Autonomous System Provider Authorization
$ rpki-client -vvf rsync.krill.clnexus.dev/repo/CLNexus/0/AS214420.asa
File: AS214420.asa (raw, json)
Hash identifier: C65jtOjBlpPjRzqYy4fJANSK9FHM6Yz6hs95qtJ1op4=
Subject key identifier: 29:74:6D:D1:5E:C9:C6:94:26:7A:93:16:0D:F0:06:B9:86:93:16:B9
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 4C0D8F66E738181950D61F7A734A6DFEB6A65C38
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/AS214420.asa
Signing time: Tue 21 Jul 2026 17:23:54 +0000
ASPA not before: Tue 21 Jul 2026 17:18:54 +0000
ASPA not after: Tue 20 Jul 2027 17:23:54 +0000
Customer ASID: 214420
Providers: AS: 835
AS: 6939
AS: 34927
AS: 47272
AS: 52025
AS: 204464
AS: 207841
AS: 209735
AS: 215638
AS: 219189
AS: 398999
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0d:8f:66:e7:38:18:19:50:d6:1f:7a:73:4a:6d:fe:b6:a6:5c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Jul 21 17:18:54 2026 GMT
Not After : Jul 20 17:23:54 2027 GMT
Subject: CN=29746DD15EC9C694267A93160DF006B9869316B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:3f:97:76:0b:08:9b:11:c4:7b:62:df:bf:
7f:d4:87:60:51:06:68:13:1d:7a:cf:a7:9d:46:6c:
43:1f:a1:90:90:77:fb:ef:2c:25:e1:10:2e:4f:8f:
27:5c:aa:e3:01:82:30:40:97:0d:a2:71:73:aa:d8:
79:68:a4:d9:3d:39:d5:3f:d3:68:63:b7:da:53:dd:
9d:4c:20:bc:f7:dc:e1:9e:55:c1:0d:82:3e:aa:e5:
a5:7f:bd:0f:18:da:9c:e7:93:68:ac:53:37:66:ad:
61:80:8d:c6:84:ed:b7:81:ef:75:f4:a5:fc:6a:00:
6b:5c:01:a2:34:8b:b2:08:db:59:2b:bb:c2:0d:cd:
bc:6c:e5:44:72:d1:f3:6d:d2:61:a9:a4:d4:55:1b:
d4:e7:72:d7:da:a8:24:b8:80:27:46:cc:4d:4c:95:
f1:9e:08:75:c2:9e:37:c1:f5:04:f4:a7:21:03:71:
19:03:be:12:ad:0b:cc:8d:07:9b:0b:45:9c:0f:60:
98:b2:0b:0a:4d:c8:05:27:0e:77:4c:f7:af:51:44:
63:5d:ce:23:0b:b8:f7:51:c0:73:6f:95:9e:f9:c7:
2c:9c:92:e4:13:84:05:b2:2d:44:57:6f:b3:fc:04:
ac:2e:45:0a:58:91:33:b7:71:26:29:43:bb:dd:72:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:74:6D:D1:5E:C9:C6:94:26:7A:93:16:0D:F0:06:B9:86:93:16:B9
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/AS214420.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214420
Signature Algorithm: sha256WithRSAEncryption
37:99:76:12:8a:86:cd:89:c8:52:a4:53:e2:c0:86:b4:4b:0b:
fd:46:9a:d0:6e:83:a1:c9:fa:11:2d:22:88:45:d4:f8:d6:c9:
74:ee:fb:f3:70:83:17:9f:a3:b3:ab:d6:3a:d9:8a:7f:42:2c:
ec:72:f2:a1:5c:30:a4:60:cd:33:11:05:80:a4:7e:23:81:f2:
d9:e7:7d:99:64:eb:3c:e3:ed:5d:fc:32:60:30:59:9b:b7:5a:
60:b1:e4:cb:5f:0d:ad:21:f8:a0:67:3b:83:55:fb:71:41:7f:
25:cd:2c:3c:d6:aa:3a:d0:e9:ef:6f:20:65:18:eb:c9:b4:d9:
7d:ac:cb:ae:05:97:e7:d4:cd:30:2c:6e:f9:c5:1f:bc:09:e8:
ef:3e:eb:e8:1c:11:44:4d:f2:51:ec:f3:e4:b6:4c:b9:44:1d:
8e:c9:3e:f3:e9:21:29:d9:de:18:05:63:a9:3f:79:a3:ba:64:
fa:14:61:0e:e5:ac:52:cf:4c:c9:f4:e0:22:e9:ba:4e:92:02:
ec:0e:c3:c2:26:dc:69:c8:b4:b9:6e:2f:f9:22:96:25:4d:2a:
4b:14:3c:1e:bc:e9:5d:64:92:9a:70:2e:80:8a:ef:92:3e:e2:
65:ec:67:d8:2c:00:b8:93:69:25:3e:51:a4:90:9b:80:7a:43:
6f:5e:30:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:30:00 2026 by rpki-client