Autonomous System Provider Authorization
$ rpki-client -vvvf rsync.krill.clnexus.dev/repo/CLNexus/0/AS214420.asa
File: AS214420.asa (raw, json)
Hash identifier: 66v4OmHeTbbUr0HH9Y7Fajs3vTe+G9nD/0Jt+f7fWpg=
Subject key identifier: 10:1D:ED:22:73:8E:EA:71:12:A0:A8:62:3B:48:1C:A8:B3:48:EC:49
Certificate issuer: /CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Certificate serial: 5DDE29F1D39D4F9F97296DD3B5F13C7B169B3236
Authority key identifier: 3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject info access: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/AS214420.asa
Signing time: Thu 29 Oct 2026 13:52:51 +0000
ASPA not before: Thu 29 Oct 2026 13:47:51 +0000
ASPA not after: Thu 28 Oct 2027 13:52:51 +0000
Customer ASID: 214420
Providers: AS: 835
AS: 6939
AS: 34927
AS: 47272
AS: 52025
AS: 204464
AS: 207841
AS: 209735
AS: 215638
AS: 219189
Validation: OK
Signature path: rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:de:29:f1:d3:9d:4f:9f:97:29:6d:d3:b5:f1:3c:7b:16:9b:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db14c691888b4ad8a6f00f3305184fa3c64833f
Validity
Not Before: Oct 29 13:47:51 2026 GMT
Not After : Oct 28 13:52:51 2027 GMT
Subject: CN=101DED22738EEA7112A0A8623B481CA8B348EC49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:d1:61:8e:05:d1:c0:c7:b6:e1:89:d6:f7:
e4:aa:98:61:c5:18:e3:98:b2:0d:8b:53:0a:d5:b7:
0f:8b:a5:49:35:58:99:f0:4e:34:00:a2:ff:9b:47:
18:f5:29:2f:2c:d6:0f:7f:1d:f1:9c:19:05:23:44:
b2:ad:36:ca:f4:79:4c:ff:7a:9d:da:4b:5b:52:10:
af:d1:02:d8:da:34:19:59:20:b2:08:ac:46:bf:ea:
5c:8e:35:f5:e8:97:59:ea:75:5e:73:c9:c8:21:8e:
ce:d7:1e:20:73:68:b5:ad:96:6b:3b:c5:1c:eb:92:
70:6e:d2:4b:b3:44:63:cb:6d:b4:f8:e1:07:6f:9b:
89:79:cc:41:94:8a:ed:49:02:1d:82:1c:df:ad:ba:
73:0c:dc:1c:75:18:4f:a7:2e:de:94:4e:55:33:f0:
eb:0c:a0:5c:5a:82:4b:ad:03:b6:ef:f6:ac:26:0d:
79:b4:55:51:bb:a4:18:89:1b:be:e8:50:78:9c:f5:
30:f2:e3:7b:55:21:0e:60:a7:53:e2:69:0d:37:7b:
ad:44:b0:30:9f:90:cb:fe:14:bf:3d:56:7a:b7:8d:
a1:0c:e1:e6:0b:d3:b8:f2:f5:d6:29:e7:b1:98:56:
ac:90:40:d4:81:b7:13:17:19:bf:a5:64:76:b0:95:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1D:ED:22:73:8E:EA:71:12:A0:A8:62:3B:48:1C:A8:B3:48:EC:49
X509v3 Authority Key Identifier:
keyid:3D:B1:4C:69:18:88:B4:AD:8A:6F:00:F3:30:51:84:FA:3C:64:83:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/3DB14C691888B4AD8A6F00F3305184FA3C64833F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbFMaRiItK2KbwDzMFGE-jxkgz8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexus/0/AS214420.asa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214420
Signature Algorithm: sha256WithRSAEncryption
71:3f:94:12:92:eb:bd:3d:31:21:b2:b1:da:37:d2:f2:6f:a3:
4f:7a:d0:7d:01:ef:a8:27:5d:bc:ea:53:de:1d:ef:da:39:69:
19:61:b7:c3:64:21:6f:7a:79:01:d9:89:f8:12:14:8c:57:11:
81:f5:59:bc:ca:0a:74:da:fc:57:c6:29:ef:50:19:d0:29:05:
2c:cd:94:25:13:c6:40:3f:85:f1:a8:f8:35:37:41:42:56:38:
df:8f:5f:65:26:b3:8d:c0:f1:0a:9e:26:e2:6d:10:54:4a:14:
e4:9b:33:29:ed:cd:3f:00:4d:4e:4e:ae:8f:6d:88:e9:3e:e7:
95:88:e4:99:23:d9:c7:ad:85:9b:ca:61:fc:f2:c4:e4:20:65:
45:9f:82:41:bc:32:4d:b6:ab:3b:34:6c:c0:6c:81:fb:46:48:
a5:cb:85:66:3a:e6:d7:30:87:e7:af:2a:23:4f:84:f6:88:c1:
0d:ef:8c:85:08:d2:8a:01:d3:40:09:be:be:62:c4:00:1d:ca:
b2:7f:4b:c4:de:e0:14:ec:fb:e2:6d:38:82:af:6e:a0:45:22:
39:b5:6b:1d:6c:01:7c:cd:0c:d8:d2:c7:77:ac:77:f3:97:32:
f2:9c:f5:40:3c:30:b8:6e:5e:37:8f:da:5b:e0:8e:78:e4:7b:
2e:9d:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:51 2026 by rpki-client