Autonomous System Provider Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/1/AS203843.asa
File: AS203843.asa (raw, json)
Hash identifier: 1pFet4x1yrC8RrSFaCMuyXGBnqsrAAkGDEY/Y2vXwgQ=
Subject key identifier: 07:D2:0F:D1:5A:C0:08:1C:9E:97:9E:32:16:24:D1:F7:4E:92:1D:6B
Certificate issuer: /CN=0aa3a93dd355c886d2c35400dcdaf3ed5b651bb7
Certificate serial: 0310891209AEEB864D0218C14E820116E6452CF1
Authority key identifier: 0A:A3:A9:3D:D3:55:C8:86:D2:C3:54:00:DC:DA:F3:ED:5B:65:1B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqOpPdNVyIbSw1QA3Nrz7VtlG7c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/1/AS203843.asa
Signing time: Wed 19 Apr 2023 18:10:23 +0000
ASPA not before: Wed 19 Apr 2023 18:05:23 +0000
ASPA not after: Wed 17 Apr 2024 18:10:23 +0000
Customer AS: 203843
Provider Set: AS: 53667 (IPv6 only)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/1/0AA3A93DD355C886D2C35400DCDAF3ED5B651BB7.crl
rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/1/0AA3A93DD355C886D2C35400DCDAF3ED5B651BB7.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqOpPdNVyIbSw1QA3Nrz7VtlG7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Apr 2023 15:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:10:89:12:09:ae:eb:86:4d:02:18:c1:4e:82:01:16:e6:45:2c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa3a93dd355c886d2c35400dcdaf3ed5b651bb7
Validity
Not Before: Apr 19 18:05:23 2023 GMT
Not After : Apr 17 18:10:23 2024 GMT
Subject: CN=07D20FD15AC0081C9E979E321624D1F74E921D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:87:9f:ea:a6:52:e9:13:dd:b9:d9:ce:54:
80:76:e5:41:13:f1:ce:32:46:42:15:c9:6b:0b:9d:
ba:9b:ad:97:cb:06:33:25:86:ea:73:2a:9c:46:33:
d3:96:f2:7b:ce:72:3b:17:c2:d1:ed:9d:f7:c7:d3:
84:a4:50:7f:70:ba:da:08:7c:25:7e:d0:50:11:97:
ce:4e:e2:5f:2e:6a:82:79:56:10:f6:89:23:66:24:
79:8c:b3:82:54:f2:94:36:a9:3d:0a:e1:fd:c9:cf:
94:bd:23:b8:5a:ca:fb:ae:08:c9:e7:74:40:bc:51:
47:65:71:e9:bd:13:35:67:1c:2e:d6:9f:95:5f:3d:
96:cc:7f:b7:b9:28:39:d6:5e:6f:c2:29:98:1f:65:
99:4f:86:73:ca:0c:a6:ac:9d:1c:7d:c2:97:bd:79:
0a:9d:93:2d:6d:c1:a5:39:ce:1b:27:67:88:97:eb:
81:65:6c:91:91:2e:e9:dc:f6:f4:ea:8b:7b:91:e1:
5b:ac:f0:36:49:d5:e5:37:fb:55:eb:85:58:40:81:
cc:bb:25:69:4c:2d:84:ac:1e:02:48:f0:fb:f8:68:
98:16:05:0f:53:ad:be:a6:a5:16:69:ca:f2:1b:cc:
d7:18:5a:34:7b:5e:a5:bd:b4:72:ba:de:7e:e4:e8:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D2:0F:D1:5A:C0:08:1C:9E:97:9E:32:16:24:D1:F7:4E:92:1D:6B
X509v3 Authority Key Identifier:
keyid:0A:A3:A9:3D:D3:55:C8:86:D2:C3:54:00:DC:DA:F3:ED:5B:65:1B:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/1/0AA3A93DD355C886D2C35400DCDAF3ED5B651BB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqOpPdNVyIbSw1QA3Nrz7VtlG7c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39b226e2-7512-4bab-bec3-13e453abc2b7/1/AS203843.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203843
Signature Algorithm: sha256WithRSAEncryption
e3:37:21:ac:aa:0a:e5:de:c9:ca:6c:12:e7:20:c3:38:19:6e:
29:4b:1a:01:7b:29:a3:72:e1:95:ce:d7:0d:be:06:cc:38:e8:
d6:e2:dc:e3:d8:95:17:55:6c:bd:14:80:1f:ee:86:26:65:87:
1f:e7:27:a2:97:6e:d9:41:cb:47:0e:e2:25:7f:30:99:d4:e7:
78:33:a0:d4:aa:9f:ee:62:de:36:23:5c:73:7c:8e:f7:bb:7d:
d6:eb:8e:7f:b5:eb:b3:be:2b:5c:c6:35:77:0d:02:5b:cf:91:
23:01:45:ff:f3:84:8e:c8:b4:f9:74:a6:17:e6:d2:70:24:d9:
83:da:07:a7:19:ef:1b:52:ed:96:da:64:75:ab:cf:da:d8:90:
2a:2e:44:48:aa:30:83:84:fe:e6:c3:f3:5e:4f:20:32:39:62:
1e:de:67:04:3b:94:5f:98:38:d7:db:90:08:47:54:7e:eb:79:
c2:72:07:f2:a4:74:73:8f:55:7a:55:9d:17:67:00:7a:21:3f:
ad:fe:b8:98:d0:30:31:45:3a:2a:3d:a7:fd:74:f0:ba:4c:b8:
41:bc:25:e0:93:4b:12:e4:78:eb:84:bc:1d:a8:d3:94:84:ea:
bc:4c:20:69:05:77:93:9c:a3:70:91:fe:63:9a:35:8d:3d:62:
1b:d9:09:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 19 18:49:31 2023 by rpki-client on console-fra.rpki-client.org