Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/affea4-4181-42ae-b602-7e5bbf732f09/1/oCJR2OMzuPhxvXzDL7-Mwn4GnaA.asa
File: oCJR2OMzuPhxvXzDL7-Mwn4GnaA.asa (raw, json)
Hash identifier: Prn0CTE6Y9TZdAy+cY1xEnS3q0+uAy2OL4474/aMeKg=
Subject key identifier: A0:22:51:D8:E3:33:B8:F8:71:BD:7C:C3:2F:BF:8C:C2:7E:06:9D:A0
Certificate issuer: /CN=bd7007413a85dce9499f12b3fef1c62567aa9579
Certificate serial: 019BE6A8559BA72C4EA494F3F46E9E360093
Authority key identifier: BD:70:07:41:3A:85:DC:E9:49:9F:12:B3:FE:F1:C6:25:67:AA:95:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXAHQTqF3OlJnxKz_vHGJWeqlXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/affea4-4181-42ae-b602-7e5bbf732f09/1/oCJR2OMzuPhxvXzDL7-Mwn4GnaA.asa
Signing time: Thu 22 Jan 2026 17:02:30 +0000
ASPA not before: Thu 22 Jan 2026 17:02:30 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 204464
Providers: AS: 211066
AS: 213413
AS: 215136
AS: 215569
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e6:a8:55:9b:a7:2c:4e:a4:94:f3:f4:6e:9e:36:00:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7007413a85dce9499f12b3fef1c62567aa9579
Validity
Not Before: Jan 22 17:02:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a02251d8e333b8f871bd7cc32fbf8cc27e069da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:63:24:9d:70:1b:a0:02:8f:9d:54:bc:bb:05:
c8:d6:32:0f:4b:b3:47:3b:ac:47:b0:fa:02:fd:d7:
24:47:f0:68:79:64:ab:4c:d1:65:f3:c8:c2:2c:30:
0e:d1:be:a1:ef:2c:73:1b:f2:42:33:e1:86:e8:44:
e0:fa:84:92:e8:aa:f7:bd:80:db:b2:b6:a6:63:22:
03:a0:55:7a:40:6d:45:9e:15:3e:3b:98:8d:38:d4:
f0:c0:e5:b0:24:0a:14:9a:a7:52:89:3b:de:6e:7e:
df:29:d9:85:0b:ca:1b:2b:57:45:82:5e:ea:cd:54:
6c:24:c7:26:c0:6b:a8:27:32:7c:b8:f8:0b:b1:cb:
45:a8:62:08:8d:24:6d:60:69:62:f6:a2:d2:3c:c5:
62:29:49:06:dc:ce:ad:a8:55:4c:03:cc:2c:b2:b2:
43:e4:46:e6:08:4f:e1:07:ed:56:15:ad:7d:5f:99:
98:a5:9c:03:0e:00:e1:05:5e:9e:66:90:4d:f9:a7:
37:61:fb:39:50:c6:76:b5:11:e7:0f:e5:5b:5d:94:
5d:5f:a7:11:94:35:32:8c:dc:4d:15:54:4b:e5:aa:
f6:f3:04:cd:7b:89:68:9b:49:3c:47:80:d1:d2:04:
13:be:b3:67:7c:05:78:fd:30:52:9f:76:fe:03:b4:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:22:51:D8:E3:33:B8:F8:71:BD:7C:C3:2F:BF:8C:C2:7E:06:9D:A0
X509v3 Authority Key Identifier:
keyid:BD:70:07:41:3A:85:DC:E9:49:9F:12:B3:FE:F1:C6:25:67:AA:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXAHQTqF3OlJnxKz_vHGJWeqlXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/affea4-4181-42ae-b602-7e5bbf732f09/1/oCJR2OMzuPhxvXzDL7-Mwn4GnaA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/affea4-4181-42ae-b602-7e5bbf732f09/1/vXAHQTqF3OlJnxKz_vHGJWeqlXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204464
Signature Algorithm: sha256WithRSAEncryption
9a:fc:46:0b:32:25:d3:14:42:40:ec:b1:18:21:a3:e9:97:78:
02:8b:a2:2e:df:b8:3a:7a:86:f8:76:8a:82:f2:82:07:6a:99:
47:ae:ae:fe:2d:70:3c:71:d0:6c:67:85:ed:f3:4c:d7:e6:53:
33:ed:33:a8:f9:df:d6:b3:95:5a:2e:ce:87:76:ce:e3:a8:75:
c8:e9:92:bd:e0:6a:86:c9:f5:33:89:63:c3:72:4e:67:3b:d4:
5a:f2:cd:64:dd:68:5e:5b:99:d6:52:a5:45:f5:3e:24:2f:48:
4b:38:e5:dc:e6:17:a4:6b:16:68:b7:bb:85:7b:9f:0e:d4:74:
5e:c0:d5:d6:a9:f4:3a:e4:3e:9c:bb:6b:41:46:d9:ab:46:e9:
d3:d4:00:ff:16:f3:32:d9:8c:ec:ae:c3:a0:96:1d:b8:60:14:
b7:52:28:c1:1a:83:84:ba:f9:79:00:7a:8b:1a:9d:f1:e3:a2:
b1:55:c8:58:f5:b9:79:89:59:3e:c8:c2:e5:dd:e2:e7:fc:f2:
a2:01:85:d4:de:7b:ce:68:f9:43:48:fd:b1:71:a8:65:89:5c:
71:43:3b:1f:81:15:94:a4:2f:95:a9:bf:1c:19:23:55:31:ec:
c9:1e:1f:5e:82:2e:64:4f:d2:98:1e:f2:70:5d:16:58:e2:f9:
a2:ca:42:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 07:36:13 2026 by rpki-client