Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/Matt/0/AS64457.asa
File: AS64457.asa (raw, json)
Hash identifier: NBzualMVX12rVB2txEEddtZ41DQyn7KWydAdLdLbJo8=
Subject key identifier: FA:E2:0E:C7:FD:45:1E:E2:3A:02:37:65:7E:A6:17:8A:75:0A:85:64
Certificate issuer: /CN=312968d65f7c01f38d23ed8b20f58313b5f2862a
Certificate serial: 1DE80353AC639D7960D43FBF0B10A2BA94EC2A71
Authority key identifier: 31:29:68:D6:5F:7C:01:F3:8D:23:ED:8B:20:F5:83:13:B5:F2:86:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer
Subject info access: rsync://rpki.co/repo/Matt/0/AS64457.asa
Signing time: Sun 16 Apr 2023 23:09:39 +0000
ASPA not before: Sun 16 Apr 2023 23:04:39 +0000
ASPA not after: Sun 14 Apr 2024 23:09:39 +0000
Customer AS: 64457
Provider Set: AS: 34927
AS: 50058
Validation: OK
Signature path: rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.crl
rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Apr 2023 22:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e8:03:53:ac:63:9d:79:60:d4:3f:bf:0b:10:a2:ba:94:ec:2a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312968d65f7c01f38d23ed8b20f58313b5f2862a
Validity
Not Before: Apr 16 23:04:39 2023 GMT
Not After : Apr 14 23:09:39 2024 GMT
Subject: CN=FAE20EC7FD451EE23A0237657EA6178A750A8564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:17:6d:75:22:0a:ef:05:ad:72:a0:37:2c:53:
6c:8f:1a:8f:c1:0e:48:22:63:79:80:ce:d4:a1:f5:
03:54:78:fc:70:a1:a0:1f:8a:ca:cf:b4:6d:ad:e0:
62:56:97:35:54:65:3f:98:47:3f:9e:9b:5f:63:4d:
58:a6:cf:76:c1:a5:69:5c:fb:5d:5d:61:34:d2:03:
fe:77:26:24:99:a2:c1:31:94:17:24:60:1b:1b:69:
ae:88:5b:f2:d1:c0:dc:12:87:11:6f:69:1d:a5:22:
c9:9c:ce:84:62:7c:0b:32:aa:38:74:de:03:17:f1:
1b:76:54:b2:3e:a8:eb:be:e9:ef:9d:37:92:36:fa:
c3:ff:d7:bc:7b:4f:14:a4:11:43:1b:3e:28:75:53:
55:92:03:3b:d4:bf:23:a1:41:29:62:f0:33:3a:68:
d7:ae:94:9d:12:55:e1:1a:98:e1:41:b8:b6:0e:42:
3c:c4:05:c1:07:b3:81:03:41:53:c5:0d:96:ee:a7:
e1:fb:14:e1:67:1e:c7:fc:0e:7a:c3:1c:3b:11:51:
a0:11:92:8d:c0:30:81:b0:c5:09:1f:c5:2c:1e:1d:
ef:fa:ee:5b:11:12:3f:4f:87:3f:71:f6:15:73:f0:
8c:f3:17:77:52:8e:77:b9:b7:76:4b:5c:b4:10:19:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E2:0E:C7:FD:45:1E:E2:3A:02:37:65:7E:A6:17:8A:75:0A:85:64
X509v3 Authority Key Identifier:
keyid:31:29:68:D6:5F:7C:01:F3:8D:23:ED:8B:20:F5:83:13:B5:F2:86:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Matt/0/312968D65F7C01F38D23ED8B20F58313B5F2862A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSlo1l98AfONI-2LIPWDE7Xyhio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Matt/0/AS64457.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64457
Signature Algorithm: sha256WithRSAEncryption
65:58:28:af:5d:48:90:aa:a6:00:f4:38:c1:d2:54:6c:f5:cb:
b6:6a:a3:06:13:5a:f0:0b:99:18:55:c8:e5:d7:34:fc:76:c1:
52:40:ef:39:57:4c:59:94:09:d8:0e:dd:6a:cb:77:37:fa:26:
b0:6d:88:27:ea:27:40:70:65:05:8f:f8:ad:e1:df:b0:61:4d:
52:29:4e:77:0b:2b:ed:d4:50:53:01:b7:74:53:65:1c:93:8c:
11:50:94:30:0e:36:7a:ca:8d:f5:b1:4e:d8:23:7b:59:bb:8e:
e3:71:8d:1a:3f:22:3a:a7:40:38:9a:c3:da:10:1d:a9:59:11:
2f:47:28:54:7d:a2:a7:fc:c4:6d:28:a1:03:4e:a3:c2:6c:44:
7f:6a:6d:c0:4c:3e:90:35:4d:9b:9c:1d:90:e5:3a:10:d1:46:
22:53:89:6d:af:1d:c9:1c:26:0a:cc:33:c2:0f:93:73:f7:2f:
f7:b0:f6:00:38:69:ca:4d:84:32:04:27:d6:bc:00:75:65:7e:
ff:9b:78:28:d8:15:e3:72:7b:1b:7d:a7:d6:17:5a:c6:fa:1b:
c6:c4:2f:20:3f:d7:35:0d:59:3e:fe:a3:b2:47:00:ce:ca:fa:
07:7d:2b:f3:18:bf:d0:ce:25:f8:57:30:96:15:75:8c:1c:11:
1e:e7:b8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 16 23:28:57 2023 by rpki-client on console-fra.rpki-client.org