Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/Yi/0/AS209557.asa
File: AS209557.asa (raw, json)
Hash identifier: xAYG1s7PTJoyU7euGZWjf+ug8ae1EVcPKHPTk7YuNJU=
Subject key identifier: 80:C5:9A:4E:E0:50:3F:44:03:31:66:E8:0B:80:3D:17:92:7E:9B:4F
Certificate issuer: /CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Certificate serial: 423D0C6E8536C1B99FB46CE7F6824A33BD1E0CC9
Authority key identifier: 7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject info access: rsync://rpki.co/repo/Yi/0/AS209557.asa
Signing time: Wed 19 Apr 2023 15:44:53 +0000
ASPA not before: Wed 19 Apr 2023 15:39:53 +0000
ASPA not after: Wed 17 Apr 2024 15:44:53 +0000
Customer ASID: 209557
Provider set: AS: 7480
Validation: OK
Signature path: rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 May 2023 06:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3d:0c:6e:85:36:c1:b9:9f:b4:6c:e7:f6:82:4a:33:bd:1e:0c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Validity
Not Before: Apr 19 15:39:53 2023 GMT
Not After : Apr 17 15:44:53 2024 GMT
Subject: CN=80C59A4EE0503F44033166E80B803D17927E9B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:21:b9:21:76:85:83:42:16:38:e1:2e:ea:
8d:24:c0:19:0e:40:fe:fa:42:51:e6:01:0e:34:54:
44:55:f8:e9:29:42:11:59:62:f1:7d:17:69:0e:9b:
ee:1a:c7:73:96:fe:cf:86:e0:4c:92:a3:9d:a8:36:
54:6e:03:04:1a:4c:62:95:d3:aa:4e:ac:0c:d4:57:
8e:e5:80:c7:19:a1:fb:84:87:f7:c1:aa:39:e0:3d:
63:cc:16:64:03:bc:90:e6:17:e7:1b:c2:c3:de:2b:
d1:7b:25:1f:04:f7:00:14:45:d2:66:9a:e7:ec:aa:
00:6a:0a:85:d2:13:31:7f:29:ba:41:bd:77:fa:7f:
bd:3c:06:64:b6:0c:d3:0d:36:2a:54:c8:27:0a:54:
3e:62:ad:d3:17:ae:b5:dd:16:c1:a5:57:ce:ed:f7:
fe:f1:60:1a:ae:bd:ff:57:bd:b2:a1:fa:74:2a:b2:
b1:02:b4:ec:be:50:46:d1:f7:28:25:84:fb:b2:4e:
04:ff:ee:f7:d0:7e:eb:be:41:cd:e0:6e:20:40:5c:
da:04:62:f4:15:a6:84:95:cc:e2:56:65:47:97:84:
ad:cf:37:8a:5f:fc:c8:28:54:4d:4b:75:6c:75:20:
c0:db:35:f7:df:99:f6:b4:69:45:ff:05:b8:ae:00:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C5:9A:4E:E0:50:3F:44:03:31:66:E8:0B:80:3D:17:92:7E:9B:4F
X509v3 Authority Key Identifier:
keyid:7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Yi/0/AS209557.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209557
Signature Algorithm: sha256WithRSAEncryption
72:69:5d:b9:4d:c3:f8:9d:66:df:76:d0:5d:9c:b0:e7:9a:ca:
71:f5:86:3f:fa:a9:28:a4:f6:9c:fb:17:42:5d:58:d4:cc:5d:
66:22:be:0b:f3:63:cc:89:b6:30:f3:ed:3f:b0:a1:9a:4b:ce:
20:4d:b2:62:94:e3:08:e9:4d:fd:d1:30:25:bb:f0:66:fb:fa:
69:10:50:f2:48:ad:9c:e5:ed:a6:83:49:71:0f:5c:b7:81:5a:
9d:f5:ae:cc:35:c2:f0:4c:2e:c1:50:06:1e:70:90:5d:bf:4c:
3a:d0:fb:a9:62:07:f2:83:ad:78:c8:c1:c9:f4:eb:40:29:9d:
ea:3c:d8:c8:89:16:89:a1:94:3f:d3:4a:3c:85:02:88:07:24:
cb:8e:21:10:41:89:98:88:ba:2a:57:b1:50:d0:b6:8a:23:83:
f7:a9:8e:91:d1:b4:2f:80:45:d9:0c:31:46:53:82:87:71:16:
ab:57:b7:98:4c:32:ae:aa:69:93:d7:63:7d:24:c1:8e:b5:79:
f5:07:e2:81:74:8d:48:2b:bf:e7:86:e3:98:50:9a:2f:25:09:
78:27:0d:e3:ca:12:eb:10:ee:9d:9e:b5:52:65:8e:73:c2:82:
a9:dd:02:30:a4:8d:b0:c4:b9:42:2e:0f:bf:b7:97:34:97:78:
09:a6:88:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 3 13:27:11 2023 by rpki-client on console-ams.rpki-client.org