Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/Riffi/0/AS203868.asa
File: AS203868.asa (raw, json)
Hash identifier: 1nK2WR4TBQEYAp7b2aseX5pmCCtop/OAkE6nsxuC+bs=
Subject key identifier: 87:9A:C4:93:C4:E5:49:CD:56:BA:32:A6:33:14:C7:5E:69:FD:AF:24
Certificate issuer: /CN=cb2b40c722f645663a261d605d1c78bd1b720065
Certificate serial: 39E448B5EC1F2A81B6E3FD4DE9449501C95AEC12
Authority key identifier: CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject info access: rsync://rpki.co/repo/Riffi/0/AS203868.asa
Signing time: Sun 14 Jul 2024 11:40:56 +0000
ASPA not before: Sun 14 Jul 2024 11:35:56 +0000
ASPA not after: Sun 13 Jul 2025 11:40:56 +0000
Customer ASID: 203868
Providers: AS: 924
AS: 8772
AS: 29632
AS: 39249
AS: 150249
AS: 203913
AS: 207656
AS: 209533
AS: 210475
AS: 210645
Validation: OK
Signature path: rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jul 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e4:48:b5:ec:1f:2a:81:b6:e3:fd:4d:e9:44:95:01:c9:5a:ec:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2b40c722f645663a261d605d1c78bd1b720065
Validity
Not Before: Jul 14 11:35:56 2024 GMT
Not After : Jul 13 11:40:56 2025 GMT
Subject: CN=879AC493C4E549CD56BA32A63314C75E69FDAF24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:60:ad:84:c1:71:68:bd:38:89:2b:6d:1c:
dc:02:0f:c7:bc:c9:51:0d:bb:a8:e0:8b:ef:f8:16:
32:36:2d:4f:34:f2:21:25:52:29:d3:e2:9c:82:09:
02:7f:0a:88:a1:5a:39:68:62:ac:7f:3d:69:e4:9f:
bc:32:15:91:78:a8:9c:cd:22:6c:d9:14:a1:ae:7d:
da:84:76:e7:89:63:46:17:37:78:b9:e4:8a:eb:dc:
c7:ab:46:00:74:d1:97:2e:86:eb:3c:c2:9d:0b:5d:
38:1d:35:a7:ef:95:de:24:31:82:c7:75:77:ea:91:
71:86:31:1a:51:b5:01:a6:b9:f0:c4:ed:cb:c5:2b:
7d:7b:57:9c:e4:d6:8f:d5:01:eb:00:15:76:21:b2:
8f:fb:22:1e:85:58:00:42:85:f7:e6:96:1a:bb:1d:
45:8b:1a:15:c7:54:4f:96:6a:eb:25:0c:8c:10:2f:
0a:ec:8a:43:e2:de:14:2d:3d:55:a5:eb:c8:8b:3d:
b1:20:d1:0f:57:7f:48:b5:4d:96:45:b7:3b:00:e7:
a7:f5:0c:0a:9d:a1:78:16:65:9e:81:86:8c:11:ee:
88:b9:39:ac:7b:69:a1:75:5f:91:40:7b:b8:29:cc:
68:bc:08:05:74:e6:94:49:9d:68:e6:5a:4a:c5:d6:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:C4:93:C4:E5:49:CD:56:BA:32:A6:33:14:C7:5E:69:FD:AF:24
X509v3 Authority Key Identifier:
keyid:CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/0/AS203868.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203868
Signature Algorithm: sha256WithRSAEncryption
3d:9b:df:ec:43:ae:d1:d3:0a:fa:63:da:10:0b:d6:f8:cb:29:
2b:bb:9a:1d:bf:e3:12:dd:67:6e:8a:ff:3a:09:23:73:9e:c5:
be:e1:13:1e:c5:47:75:20:36:28:04:a1:92:3a:e1:f4:37:77:
ed:be:bd:5a:13:44:2a:c4:3c:00:01:2e:9a:73:26:d7:e8:df:
9f:08:d1:ef:0a:11:7b:6c:e4:dc:9c:1f:1f:53:9e:8f:89:f4:
9c:10:8a:a5:a6:d0:66:4a:01:35:71:cc:e1:9d:83:52:46:77:
4e:3e:ab:de:f9:55:81:19:c0:06:41:40:64:8e:ae:3a:e3:2c:
ee:c6:5b:7d:f4:fb:69:1a:19:f7:88:38:ae:de:85:d1:61:89:
92:1a:d9:af:58:94:2e:0c:8e:99:12:1a:0c:16:ff:7e:61:1c:
17:d3:79:7d:5d:04:66:49:ee:9a:2a:e6:3f:85:7b:f1:93:ba:
2d:93:ec:be:28:a8:56:9a:e9:9a:86:37:d8:d0:51:f3:a2:d1:
6a:2e:92:ff:30:b1:70:c7:ef:40:58:ab:bd:cc:fd:c1:62:9f:
1a:55:26:87:dd:4c:41:29:0a:60:13:fb:df:6b:f5:bc:e3:f9:
dc:5b:79:0b:a4:1e:e3:32:c7:c5:3d:c3:03:12:b6:60:be:c0:
bf:78:a4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 17:51:16 2024 by rpki-client on console-fra.rpki-client.org