Autonomous System Provider Authorization
$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/0/AS200454.asa
File: AS200454.asa (raw, json)
Hash identifier: p4vll/UiUAZD/3UUjpvhDHVyK2MIUr1R01S00rNTg58=
Subject key identifier: 92:A0:67:A6:EF:09:97:A9:06:F3:9D:8A:E5:DD:B6:B5:0D:93:09:C1
Certificate issuer: /CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Certificate serial: 2C45E149EAC7A3CC1317B25614960B111C93479F
Authority key identifier: BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject info access: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/AS200454.asa
Signing time: Mon 20 Jan 2025 05:01:54 +0000
ASPA not before: Mon 20 Jan 2025 04:56:54 +0000
ASPA not after: Mon 19 Jan 2026 05:01:54 +0000
Customer ASID: 200454
Providers: AS: 174
AS: 6424
AS: 6939
AS: 9186
AS: 12186
AS: 19577
Validation: OK
Signature path: rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:45:e1:49:ea:c7:a3:cc:13:17:b2:56:14:96:0b:11:1c:93:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5bdb97e9476f50638158886d4d97026a5b7aa6
Validity
Not Before: Jan 20 04:56:54 2025 GMT
Not After : Jan 19 05:01:54 2026 GMT
Subject: CN=92A067A6EF0997A906F39D8AE5DDB6B50D9309C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:d8:e2:92:99:75:a2:00:a9:e1:2f:20:1f:
96:92:10:73:03:85:13:2f:da:ac:4f:bd:e2:df:e4:
f1:f5:56:39:ae:7d:eb:3f:c6:d1:f1:86:0d:dd:74:
d5:f1:0f:78:e9:c1:23:57:4e:85:30:c7:db:81:18:
52:20:82:2f:a5:3b:b0:a0:ca:52:c1:eb:eb:13:d4:
d5:13:28:4e:dd:fd:02:5a:27:0b:58:6d:d0:58:df:
16:05:7e:b9:82:e8:6e:6f:c3:fd:18:38:6f:07:f7:
c9:75:58:86:ab:17:2b:a6:f8:e2:a7:fe:2a:a4:e4:
e1:a6:50:7a:96:1e:76:e7:72:d8:dc:ae:e1:5b:2b:
7c:64:67:1d:80:f0:da:1f:1c:cf:c1:8c:e3:1a:1f:
f4:57:80:3b:32:92:29:4e:c0:21:ad:2d:ac:d5:76:
be:9d:ac:a9:e0:16:fc:96:30:09:e3:88:13:c8:ec:
fa:c9:e7:99:fa:d1:ab:72:fa:19:c0:7e:5f:27:91:
5d:ab:71:91:75:6f:7b:81:d9:6f:a6:20:b2:8a:16:
e8:5c:2f:c2:42:c9:f7:16:8b:2d:dd:c4:83:0c:a7:
0a:29:56:d2:12:5f:90:a4:a1:fb:b8:98:37:93:43:
17:da:d5:1a:cf:57:2c:94:98:ae:ae:ae:40:1e:ee:
0a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A0:67:A6:EF:09:97:A9:06:F3:9D:8A:E5:DD:B6:B5:0D:93:09:C1
X509v3 Authority Key Identifier:
keyid:BC:5B:DB:97:E9:47:6F:50:63:81:58:88:6D:4D:97:02:6A:5B:7A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/BC5BDB97E9476F50638158886D4D97026A5B7AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFvbl-lHb1BjgViIbU2XAmpbeqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/0/AS200454.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200454
Signature Algorithm: sha256WithRSAEncryption
81:f8:3d:77:c5:60:4b:7a:af:35:6e:ea:15:68:8c:d8:b4:79:
da:64:db:d1:4a:21:bb:f9:88:42:03:ae:5e:71:96:ce:05:c7:
84:1f:21:43:33:7b:7e:95:f0:ba:64:db:2e:a2:65:be:e2:77:
f1:7e:e3:ba:c9:7c:4c:c5:d7:71:68:95:23:3f:87:66:68:e7:
04:dd:26:e7:8e:08:a7:99:99:cb:f3:3c:86:f7:55:de:e8:6c:
46:f7:30:7e:7a:7f:5b:92:72:47:15:a0:ef:74:ba:36:c6:09:
6f:56:a1:31:20:63:be:42:21:4a:e9:91:27:a0:4f:91:b3:89:
f1:85:a6:1f:70:ee:bf:f1:ae:bb:bf:7b:ef:30:b2:11:e1:c6:
da:44:6e:31:85:fa:cc:a0:65:f8:c1:cb:91:2c:90:fd:8a:9a:
75:f3:8a:3a:f4:af:54:35:6c:e8:20:83:d0:a8:59:b0:4f:24:
54:f4:6f:46:2f:87:b5:19:37:95:00:36:2c:5d:68:bf:a0:8a:
c6:2c:fd:b4:c4:4e:64:b0:8b:aa:6d:09:64:0f:3d:b8:99:68:
9e:a1:63:b4:83:13:f4:3e:dc:cf:c6:3e:4c:65:f5:29:ee:51:
01:bc:04:d6:33:a0:63:40:0f:88:33:af:61:d0:0f:e6:81:da:
9e:38:99:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:26 2025 by rpki-client