Autonomous System Provider Authorization

$ rpki-client -vvf krill.signalx.cloud/repo/signalx-rpki/5/AS214714.asa
File:                     AS214714.asa (raw, json)
Hash identifier:          PED5z2dY0hfFQaBWtbU7/ozAXZDCpyrowDusGyT5KM0=
Subject key identifier:   56:3B:26:EC:AF:66:59:43:4D:0C:AF:45:C9:C1:0E:6F:EA:F5:C9:15
Certificate issuer:       /CN=df41a1b5b6cd57dc9ea57020807fe91b3ba4fd4d
Certificate serial:       4F5766B0DCE14B98C46687A36FF649198F6EA1DA
Authority key identifier: DF:41:A1:B5:B6:CD:57:DC:9E:A5:70:20:80:7F:E9:1B:3B:A4:FD:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30GhtbbNV9yepXAggH_pGzuk_U0.cer
Subject info access:      rsync://krill.signalx.cloud/repo/signalx-rpki/5/AS214714.asa
Signing time:             Sat 02 Aug 2025 01:02:24 +0000
ASPA not before:          Sat 02 Aug 2025 00:57:24 +0000
ASPA not after:           Sat 01 Aug 2026 01:02:24 +0000
Customer ASID:            214714
Providers:                AS: 214402
Validation:               OK
Signature path:           rsync://krill.signalx.cloud/repo/signalx-rpki/5/DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.crl
                          rsync://krill.signalx.cloud/repo/signalx-rpki/5/DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/30GhtbbNV9yepXAggH_pGzuk_U0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 20:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:57:66:b0:dc:e1:4b:98:c4:66:87:a3:6f:f6:49:19:8f:6e:a1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df41a1b5b6cd57dc9ea57020807fe91b3ba4fd4d
        Validity
            Not Before: Aug  2 00:57:24 2025 GMT
            Not After : Aug  1 01:02:24 2026 GMT
        Subject: CN=563B26ECAF6659434D0CAF45C9C10E6FEAF5C915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:bf:0e:06:61:bf:9a:d8:b3:d9:90:72:d5:
                    b2:25:3f:27:9f:93:68:a6:02:6d:14:32:03:a8:c6:
                    3f:ca:7e:3c:92:59:80:31:bb:56:a3:66:af:a4:44:
                    a4:49:74:eb:4c:ac:ee:56:28:eb:cf:dc:2d:39:38:
                    98:91:a5:7f:42:d2:f9:3a:70:d9:86:82:1c:ae:3b:
                    8b:f0:17:6f:20:4c:f2:b7:e9:60:3b:b1:7f:1b:0a:
                    26:79:e1:86:32:ad:20:4d:2f:5e:3b:c7:6d:f8:69:
                    7d:d6:18:ea:ac:69:b8:f1:56:11:f5:45:c5:64:6d:
                    0b:02:dd:0c:f5:c8:8d:3d:6e:b5:b7:cc:69:f8:49:
                    04:a5:5c:04:4d:b3:80:a3:f6:6c:41:43:46:9b:b5:
                    1a:1a:05:96:c3:ad:17:cd:3e:10:37:3b:b7:6d:28:
                    1e:33:c2:9a:8d:0d:bb:a6:e7:74:5e:fa:96:2f:61:
                    22:34:86:ac:a2:d1:38:0a:fd:32:9e:ea:9a:a1:69:
                    9c:15:2c:d0:84:2e:64:c1:6f:fc:2e:df:b8:f2:1d:
                    73:b0:14:b6:bd:1b:f4:ef:34:a0:7a:fa:f9:d1:0f:
                    e6:c4:e5:b2:38:47:fe:6e:e3:7b:a4:40:ab:32:ed:
                    5a:53:d3:df:08:f6:14:74:d9:c7:48:f7:f5:29:42:
                    ad:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3B:26:EC:AF:66:59:43:4D:0C:AF:45:C9:C1:0E:6F:EA:F5:C9:15
            X509v3 Authority Key Identifier:
                keyid:DF:41:A1:B5:B6:CD:57:DC:9E:A5:70:20:80:7F:E9:1B:3B:A4:FD:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.signalx.cloud/repo/signalx-rpki/5/DF41A1B5B6CD57DC9EA57020807FE91B3BA4FD4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30GhtbbNV9yepXAggH_pGzuk_U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.signalx.cloud/repo/signalx-rpki/5/AS214714.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214714

    Signature Algorithm: sha256WithRSAEncryption
         94:4c:89:56:0a:de:ec:f2:c3:7c:41:a1:06:f8:e2:2b:3c:df:
         b2:a4:4d:6e:99:0e:ba:d5:49:20:7f:6b:08:5a:fe:8e:7b:f2:
         cf:e1:9d:ec:3c:c0:c7:53:60:82:ad:87:2e:61:40:20:43:a4:
         b3:4c:4e:4a:11:7e:b4:d3:e7:2a:8e:2b:ff:46:63:79:2e:2e:
         1a:1b:9c:ea:a1:be:2c:32:6b:c7:01:42:e4:3a:b9:24:3e:13:
         6b:d7:91:70:c3:7d:82:b5:dd:48:6c:0c:9a:a8:55:90:72:80:
         dd:d6:e7:b6:84:92:79:d9:76:51:37:ab:57:15:d7:09:c6:b2:
         71:f3:6e:dd:df:d8:fd:70:3b:ca:31:bd:51:04:d0:59:d7:a3:
         84:75:d3:4d:c7:c6:50:fe:62:3b:29:8d:8b:ed:46:f3:5e:70:
         8c:13:9d:75:b9:c2:70:0f:fe:dc:1d:69:11:95:8e:19:20:c5:
         9d:a6:20:46:90:3d:4c:83:9f:b9:9c:d2:8d:5f:cf:60:26:b8:
         34:95:df:62:20:14:23:f7:59:49:79:5f:ad:e5:7b:11:cb:96:
         57:25:fa:bf:65:df:09:3c:75:88:fb:01:41:c9:dd:1c:fd:be:
         27:fe:f1:18:41:aa:e8:57:55:f2:aa:1c:5a:1e:7e:37:d2:68:
         62:ae:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:38:24 2025 by rpki-client