Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/Yi/0/AS209557.asa
File: AS209557.asa (raw, json)
Hash identifier: G4JztwvtApI4XJoDUN8pC9UctK5+XCbDNWxHv0AF5qc=
Subject key identifier: D6:C5:65:1F:12:E4:31:53:AF:2B:BC:7A:C9:A4:3B:8C:96:1C:41:79
Certificate issuer: /CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Certificate serial: 52377F25602D1A3B9D06F252592762CBE5F47FBE
Authority key identifier: 7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject info access: rsync://rpki.co/repo/Yi/0/AS209557.asa
Signing time: Wed 06 Dec 2023 17:10:37 +0000
ASPA not before: Wed 06 Dec 2023 17:05:37 +0000
ASPA not after: Wed 04 Dec 2024 17:10:37 +0000
Customer ASID: 209557
Providers: AS: 7480
Validation: OK
Signature path: rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:37:7f:25:60:2d:1a:3b:9d:06:f2:52:59:27:62:cb:e5:f4:7f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Validity
Not Before: Dec 6 17:05:37 2023 GMT
Not After : Dec 4 17:10:37 2024 GMT
Subject: CN=D6C5651F12E43153AF2BBC7AC9A43B8C961C4179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:15:33:52:82:4f:5a:71:75:15:12:dc:4b:
aa:16:58:74:60:7c:3b:e1:5a:0a:f4:6c:39:76:1d:
f5:cd:9c:08:fd:5f:d6:43:ee:a8:2a:05:f5:19:b2:
e1:e0:27:a2:fb:78:d8:31:13:5a:8c:22:2e:8c:ea:
73:c1:0e:6d:13:f8:85:dd:4c:6e:5b:b9:60:3f:fd:
7b:c9:b2:c8:00:5a:f8:45:fe:32:2c:a6:42:f9:2f:
84:20:07:15:92:33:00:f3:d7:da:a7:94:d5:f1:23:
49:c8:6c:c1:bf:dc:27:e4:28:20:c4:b3:e9:fc:04:
e2:6b:5a:c6:20:76:a1:1a:41:b4:cf:fc:36:c7:13:
dd:76:8d:bb:8b:46:b5:70:36:03:84:0a:8b:53:a6:
75:a9:e2:e9:e1:5a:fb:52:13:d6:a4:dd:88:41:13:
62:dc:44:ea:7c:7c:bf:13:52:c2:58:f9:13:b5:47:
f7:68:ca:1e:f2:d2:68:76:6c:ab:32:06:c6:ed:30:
01:5b:2e:39:f9:d3:03:23:5c:25:56:48:e2:d0:ad:
c8:28:aa:93:51:c5:58:f6:26:fe:2e:10:46:99:a8:
9d:8c:74:1d:5f:e3:2b:8b:af:43:0c:cb:13:4a:01:
52:04:b5:ba:6c:a6:79:34:4b:8d:18:ff:55:34:a0:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C5:65:1F:12:E4:31:53:AF:2B:BC:7A:C9:A4:3B:8C:96:1C:41:79
X509v3 Authority Key Identifier:
keyid:7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Yi/0/AS209557.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209557
Signature Algorithm: sha256WithRSAEncryption
ad:70:15:e1:0a:cf:cc:1c:df:85:08:f8:dc:f9:53:25:51:09:
25:c0:a0:7e:3b:5e:a8:f9:6d:72:9d:32:6f:e3:f0:6a:86:e4:
23:ff:c5:35:44:42:d9:93:88:d4:6e:ee:50:60:1c:d2:4d:0e:
9b:bb:27:e2:35:18:16:86:09:90:98:af:94:d0:97:36:b3:13:
e7:8a:54:9a:70:cd:39:8e:b6:72:e9:38:fe:61:80:6f:4b:73:
57:18:f0:51:41:16:b2:9d:fc:53:2b:66:a3:d7:cf:93:1d:b9:
65:d6:bf:a2:3b:0d:bb:7f:05:47:46:e0:46:81:46:07:12:b3:
e3:82:6d:48:1c:01:b2:aa:ab:a8:e6:96:ba:af:4b:e2:32:26:
b3:8a:ca:cb:d7:9b:c7:2e:7d:09:f8:72:18:b1:53:4b:ad:82:
16:08:ae:43:0b:eb:73:85:d0:24:e0:89:bf:16:88:41:01:f5:
d5:56:63:ef:b1:14:d3:66:15:6a:11:45:12:af:5a:ce:5c:dc:
68:87:a8:ac:37:da:08:6e:30:86:ed:c3:0e:36:3f:ba:69:37:
84:10:c7:15:91:21:29:ac:bb:49:24:04:79:77:c0:62:fe:30:
81:bc:d3:aa:51:2f:0e:32:ea:ae:83:48:4a:a7:6f:d4:81:60:
12:bc:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 20:39:35 2024 by rpki-client on console-fra.rpki-client.org