Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/AS211604/0/AS211604.asa
File: AS211604.asa (raw, json)
Hash identifier: +hBrhjY9oKQGnlYf+TUO2oBH0xE+VjaqjHqgFBez12U=
Subject key identifier: B2:09:DE:88:62:07:6F:16:56:00:07:81:B1:03:44:21:8D:80:F1:87
Certificate issuer: /CN=ef358042a5e1bf7df7c3c398722ed00286078d06
Certificate serial: 49BA692BE9DAF39417C95DF2FA5EB01DAEC2233A
Authority key identifier: EF:35:80:42:A5:E1:BF:7D:F7:C3:C3:98:72:2E:D0:02:86:07:8D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zWAQqXhv333w8OYci7QAoYHjQY.cer
Subject info access: rsync://rpki.co/repo/AS211604/0/AS211604.asa
Signing time: Fri 12 May 2023 11:59:05 +0000
ASPA not before: Fri 12 May 2023 11:54:05 +0000
ASPA not after: Fri 10 May 2024 11:59:05 +0000
Customer ASID: 211604
Provider set: AS: 6939
AS: 20473
AS: 50058
AS: 204508
AS: 212895
Validation: OK
Signature path: rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.crl
rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zWAQqXhv333w8OYci7QAoYHjQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 May 2023 06:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ba:69:2b:e9:da:f3:94:17:c9:5d:f2:fa:5e:b0:1d:ae:c2:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef358042a5e1bf7df7c3c398722ed00286078d06
Validity
Not Before: May 12 11:54:05 2023 GMT
Not After : May 10 11:59:05 2024 GMT
Subject: CN=B209DE8862076F1656000781B10344218D80F187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:68:12:c9:66:20:8e:2f:c2:e4:22:5d:24:
0e:10:9d:29:5e:fb:ce:c9:7b:a9:e6:9a:5e:5a:46:
f9:6b:b4:c0:08:96:9a:7a:68:8a:5c:c3:4c:e0:b1:
9a:7f:a4:9b:dd:4c:6b:7c:f3:3f:08:42:d5:b5:26:
bc:82:51:f9:ad:49:aa:06:04:bc:5b:7b:34:32:e2:
04:f7:72:8a:b5:a1:53:98:55:d3:07:d4:63:a5:b1:
94:e5:61:82:26:b3:a2:f7:11:12:c0:d7:81:91:ff:
7d:4d:40:03:cd:c5:e0:d8:8f:4d:07:ab:c2:98:27:
1c:b8:6c:c3:d5:0b:e7:41:41:c8:3e:7e:b5:21:3f:
c6:53:e3:f0:58:7e:fb:39:14:4f:53:81:19:d3:25:
b8:6a:53:fd:d0:d8:a1:b5:62:70:15:b9:73:f5:02:
fe:85:1a:e8:59:60:9a:d8:a2:ce:35:a8:9f:a4:f7:
10:84:08:97:62:83:6f:a4:e0:39:de:37:26:d7:1f:
06:cc:d9:c5:1e:24:da:12:e0:a8:4a:14:15:b4:b8:
90:05:8b:f1:d1:8f:95:49:79:66:2b:02:6c:9a:a0:
d9:e1:fc:36:96:a3:a2:74:bd:4d:27:fb:25:b7:95:
1b:52:95:54:0f:f2:08:26:18:da:22:09:5a:cc:8e:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:09:DE:88:62:07:6F:16:56:00:07:81:B1:03:44:21:8D:80:F1:87
X509v3 Authority Key Identifier:
keyid:EF:35:80:42:A5:E1:BF:7D:F7:C3:C3:98:72:2E:D0:02:86:07:8D:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS211604/0/EF358042A5E1BF7DF7C3C398722ED00286078D06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zWAQqXhv333w8OYci7QAoYHjQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/AS211604/0/AS211604.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211604
Signature Algorithm: sha256WithRSAEncryption
49:54:ca:92:92:5c:94:94:44:e4:93:09:da:0c:a2:52:a8:d0:
b6:ee:cf:08:21:ca:2c:54:26:2e:5e:f2:c0:3d:2e:41:91:c2:
53:a2:80:9d:1e:14:36:70:54:a4:15:66:b3:26:7d:fa:76:6e:
d8:6a:61:ab:c5:e7:38:77:11:94:03:60:9c:a8:e0:99:85:37:
34:11:a6:d7:a5:45:43:05:d4:ad:81:02:9e:a9:72:a5:1e:75:
c0:59:c1:86:99:05:34:7b:7b:12:18:ed:be:0d:b2:e7:53:57:
73:8b:3e:02:cd:7f:42:2d:42:f7:66:a6:b4:c7:10:73:9f:e1:
d0:34:d6:0a:f1:27:cf:e1:76:cc:a0:7e:7c:46:8b:36:bb:2c:
6d:e7:39:90:17:b5:e2:b0:40:1a:5e:c8:1d:ec:3d:20:c7:77:
ed:ed:aa:11:e5:58:a7:22:c2:a8:5e:0b:ad:bf:ee:4f:90:1a:
dc:29:f5:3a:13:63:63:0a:07:c0:93:f8:9a:ca:d4:18:23:e0:
92:43:68:f6:28:2a:2c:0b:3f:76:e2:e8:c9:61:f8:1f:d9:ed:
3f:fc:79:b0:07:19:a7:ca:28:61:9f:43:68:9c:35:83:b9:c4:
ef:3b:df:36:fd:64:a9:4a:3a:be:76:2c:0c:a3:26:60:a4:3a:
9f:c9:c0:2a
-----BEGIN CERTIFICATE-----
MIIEjzCCA3egAwIBAgIUSbppK+na85QXyV3y+l6wHa7CIzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWYzNTgwNDJhNWUxYmY3ZGY3YzNjMzk4NzIyZWQwMDI4
NjA3OGQwNjAeFw0yMzA1MTIxMTU0MDVaFw0yNDA1MTAxMTU5MDVaMDMxMTAvBgNV
BAMTKEIyMDlERTg4NjIwNzZGMTY1NjAwMDc4MUIxMDM0NDIxOEQ4MEYxODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+GgSyWYgji/C5CJdJA4QnSle
+87Je6nmml5aRvlrtMAIlpp6aIpcw0zgsZp/pJvdTGt88z8IQtW1JryCUfmtSaoG
BLxbezQy4gT3coq1oVOYVdMH1GOlsZTlYYIms6L3ERLA14GR/31NQAPNxeDYj00H
q8KYJxy4bMPVC+dBQcg+frUhP8ZT4/BYfvs5FE9TgRnTJbhqU/3Q2KG1YnAVuXP1
Av6FGuhZYJrYos41qJ+k9xCECJdig2+k4DneNybXHwbM2cUeJNoS4KhKFBW0uJAF
i/HRj5VJeWYrAmyaoNnh/DaWo6J0vU0n+yW3lRtSlVQP8ggmGNoiCVrMjnt/AgMB
AAGjggGZMIIBlTAdBgNVHQ4EFgQUsgneiGIHbxZWAAeBsQNEIY2A8YcwHwYDVR0j
BBgwFoAU7zWAQqXhv333w8OYci7QAoYHjQYwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcnBraS5jby9yZXBvL0FTMjExNjA0LzAvRUYz
NTgwNDJBNUUxQkY3REY3QzNDMzk4NzIyRUQwMDI4NjA3OEQwNi5jcmwwZAYIKwYB
BQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxULzd6V0FRcVhodjMzM3c4T1ljaTdRQW9ZSGpRWS5jZXIw
SAYIKwYBBQUHAQsEPDA6MDgGCCsGAQUFBzALhixyc3luYzovL3Jwa2kuY28vcmVw
by9BUzIxMTYwNC8wL0FTMjExNjA0LmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM6lDANBgkqhkiG9w0BAQsFAAOC
AQEASVTKkpJclJRE5JMJ2gyiUqjQtu7PCCHKLFQmLl7ywD0uQZHCU6KAnR4UNnBU
pBVmsyZ9+nZu2Gphq8XnOHcRlANgnKjgmYU3NBGm16VFQwXUrYECnqlypR51wFnB
hpkFNHt7Ehjtvg2y51NXc4s+As1/Qi1C92amtMcQc5/h0DTWCvEnz+F2zKB+fEaL
Nrssbec5kBe14rBAGl7IHew9IMd37e2qEeVYpyLCqF4Lrb/uT5Aa3Cn1OhNjYwoH
wJP4msrUGCPgkkNo9igqLAs/duLoyWH4H9ntP/x5sAcZp8ooYZ9DaJw1g7nE7zvf
Nv1kqUo6vnYsDKMmYKQ6n8nAKg==
-----END CERTIFICATE-----
Generated at Fri May 12 12:31:30 2023 by rpki-client on console-ams.rpki-client.org