Autonomous System Provider Authorization

$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/6/AS214402.asa
File:                     AS214402.asa (raw, json)
Hash identifier:          O/nHx+W0fVkEPT2XZqHSvyHR+3tFTecWoj98CV93DHs=
Subject key identifier:   BA:61:3F:92:59:52:CD:F4:47:5B:FD:3E:09:94:E1:77:1C:2D:27:05
Certificate issuer:       /CN=88332c8750cc71629e694fddb3615ae083589921
Certificate serial:       1E578187756F89489BD2DBCA4C5B2B821BDF3AEB
Authority key identifier: 88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
Subject info access:      rsync://krill.signalx.cloud/repo/signalx-rpki/6/AS214402.asa
Signing time:             Thu 14 Aug 2025 21:08:19 +0000
ASPA not before:          Thu 14 Aug 2025 21:03:19 +0000
ASPA not after:           Thu 13 Aug 2026 21:08:19 +0000
Customer ASID:            214402
Providers:                AS: 174
                          AS: 2914
                          AS: 6939
                          AS: 9002
                          AS: 215638
Validation:               OK
Signature path:           rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl
                          rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:57:81:87:75:6f:89:48:9b:d2:db:ca:4c:5b:2b:82:1b:df:3a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88332c8750cc71629e694fddb3615ae083589921
        Validity
            Not Before: Aug 14 21:03:19 2025 GMT
            Not After : Aug 13 21:08:19 2026 GMT
        Subject: CN=BA613F925952CDF4475BFD3E0994E1771C2D2705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:19:dd:df:f9:6b:36:c9:8e:00:c7:d5:10:
                    b1:e4:a6:c0:56:4c:bb:4e:96:84:f2:77:e6:e8:16:
                    f3:59:1f:9f:b8:c6:b2:34:5a:86:2b:17:59:60:cf:
                    02:ca:be:41:ee:5f:00:05:30:2c:fd:7e:ac:a4:aa:
                    0a:24:6f:a1:10:68:36:80:43:0b:c2:8c:7d:c2:bc:
                    58:f5:e5:c0:e6:36:18:67:4d:e0:8e:67:a2:28:5d:
                    6d:7e:f7:ae:c0:0a:5c:b7:04:12:6d:6b:57:7a:b4:
                    2f:e5:ed:1a:8c:34:72:ce:0b:ce:ec:f8:2b:b8:12:
                    d3:3a:02:45:fa:78:82:69:21:db:62:2b:d7:8a:82:
                    38:af:6f:d8:60:70:ab:2c:c1:09:13:3d:22:a0:f5:
                    c1:a2:6c:88:68:d8:58:9d:48:89:19:da:c8:c9:74:
                    72:bf:53:de:4d:17:ed:e5:e6:67:a4:b8:e2:4e:6c:
                    ee:9a:26:92:1a:17:09:03:8e:5a:9b:c0:e2:94:c2:
                    11:7c:ca:05:cc:a9:5b:bd:c7:c3:69:f3:36:35:b6:
                    41:49:93:10:f2:2e:67:71:b6:fb:2b:91:db:52:3a:
                    3e:df:70:d3:4b:94:09:89:69:cc:a1:c4:3a:0a:b6:
                    c6:ec:55:81:0a:d0:85:a3:f5:f0:ac:a9:c9:06:b7:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:61:3F:92:59:52:CD:F4:47:5B:FD:3E:09:94:E1:77:1C:2D:27:05
            X509v3 Authority Key Identifier:
                keyid:88:33:2C:87:50:CC:71:62:9E:69:4F:DD:B3:61:5A:E0:83:58:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/88332C8750CC71629E694FDDB3615AE083589921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDMsh1DMcWKeaU_ds2Fa4INYmSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/6/AS214402.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214402

    Signature Algorithm: sha256WithRSAEncryption
         00:42:95:7b:ed:d7:4c:ac:d9:ba:7e:f0:27:04:72:65:37:f4:
         9c:77:f2:09:1a:2d:51:c2:9e:3e:a3:24:85:33:af:79:a7:09:
         b3:1e:8a:c7:ff:87:d0:54:fb:b8:86:f8:77:df:90:c8:0a:77:
         e4:f4:9d:4b:3f:af:d5:e8:3f:8a:83:96:0d:37:75:0c:fb:4a:
         e1:e3:55:13:5b:46:9c:e9:5c:3d:64:84:2d:5d:0f:81:52:c1:
         63:f9:61:5f:57:00:9e:07:a1:7b:82:76:87:51:e3:01:96:00:
         1d:ff:fa:31:01:4d:4b:92:90:02:3a:02:0a:54:85:f2:ae:f7:
         67:59:a4:7e:c6:0b:35:e5:d9:01:d1:6f:35:a2:25:6b:99:ff:
         7d:67:2a:7f:47:5d:9a:3d:c0:82:a6:22:3a:d4:bf:69:04:0e:
         83:31:5b:1e:b7:c3:9c:93:9a:04:e6:7b:5d:16:e5:cf:48:a5:
         5c:2c:ab:16:fe:3a:66:17:cf:12:d1:9a:f6:60:c2:6c:1f:d1:
         7d:03:6d:d1:f9:da:0a:ca:4b:ce:f4:f7:cc:e7:07:cc:4e:4e:
         60:4c:74:20:e7:60:7f:7f:d7:eb:f3:da:a4:c7:a7:77:66:29:
         30:9b:fd:ab:d9:68:60:3a:c0:72:aa:38:ca:a2:22:6a:96:a6:
         75:e4:df:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:20 2025 by rpki-client