Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/6tTmYQwXOKfIx8EFjvxOkACOgVE.asa
File:                     6tTmYQwXOKfIx8EFjvxOkACOgVE.asa (raw, json)
Hash identifier:          B+RAPGXA/BvL3QEc86FbnID2OOj7wYJWGGhX0NgqKgw=
Subject key identifier:   EA:D4:E6:61:0C:17:38:A7:C8:C7:C1:05:8E:FC:4E:90:00:8E:81:51
Certificate issuer:       /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial:       019D2433F7E992102A90AF2A433508AD9012
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/6tTmYQwXOKfIx8EFjvxOkACOgVE.asa
Signing time:             Wed 25 Mar 2026 08:54:38 +0000
ASPA not before:          Wed 25 Mar 2026 08:54:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57342
Providers:                AS: 15657
                          AS: 20562
                          AS: 24785
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:33:f7:e9:92:10:2a:90:af:2a:43:35:08:ad:90:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
        Validity
            Not Before: Mar 25 08:54:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ead4e6610c1738a7c8c7c1058efc4e90008e8151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c2:be:a7:3c:7d:c9:4e:f3:fd:c9:72:25:62:
                    65:93:97:a9:f0:c9:09:b0:b3:69:cb:c4:44:05:93:
                    88:2e:64:1a:42:b1:12:d4:64:8b:fe:e8:94:53:99:
                    8d:cf:4e:1c:33:ea:37:cc:c4:cf:0e:a3:65:c8:8c:
                    80:60:81:ae:15:d5:fe:30:24:c7:bc:71:6b:9c:9f:
                    cb:86:e5:37:f1:53:b3:7b:cd:68:13:87:99:81:9c:
                    26:be:5b:0c:64:f2:58:3e:80:43:c9:b4:57:ba:66:
                    70:e8:52:83:8e:c8:a1:d8:bf:16:d4:4d:a5:7f:a5:
                    cd:39:3a:d4:0f:e8:28:2d:db:e3:5a:76:27:de:eb:
                    12:ac:3d:78:6d:8c:c4:5d:9b:05:26:07:9f:e0:e0:
                    5b:f9:34:69:77:25:14:23:b2:15:3e:00:eb:7c:75:
                    2a:68:be:2d:bf:cd:bd:24:9c:6d:c4:c5:3a:15:5d:
                    bd:98:3c:ea:ef:85:1c:25:b3:af:42:91:20:bc:ae:
                    ef:1d:5e:5b:cf:12:96:8d:05:b8:8a:30:4c:1d:b2:
                    78:ce:68:a3:2b:6a:42:72:d5:09:3c:db:ca:29:78:
                    19:7d:8e:6a:00:b5:86:00:44:16:50:b2:41:e9:f0:
                    6a:90:b2:f5:9f:11:7e:d7:81:51:32:ec:cf:c7:af:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D4:E6:61:0C:17:38:A7:C8:C7:C1:05:8E:FC:4E:90:00:8E:81:51
            X509v3 Authority Key Identifier:
                keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/6tTmYQwXOKfIx8EFjvxOkACOgVE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57342

    Signature Algorithm: sha256WithRSAEncryption
         27:a4:9e:91:aa:5f:c3:67:10:33:a6:8d:5a:3f:be:bd:34:d3:
         b4:f6:9e:4e:03:1a:33:1b:de:47:d9:67:45:3e:86:f7:aa:11:
         7b:5e:5d:97:9a:75:47:79:76:f2:18:8e:9c:16:1d:03:f3:05:
         40:a6:54:6a:ca:e3:5c:b9:c4:81:71:39:c7:fc:3a:4b:29:fe:
         65:2a:35:9d:11:f8:07:6b:df:1f:d4:ce:89:59:cc:20:db:4a:
         3e:4d:52:7d:46:38:f4:10:9c:cf:ce:85:71:7a:55:62:98:3f:
         5a:a2:6d:34:6a:bd:f8:2c:83:26:03:08:2a:1b:6e:c3:db:2f:
         60:0e:4a:42:60:9d:0d:91:79:6e:6f:0a:c9:11:46:32:43:d4:
         1f:d9:a3:7c:4f:74:14:24:c0:3b:39:98:64:88:b4:d3:fc:93:
         c5:4f:e0:cf:cf:4a:5a:cb:2d:7d:07:fa:53:c3:58:d6:d2:85:
         7c:5e:57:1e:c1:f3:bb:ee:2c:b8:cd:23:bd:a5:e6:2f:77:60:
         da:b8:a8:8d:76:ea:a8:7a:8e:41:f0:b8:cd:f4:03:a6:3c:a5:
         97:2a:ed:b2:da:94:59:5d:1f:b7:78:15:a8:17:68:c5:3f:bd:
         44:0f:3f:9f:a1:11:ed:4d:30:0e:13:fd:38:57:e3:7b:4d:29:
         d2:29:37:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:33 2026 by rpki-client