Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/flO6XJpnIFOsdZyjDNefmOQ-G_w.asa
File:                     flO6XJpnIFOsdZyjDNefmOQ-G_w.asa (raw, json)
Hash identifier:          MR9nPjOlXBd3N+fXKFHrapKtNEWrnTEaOnHmqRgXcfM=
Subject key identifier:   7E:53:BA:5C:9A:67:20:53:AC:75:9C:A3:0C:D7:9F:98:E4:3E:1B:FC
Certificate issuer:       /CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Certificate serial:       019D01DB6FA541FE0DEDA496F198E223B05D
Authority key identifier: E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/flO6XJpnIFOsdZyjDNefmOQ-G_w.asa
Signing time:             Wed 18 Mar 2026 16:50:51 +0000
ASPA not before:          Wed 18 Mar 2026 16:50:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200029
Providers:                AS: 20473
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:01:db:6f:a5:41:fe:0d:ed:a4:96:f1:98:e2:23:b0:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e136c140d57c0603981d9046d4c72aadc6497b8f
        Validity
            Not Before: Mar 18 16:50:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7e53ba5c9a672053ac759ca30cd79f98e43e1bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:de:ee:db:ca:a9:a1:14:09:aa:08:88:fb:48:
                    c7:7f:ae:d0:d8:3c:62:c7:05:3f:ea:23:5d:1d:26:
                    40:5d:04:3d:1e:6e:15:02:b0:82:f1:36:5c:05:27:
                    c0:cf:0f:8e:ec:95:11:aa:7b:ff:60:06:72:02:99:
                    6b:86:c4:1d:d6:f8:53:fb:97:1f:4b:34:4a:90:1a:
                    8d:84:cd:f4:1a:3d:09:71:1b:24:9b:7c:02:6d:22:
                    50:67:d2:13:ff:6a:f8:db:72:17:8c:ba:2c:e5:b6:
                    7f:c2:6b:58:e8:b6:9d:37:fc:35:44:26:4a:91:07:
                    e1:ce:a5:73:c7:6a:b2:cf:6d:0e:93:07:c7:0f:25:
                    cd:a2:e9:4a:b4:35:7b:70:dd:aa:f1:81:ad:f3:c4:
                    9b:44:cf:c2:0e:61:28:94:1f:2d:00:ed:6a:5a:fb:
                    a5:cd:e2:b7:ca:e5:34:bf:53:73:bc:7b:5a:f1:16:
                    5c:5f:d8:66:97:fe:23:b5:78:d3:b5:58:67:ee:6a:
                    d2:00:86:4f:8c:a2:23:7b:17:eb:ba:8d:4d:45:2d:
                    5b:ac:7e:d3:56:55:ba:52:a0:f7:64:4f:53:64:d3:
                    aa:d8:26:33:25:da:95:04:ad:a9:9c:79:94:23:a6:
                    30:9c:fd:ea:d8:e4:c3:5b:5d:7e:91:d0:18:8f:fb:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:53:BA:5C:9A:67:20:53:AC:75:9C:A3:0C:D7:9F:98:E4:3E:1B:FC
            X509v3 Authority Key Identifier:
                keyid:E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/flO6XJpnIFOsdZyjDNefmOQ-G_w.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200029

    Signature Algorithm: sha256WithRSAEncryption
         a3:84:32:13:21:8d:a4:ea:ab:d4:02:06:e9:6b:d1:1b:6b:15:
         55:67:2d:e6:ec:a2:91:0c:59:9f:59:7f:3d:3f:c5:b8:cd:51:
         94:65:25:50:8a:0e:7f:e6:7a:6d:e1:4f:c1:32:79:07:44:34:
         3d:91:b0:52:c7:b6:56:fd:f4:26:b1:d3:98:71:51:cb:b1:13:
         7f:d6:ae:d3:28:69:8c:e7:23:fa:4c:aa:1a:69:d0:6a:aa:51:
         2d:87:7c:0a:2d:04:a0:03:cb:b2:8f:b1:ec:73:35:db:5b:d0:
         d8:19:46:75:e1:c2:61:84:b5:c7:02:da:42:e6:a6:9e:16:b0:
         13:85:11:fc:cc:7f:5c:24:1c:a0:e1:70:99:10:c2:5c:a9:6b:
         bc:4f:79:84:9c:5a:2e:92:ae:ea:04:fe:39:bf:3f:96:e1:40:
         84:a1:46:f1:b1:86:75:6d:cc:b3:1c:45:86:37:50:94:67:81:
         cc:67:2b:57:51:56:d5:5a:8d:21:e9:53:d5:4c:99:5c:0c:03:
         8a:bb:9c:8c:aa:9a:dc:1f:a2:39:45:50:5a:16:7a:ea:f2:a4:
         6f:d4:40:38:2d:df:72:36:78:b9:85:37:cf:fe:da:83:7a:b4:
         7b:54:33:62:e3:05:2a:fb:12:bc:b0:56:38:7a:7d:16:97:e2:
         51:b8:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:41 2026 by rpki-client