Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/uLHDG20LgDtIDok5cdpddB117_0.asa
File:                     uLHDG20LgDtIDok5cdpddB117_0.asa (raw, json)
Hash identifier:          CoRJYMLSdyljOtAPY/JC2kVIDZio2IfAAr+AkcCMxTg=
Subject key identifier:   B8:B1:C3:1B:6D:0B:80:3B:48:0E:89:39:71:DA:5D:74:1D:75:EF:FD
Certificate issuer:       /CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Certificate serial:       01A1D4F51304B92267BBB90619D497A182E2
Authority key identifier: 45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/uLHDG20LgDtIDok5cdpddB117_0.asa
Signing time:             Fri 13 Nov 2026 12:49:53 +0000
ASPA not before:          Fri 13 Nov 2026 12:49:53 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            41665
Providers:                AS: 44324
                          AS: 62246
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 15:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d4:f5:13:04:b9:22:67:bb:b9:06:19:d4:97:a1:82:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
        Validity
            Not Before: Nov 13 12:49:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b8b1c31b6d0b803b480e893971da5d741d75effd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f8:30:50:4c:a4:16:00:35:cd:5e:f9:ad:e8:
                    a5:35:d4:d5:59:a5:ce:1d:12:3c:86:d2:55:51:b5:
                    41:9f:02:8b:93:2a:e6:82:6a:75:cb:36:8b:7b:54:
                    20:3e:2a:31:93:a5:b8:87:49:9f:3f:1d:1c:69:3f:
                    14:79:87:2d:32:09:a8:18:6c:2b:33:3f:36:b2:3b:
                    72:0e:22:ae:3e:36:ef:75:12:20:82:03:35:6a:61:
                    5a:64:57:9b:65:1b:64:45:ac:b0:d3:87:a5:07:29:
                    c3:33:11:2a:c4:c3:0a:6d:24:48:32:6c:24:ae:55:
                    69:56:3a:bf:03:19:d0:8f:a4:16:10:74:35:57:86:
                    a5:a0:6a:e4:1a:33:dc:4e:8a:08:cb:14:b6:08:28:
                    5a:98:04:f1:c3:9b:72:11:a5:93:5e:d6:cf:83:ad:
                    1f:9e:9b:b8:64:f3:8f:cc:f9:3e:11:48:ba:07:a5:
                    31:c7:11:a3:57:71:7d:07:60:2f:a3:63:8e:c4:98:
                    a2:ce:f7:be:ae:7d:0b:0a:24:22:03:6a:8a:21:54:
                    09:aa:ba:e3:1c:16:fd:33:72:cf:37:a1:65:74:03:
                    a2:5c:9b:12:fc:9b:70:b4:a2:27:c8:28:f2:39:f1:
                    56:3f:c5:8c:7d:24:b0:a4:25:a0:57:dc:ee:65:30:
                    59:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B1:C3:1B:6D:0B:80:3B:48:0E:89:39:71:DA:5D:74:1D:75:EF:FD
            X509v3 Authority Key Identifier:
                keyid:45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/uLHDG20LgDtIDok5cdpddB117_0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41665

    Signature Algorithm: sha256WithRSAEncryption
         4f:a3:d5:69:dd:bb:51:0b:ed:e5:93:4b:9c:d3:00:15:1d:2f:
         3e:6a:bb:7d:32:f3:59:47:8d:a7:8f:a3:94:2b:51:59:c2:a1:
         c8:ff:a9:f7:7a:1b:4e:7a:4e:b7:d7:fc:6d:64:62:66:c5:55:
         16:e2:05:a9:b5:1f:93:41:33:ad:c4:2e:43:ec:b1:19:36:ce:
         d7:72:ba:1f:3d:c7:fc:8d:34:e9:fb:08:89:03:cc:20:42:d7:
         c7:70:04:98:59:46:72:45:84:21:67:7a:21:df:7f:29:7d:55:
         e4:1b:f8:32:1f:fb:40:7f:52:9e:26:4e:0c:4e:b0:71:cf:77:
         5e:4e:34:1d:6f:aa:c1:25:9a:3c:dc:8d:b8:ab:6b:28:5b:7d:
         a8:0a:68:bc:14:cc:bc:6c:73:d8:3d:75:50:47:ea:16:57:97:
         8d:fc:04:15:b6:47:87:cc:30:0b:d1:4e:56:22:98:03:5e:16:
         0b:3d:89:8e:c6:21:14:73:47:5e:92:f1:4a:02:5d:c3:7c:7c:
         44:0e:66:b4:02:36:e0:0b:5c:6b:c2:16:76:74:8c:7a:80:0a:
         ca:1e:58:b8:53:46:2f:92:78:85:02:a9:1a:17:3d:77:ab:a8:
         dc:87:5e:20:d1:fe:55:71:35:58:00:fb:67:68:18:ad:12:9d:
         8c:9f:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:51:26 2026 by rpki-client