b:09:56:66:f2:fa:fb:df:8a:df:45:
05:b6:37:b9:b3:f3:71:88:9f:81:c9:d9:21:7b:45:
97:f4:ca:f0:b4:2e:42:03:cd:27:8c:60:42:5e:b9:
de:1e:63:99:9f:8c:71:b7:04:15:4c:ce:8b:65:72:
b1:e8:2b:08:77:62:6a:91:0e:c5:17:a6:64:f7:7d:
ad:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:35:EB:62:0D:3C:27:23:5D:FA:AF:7D:B6:5E:D1:B4:19:D3:E7:4C
X509v3 Authority Key Identifier:
keyid:75:EB:B2:09:E9:94:3C:15:EF:81:58:45:00:55:A1:A0:71:5F:E1:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS210631/0/75EBB209E9943C15EF8158450055A1A0715FE171.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deuyCemUPBXvgVhFAFWhoHFf4XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS210631/0/AS211860.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211860
Signature Algorithm: sha256WithRSAEncryption
8d:38:f6:e0:4b:88:dd:22:39:7f:b2:fd:14:b3:54:0b:86:c8:
29:e1:29:f1:2f:35:e3:90:c1:34:a1:45:41:dd:dd:72:7b:cb:
f2:9a:05:f1:1d:3c:89:a0:20:64:d0:6c:58:d5:7f:e2:3f:33:
a2:5d:72:a8:6b:6b:55:54:b9:b2:1b:b8:37:6b:a4:22:1a:d8:
7f:97:e1:57:86:37:58:ab:89:35:43:f8:6c:ac:0c:a7:a6:f4:
4c:68:1f:db:f6:ed:58:66:5d:40:a5:98:78:55:4d:a1:91:ba:
28:ea:e8:e5:62:34:98:b6:fa:3f:df:a9:39:00:4a:43:aa:50:
f3:04:dd:50:a0:10:30:50:32:1c:4a:c3:69:9c:ef:c5:40:4d:
a1:fb:48:8d:ca:b3:d9:70:d0:c2:5b:bb:85:e7:23:49:ff:de:
3e:dc:2e:19:b9:03:89:f4:04:36:0c:1e:56:ec:1a:e6:f6:58:
f4:09:92:a6:6e:a9:9f:a6:43:23:35:b5:6e:a9:46:d5:b7:e1:
8f:7c:ea:ff:89:0e:28:32:4e:66:ed:0f:9d:67:9b:9c:62:67:
f3:0b:ae:36:ae:bb:a9:51:14:1c:00:88:f1:e6:ec:10:1d:2d:
43:76:67:ba:c8:ee:85:a8:d9:2a:e5:33:95:c4:68:fb:3c:2c:
67:77:39:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 12 16:26:27 2023 by rpki-client on console-fra.rpki-client.org