
Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/Simple/0/AS201445.asa
File: AS201445.asa (raw, json)
Hash identifier: XVK3RiVGhuc4VIOWH/6MhIXyocgezx8tKVvZlA6+QrY=
Subject key identifier: 2D:25:E6:B3:B2:01:B0:60:95:87:5F:6C:03:31:0F:12:3E:8C:55:D1
Certificate issuer: /CN=f18366696480efeab47db1db1975f2d7b6901d69
Certificate serial: 081FE70B0E7E00B2208B882301E74E4C2C78E28C
Authority key identifier: F1:83:66:69:64:80:EF:EA:B4:7D:B1:DB:19:75:F2:D7:B6:90:1D:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YNmaWSA7-q0fbHbGXXy17aQHWk.cer
Subject info access: rsync://rpki.co/repo/Simple/0/AS201445.asa
Signing time: Sun 16 Apr 2023 23:08:21 +0000
ASPA not before: Sun 16 Apr 2023 23:03:21 +0000
ASPA not after: Sun 14 Apr 2024 23:08:21 +0000
Customer AS: 201445
Provider Set: AS: 50058
AS: 202400
Validation: OK
Signature path: rsync://rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.crl
rsync://rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.mft
rsync://rpki.ripe.net/repository/DEFAULT/8YNmaWSA7-q0fbHbGXXy17aQHWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Apr 2023 22:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1f:e7:0b:0e:7e:00:b2:20:8b:88:23:01:e7:4e:4c:2c:78:e2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f18366696480efeab47db1db1975f2d7b6901d69
Validity
Not Before: Apr 16 23:03:21 2023 GMT
Not After : Apr 14 23:08:21 2024 GMT
Subject: CN=2D25E6B3B201B06095875F6C03310F123E8C55D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:c0:72:68:65:cf:80:73:f0:e4:41:ab:0b:
6b:8f:12:59:2c:8c:6a:3c:30:e6:32:ad:72:22:9a:
2d:ec:f6:94:87:32:d9:83:b1:67:c4:4f:bf:0f:97:
b4:01:9f:d5:18:d6:98:f0:75:a6:3d:68:c8:d4:ae:
7c:3b:70:3e:00:29:64:72:e7:73:fc:01:df:3d:20:
85:c1:cd:e1:51:a6:41:24:cf:49:3b:51:9f:55:98:
0d:63:35:e3:44:13:97:af:4f:e3:a5:b9:44:bd:f4:
6f:2d:7e:e2:20:5f:13:9d:2f:ac:d8:42:3c:3b:15:
6a:66:24:66:d0:72:bd:5a:4d:1d:ec:5a:05:5f:c1:
c7:be:af:31:c2:af:6e:3b:cb:ea:e5:3a:c8:40:4a:
b2:97:de:6f:3e:07:01:17:3c:b2:14:d4:d7:fb:c0:
a9:b5:d3:3f:06:b1:1c:ad:43:84:b8:8a:c3:65:a3:
17:d2:f3:8a:5d:13:be:0f:8a:27:01:34:c2:82:04:
48:18:52:10:36:a0:78:e7:48:5d:77:bc:57:42:d6:
7c:ea:dd:33:f5:66:3b:0b:7e:c3:60:28:23:d4:2b:
9c:a3:53:93:1f:b3:22:2c:92:63:94:2c:57:25:a7:
58:c7:91:87:8d:87:10:88:0b:80:49:f2:7a:c5:fb:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:25:E6:B3:B2:01:B0:60:95:87:5F:6C:03:31:0F:12:3E:8C:55:D1
X509v3 Authority Key Identifier:
keyid:F1:83:66:69:64:80:EF:EA:B4:7D:B1:DB:19:75:F2:D7:B6:90:1D:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Simple/0/F18366696480EFEAB47DB1DB1975F2D7B6901D69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YNmaWSA7-q0fbHbGXXy17aQHWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Simple/0/AS201445.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201445
Signature Algorithm: sha256WithRSAEncryption
00:a7:a6:7a:6f:5a:8c:55:a1:87:7d:81:42:02:6f:39:98:f5:
d0:a9:ee:ff:3d:20:1e:b9:0b:b0:9c:0f:c6:35:c5:26:4a:0e:
3c:81:05:97:13:22:5d:87:95:02:d0:fb:81:1b:86:8d:3f:4a:
a6:c8:de:54:75:61:56:51:47:86:45:a1:c4:b1:64:30:58:07:
d9:51:40:f5:98:b8:15:91:4d:68:54:61:09:86:13:1c:55:57:
db:b1:85:fc:91:4b:dd:1a:1e:2e:2a:8a:6f:44:11:49:b8:56:
9e:0e:0f:c8:bb:74:5b:23:76:93:76:17:89:57:ee:e9:ab:4f:
46:a1:28:bd:b5:f9:31:dd:38:a1:65:36:74:b0:aa:5d:71:a3:
e7:bf:a5:48:da:33:e4:eb:88:21:85:34:b5:7d:da:10:f4:81:
e9:0b:19:ab:cc:4c:35:bd:d4:20:85:88:e9:8b:67:fd:8b:a9:
32:a3:31:64:80:ed:5c:9c:c4:57:03:e4:73:68:f5:3e:ac:7c:
98:ca:c5:3e:42:cf:df:df:82:06:2d:48:d6:48:1e:14:94:63:
0a:84:9e:04:82:3e:50:df:fe:ec:32:a6:cb:5f:66:eb:ca:0a:
2c:ff:2a:ba:86:09:e3:d8:a2:d3:3a:a7:94:53:a8:98:2d:18:
ea:c7:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 16 23:28:57 2023 by rpki-client on console-fra.rpki-client.org