
Autonomous System Provider Authorization
$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/AS39002.asa
File: AS39002.asa (raw, json)
Hash identifier: hEB8BBdYVlo72zx+ljFUNEeMeK+wTDG+bdunzLzWuR8=
Subject key identifier: 4A:A1:D1:72:E6:A6:65:6E:8B:E7:E3:FE:89:EB:DB:57:53:84:C9:3A
Certificate issuer: /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial: 6B2E0775226DA1569E17695960BDBB14F90C33F8
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access: rsync://rpki.xindi.eu/repo/XINDI/0/AS39002.asa
Signing time: Fri 24 Jan 2025 18:18:35 +0000
ASPA not before: Fri 24 Jan 2025 18:13:35 +0000
ASPA not after: Fri 23 Jan 2026 18:18:35 +0000
Customer ASID: 39002
Providers: AS: 0
Validation: OK
Signature path: rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Feb 2025 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2e:07:75:22:6d:a1:56:9e:17:69:59:60:bd:bb:14:f9:0c:33:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Validity
Not Before: Jan 24 18:13:35 2025 GMT
Not After : Jan 23 18:18:35 2026 GMT
Subject: CN=4AA1D172E6A6656E8BE7E3FE89EBDB575384C93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:a0:af:3f:eb:49:54:b8:29:98:38:cc:69:
89:6b:6c:45:a0:e8:83:8a:47:e8:4e:fd:78:89:da:
f2:97:c2:71:e9:ec:ea:44:5c:ed:a8:58:b2:e7:bf:
a5:b4:54:1d:63:9a:6a:59:6d:36:cd:c9:03:6a:4b:
3f:2e:78:f6:07:58:5c:21:46:08:dd:8e:94:6d:93:
89:b8:15:da:a2:c9:e5:3e:9c:27:68:e3:a7:41:9d:
8b:c4:71:45:13:4a:56:bd:3d:42:ac:61:63:bf:18:
a9:81:b1:23:fb:b0:2c:2e:6a:fc:3a:31:ec:e0:78:
11:38:98:5e:4b:dd:c5:5f:73:ca:80:dd:73:c7:8c:
70:a7:ba:72:e3:f9:70:e9:04:bf:61:a3:56:29:e1:
db:ef:3c:77:f7:84:65:49:80:d7:2a:a6:15:88:d2:
e6:ac:b8:ea:06:41:17:69:67:c3:d4:32:9b:2e:3a:
06:30:47:2c:9f:25:ea:0d:09:6a:46:a2:c3:a5:d1:
c2:fe:8a:24:31:aa:f7:ac:e2:e6:e6:db:c9:a3:8c:
41:bf:ab:78:14:14:a1:ae:f2:c7:d5:92:3d:0b:91:
4a:eb:89:69:f3:3f:24:2d:53:7a:5e:8f:a5:24:06:
90:26:81:a8:d9:a3:6e:6d:0b:bc:af:74:6b:e4:f0:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A1:D1:72:E6:A6:65:6E:8B:E7:E3:FE:89:EB:DB:57:53:84:C9:3A
X509v3 Authority Key Identifier:
keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/AS39002.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39002
Signature Algorithm: sha256WithRSAEncryption
02:19:01:fa:38:11:91:38:37:2d:bf:21:b9:dd:f9:06:39:5a:
ae:72:eb:b3:9f:ad:da:16:df:71:b8:32:42:49:e9:40:5d:a1:
8f:c9:41:35:b9:cb:58:a8:4d:32:2e:c2:39:be:99:f5:fd:6a:
ca:5f:7b:85:6a:23:4d:fd:1f:c0:8b:33:75:ce:01:c9:6f:cf:
ad:1c:66:ac:78:0f:96:dd:57:c0:1d:09:29:e6:cc:d4:3e:f5:
71:74:dc:aa:10:fc:e3:3f:e9:fe:0a:0f:1f:13:b5:e6:ac:cd:
80:27:a7:3f:3a:7f:dd:fb:47:1b:1b:9e:7f:b3:37:1b:43:bc:
57:4f:6f:bc:b0:2e:6d:88:21:b1:33:cc:c2:5d:4a:7d:1c:1d:
b1:eb:6e:ae:57:71:15:fe:6b:e4:0c:f4:3b:62:93:32:fc:1c:
dc:b8:ac:23:1a:3d:5b:d9:fa:b5:e7:b9:d9:cb:f6:24:82:4d:
4b:e5:6f:e3:c1:6f:dc:d5:5e:1c:c3:c8:8f:61:38:5f:ad:a0:
b9:03:73:58:dc:ef:b4:c9:68:ff:e4:73:be:89:5d:f5:98:79:
31:2c:ca:81:cf:b8:3b:3f:58:f2:e3:93:67:8f:bb:02:c3:5d:
57:e4:df:a5:a8:76:e9:7b:2e:d1:15:d9:8c:c5:0d:8e:05:a2:
f7:22:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 15:20:20 2025 by rpki-client