Autonomous System Provider Authorization
$ rpki-client -vvf rpki.co/repo/Yi/0/AS212666.asa
File: AS212666.asa (raw, json)
Hash identifier: sWLA0PbVZoxyluc8kD/nY4qfHc9Xtk58G3QVlLOo/hg=
Subject key identifier: DF:F9:00:E8:D5:BA:2D:E8:5F:B1:58:9C:C8:CC:E8:8D:AC:51:5F:A6
Certificate issuer: /CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Certificate serial: 1695CBE85BE0A3079042C08C7902223078B54175
Authority key identifier: 7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject info access: rsync://rpki.co/repo/Yi/0/AS212666.asa
Signing time: Wed 06 Dec 2023 17:10:37 +0000
ASPA not before: Wed 06 Dec 2023 17:05:37 +0000
ASPA not after: Wed 04 Dec 2024 17:10:37 +0000
Customer ASID: 212666
Providers: AS: 0
Validation: OK
Signature path: rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:95:cb:e8:5b:e0:a3:07:90:42:c0:8c:79:02:22:30:78:b5:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Validity
Not Before: Dec 6 17:05:37 2023 GMT
Not After : Dec 4 17:10:37 2024 GMT
Subject: CN=DFF900E8D5BA2DE85FB1589CC8CCE88DAC515FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:84:d4:93:f6:0b:97:ac:7f:0b:c2:f0:1d:ed:
fb:7c:a0:58:05:63:ee:da:f9:b8:7e:b8:d0:af:85:
5f:40:82:bc:8a:8e:40:06:f7:25:7e:b2:30:f5:f1:
a3:44:02:ef:5f:0d:ff:2a:3c:e2:a9:db:35:f9:0e:
24:5f:e3:51:53:7f:7f:61:06:e5:4a:34:e7:ac:d1:
f2:51:93:ce:ff:53:74:c8:25:9b:c5:90:63:a7:5c:
4e:1d:03:90:91:c5:94:dc:d0:52:11:d9:36:2d:4a:
8a:8c:78:8d:a7:fa:cc:52:36:11:c9:5f:28:30:18:
27:4d:54:9f:7d:43:41:bd:bd:a1:d4:76:e5:aa:82:
a0:fa:2d:86:b6:d2:1a:32:d8:20:64:f9:fb:6e:5f:
9f:a8:b0:b6:3b:fc:c2:d3:1b:59:cf:fb:fb:52:a4:
15:59:e5:3e:63:d7:c4:a8:b7:e2:5d:69:91:01:6e:
d5:0f:e8:eb:1b:c6:47:e3:b7:66:2f:b9:96:06:53:
52:c8:9c:cd:ca:55:8a:51:a1:0b:22:90:3e:02:16:
7b:18:71:05:53:7b:f1:53:e3:ba:cf:8a:65:b1:70:
93:be:d8:88:3f:92:c1:ef:65:5d:30:ab:a1:4e:8a:
ed:85:1f:3e:20:7a:a2:0b:66:7e:84:36:a9:75:eb:
ee:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F9:00:E8:D5:BA:2D:E8:5F:B1:58:9C:C8:CC:E8:8D:AC:51:5F:A6
X509v3 Authority Key Identifier:
keyid:7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Yi/0/AS212666.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212666
Signature Algorithm: sha256WithRSAEncryption
3e:e2:a7:10:d3:5a:7f:20:b4:d7:66:d6:6a:a0:20:09:6f:93:
30:21:e3:b8:a3:4f:ab:1e:51:3f:04:47:9c:88:08:15:62:6f:
b3:89:67:42:0a:29:87:d8:06:a7:ed:6f:73:e7:b3:8b:b7:a0:
32:ed:7a:44:f5:f2:e8:10:b8:00:37:71:a3:67:db:6d:9f:d4:
91:c7:19:4b:ec:05:45:8f:d2:fa:1c:a6:22:4b:e8:51:f5:d6:
99:f5:4e:88:55:52:b5:90:6e:63:ea:09:1d:4e:2f:94:cc:06:
94:3a:d4:3f:07:62:f9:9a:cd:20:dc:2e:6f:5c:72:b8:14:1e:
df:31:2a:d2:b3:ad:ff:10:9e:d3:8a:8b:be:03:66:5a:54:fe:
9e:c3:26:a6:5b:98:aa:c3:4b:cc:a5:69:80:af:aa:c2:8e:b1:
a7:92:8f:12:84:3f:c6:27:dc:4e:10:2f:23:1d:2d:6f:fd:29:
ca:7e:27:78:71:25:9f:60:a5:7d:26:48:6a:ce:a2:cf:93:3c:
9c:c5:d2:ad:1f:be:e1:96:ab:0d:91:84:05:a8:13:38:d5:b2:
a6:1e:ea:1c:f9:53:38:60:44:ba:41:97:a0:a8:1b:12:cc:50:
0f:2a:ce:ee:2a:35:d8:ee:25:07:dd:79:4b:0a:60:b1:53:ce:
25:98:be:06
-----BEGIN CERTIFICATE-----
MIIEgzCCA2ugAwIBAgIUFpXL6FvgoweQQsCMeQIiMHi1QXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2RiODY5ZjNiM2M5MGRhM2IzNDU3YmIzODg5YTRmNjZi
NjQzMGQ4OTAeFw0yMzEyMDYxNzA1MzdaFw0yNDEyMDQxNzEwMzdaMDMxMTAvBgNV
BAMTKERGRjkwMEU4RDVCQTJERTg1RkIxNTg5Q0M4Q0NFODhEQUM1MTVGQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrhNST9guXrH8LwvAd7ft8oFgF
Y+7a+bh+uNCvhV9AgryKjkAG9yV+sjD18aNEAu9fDf8qPOKp2zX5DiRf41FTf39h
BuVKNOes0fJRk87/U3TIJZvFkGOnXE4dA5CRxZTc0FIR2TYtSoqMeI2n+sxSNhHJ
XygwGCdNVJ99Q0G9vaHUduWqgqD6LYa20hoy2CBk+ftuX5+osLY7/MLTG1nP+/tS
pBVZ5T5j18Sot+JdaZEBbtUP6Osbxkfjt2YvuZYGU1LInM3KVYpRoQsikD4CFnsY
cQVTe/FT47rPimWxcJO+2Ig/ksHvZV0wq6FOiu2FHz4geqILZn6ENql16+7/AgMB
AAGjggGNMIIBiTAdBgNVHQ4EFgQU3/kA6NW6LehfsVicyMzojaxRX6YwHwYDVR0j
BBgwFoAUfbhp87PJDaOzRXuziJpPZrZDDYkwDgYDVR0PAQH/BAQDAgeAMFcGA1Ud
HwRQME4wTKBKoEiGRnJzeW5jOi8vcnBraS5jby9yZXBvL1lpLzAvN0RCODY5RjNC
M0M5MERBM0IzNDU3QkIzODg5QTRGNjZCNjQzMEQ4OS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2ZiaHA4N1BKRGFPelJYdXppSnBQWnJaRERZay5jZXIwQgYIKwYB
BQUHAQsENjA0MDIGCCsGAQUFBzALhiZyc3luYzovL3Jwa2kuY28vcmVwby9ZaS8w
L0FTMjEyNjY2LmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM+ujANBgkqhkiG9w0BAQsFAAOCAQEAPuKnENNafyC0
12bWaqAgCW+TMCHjuKNPqx5RPwRHnIgIFWJvs4lnQgoph9gGp+1vc+ezi7egMu16
RPXy6BC4ADdxo2fbbZ/UkccZS+wFRY/S+hymIkvoUfXWmfVOiFVStZBuY+oJHU4v
lMwGlDrUPwdi+ZrNINwub1xyuBQe3zEq0rOt/xCe04qLvgNmWlT+nsMmpluYqsNL
zKVpgK+qwo6xp5KPEoQ/xifcThAvIx0tb/0pyn4neHEln2ClfSZIas6iz5M8nMXS
rR++4ZarDZGEBagTONWyph7qHPlTOGBEukGXoKgbEsxQDyrO7io12O4lB915Swpg
sVPOJZi+Bg==
-----END CERTIFICATE-----
Generated at Wed Apr 17 18:41:53 2024 by rpki-client on console-ams.rpki-client.org