Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/Riffi/0/AS203868.asa
File: AS203868.asa (raw, json)
Hash identifier: xAeqxfGTFak615+yV92jW/IZvxudLYyGvEm2w38wym8=
Subject key identifier: 29:DC:FE:3E:84:82:EC:08:99:0A:94:BC:63:DB:0D:0F:03:24:14:41
Certificate issuer: /CN=cb2b40c722f645663a261d605d1c78bd1b720065
Certificate serial: 461F0255BB1CEA2F54015792F88923369147A409
Authority key identifier: CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject info access: rsync://rpki.co/repo/Riffi/0/AS203868.asa
Signing time: Thu 13 Apr 2023 11:25:40 +0000
ASPA not before: Thu 13 Apr 2023 11:20:40 +0000
ASPA not after: Thu 11 Apr 2024 11:25:40 +0000
Customer AS: 203868
Provider Set: AS: 150249
AS: 199514
AS: 200579
AS: 203913
AS: 207656
Validation: OK
Signature path: rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Apr 2023 07:04:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:1f:02:55:bb:1c:ea:2f:54:01:57:92:f8:89:23:36:91:47:a4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2b40c722f645663a261d605d1c78bd1b720065
Validity
Not Before: Apr 13 11:20:40 2023 GMT
Not After : Apr 11 11:25:40 2024 GMT
Subject: CN=29DCFE3E8482EC08990A94BC63DB0D0F03241441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:28:5c:91:59:0c:b6:09:2a:7f:40:66:31:
ef:1c:58:c2:3e:f5:af:14:3f:37:e2:4c:81:d3:11:
e8:e5:6d:dc:5e:24:1a:75:a9:e7:2a:39:5e:24:17:
8d:16:61:d8:12:6a:e7:ec:82:ab:05:42:5c:5e:81:
d6:9f:d1:6a:52:51:d0:d8:13:46:5e:2e:1b:80:16:
8f:40:22:63:57:9a:cd:a0:f8:c8:81:a0:91:22:ed:
4d:75:61:78:a7:02:29:d9:6f:0a:95:23:d9:2b:3d:
b4:f3:0d:5f:89:3c:4a:f3:98:9f:1b:54:52:e8:45:
cc:ef:c8:f3:e1:94:4e:f3:64:e3:90:b3:7d:d9:5d:
9a:28:45:1d:ad:29:79:9a:10:1d:35:95:db:04:e7:
50:dd:e8:f9:78:48:4f:16:d3:74:60:ce:9a:bb:e0:
ed:94:c1:02:01:94:76:7f:e2:de:93:a0:da:19:fe:
83:10:eb:b9:e8:ee:6b:d0:79:07:00:5d:cb:90:0a:
e8:cf:7e:eb:51:0b:d7:a3:9f:45:d2:46:38:92:27:
14:8d:c5:fe:7d:50:d8:c6:a1:8b:1f:3a:d4:97:22:
e9:53:a6:a2:26:9e:10:0d:d6:7d:39:af:1a:f0:60:
6d:e4:4e:73:0a:0f:e0:ed:3b:45:c8:39:e2:e9:08:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DC:FE:3E:84:82:EC:08:99:0A:94:BC:63:DB:0D:0F:03:24:14:41
X509v3 Authority Key Identifier:
keyid:CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/0/AS203868.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203868
Signature Algorithm: sha256WithRSAEncryption
71:74:10:d8:e1:41:a6:42:cf:5c:b1:a0:b3:37:c6:96:b7:f1:
ff:d1:c9:6f:eb:7c:33:10:d5:d0:f6:80:8f:51:20:ed:c4:06:
9a:a8:c7:3d:56:c9:af:f7:01:ca:60:13:af:1c:19:fa:b1:41:
3d:7f:63:d9:19:b9:6e:86:b2:c1:bf:64:77:58:9a:0e:1e:79:
f4:0d:29:9f:31:50:17:d3:00:cc:18:11:19:d2:d4:f7:c5:cc:
99:f4:01:5a:36:e5:f1:7d:46:18:9e:39:23:df:19:ca:17:4a:
0e:7b:e0:c4:4a:be:46:3e:b9:2c:8f:e4:36:1d:58:9b:f8:2b:
8a:ee:e7:b6:13:88:1e:68:48:e0:e8:d6:59:e9:9d:ab:fe:7b:
40:9c:52:be:7a:d6:c4:95:39:c6:d1:c4:a6:95:b3:93:e9:2d:
9a:11:bf:ef:26:eb:e8:d0:a2:b8:df:9c:b6:ed:7c:ae:f4:ba:
30:91:e2:04:bd:90:8f:71:85:9a:b3:ea:df:b2:f2:39:b6:8b:
98:9a:f9:39:1a:ca:f3:99:fb:43:86:cf:d9:f7:d6:65:f4:7b:
e1:33:53:de:d1:b3:a8:00:5f:05:3c:9c:9b:c9:2b:03:a0:5a:
9e:4e:33:60:c8:5e:ab:17:04:de:9a:e4:f5:36:fa:12:8b:c6:
4f:66:a7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 13 11:47:31 2023 by rpki-client on console-fra.rpki-client.org