Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/vEZLnR5almH1CGYItYBwVOGJqYY.asa
File:                     vEZLnR5almH1CGYItYBwVOGJqYY.asa (raw, json)
Hash identifier:          Q9dmdkbTJa12zCUuc9rAzbHv2trspyTh+XDW4FOxvK4=
Subject key identifier:   BC:46:4B:9D:1E:5A:96:61:F5:08:66:08:B5:80:70:54:E1:89:A9:86
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       019D1F40E2FFD684EF256B3B82A23A4C71A9
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/vEZLnR5almH1CGYItYBwVOGJqYY.asa
Signing time:             Tue 24 Mar 2026 09:50:39 +0000
ASPA not before:          Tue 24 Mar 2026 09:50:39 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            43043
Providers:                AS: 30823
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1f:40:e2:ff:d6:84:ef:25:6b:3b:82:a2:3a:4c:71:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Mar 24 09:50:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc464b9d1e5a9661f5086608b5807054e189a986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:da:53:96:23:0d:54:d9:0a:2d:e3:59:53:
                    e0:03:3b:93:a2:59:77:0a:34:dc:5d:49:e5:40:2f:
                    5f:d8:c9:bb:69:19:8a:aa:86:77:90:1a:e2:69:0b:
                    77:81:2c:ab:d5:7e:26:a5:5e:ea:bf:bb:91:72:b9:
                    52:f2:cb:50:90:98:a2:04:f3:ca:ef:f6:fd:ef:c3:
                    f2:76:55:8f:75:d6:4e:4b:cd:b8:71:34:37:ea:30:
                    e3:1d:d6:46:a4:d3:78:65:b0:4b:d4:5d:a9:03:ce:
                    2c:81:4b:a8:2e:85:c5:db:11:e2:b9:cf:bb:5b:6f:
                    1c:f6:24:10:de:58:e3:03:e5:58:88:71:d9:e7:bc:
                    19:b2:39:d6:8b:a8:28:69:df:5d:33:f1:21:3c:2b:
                    1a:ea:c6:b1:72:28:d9:06:c4:a3:5a:4a:a0:c9:dc:
                    03:b8:7f:2a:07:e4:63:29:d5:cb:f4:62:5b:bd:34:
                    c8:e5:7a:09:5a:07:f2:c2:78:3e:42:17:54:01:21:
                    12:00:a5:82:83:d0:7c:16:06:f9:76:68:36:2e:d4:
                    27:11:f3:b9:83:cf:34:d3:90:df:59:c1:85:4d:73:
                    9a:81:0c:7f:11:6e:44:33:cd:3b:5b:8b:1e:1f:31:
                    54:c7:f7:61:e7:bb:c1:a4:0a:d8:da:69:74:a1:17:
                    2b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:46:4B:9D:1E:5A:96:61:F5:08:66:08:B5:80:70:54:E1:89:A9:86
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/vEZLnR5almH1CGYItYBwVOGJqYY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43043

    Signature Algorithm: sha256WithRSAEncryption
         2d:93:95:57:c1:7d:94:b2:74:87:dc:8e:2a:82:d7:2c:76:a1:
         01:a6:bc:2a:bb:fc:fc:1f:6b:2a:1d:04:13:33:f8:41:f5:8b:
         ce:28:08:cd:eb:69:5d:60:dc:68:8e:e5:24:92:a2:51:ce:0c:
         bf:d1:f5:53:c0:7c:60:bd:78:a2:34:78:30:e5:dd:1f:e1:db:
         8e:d3:05:01:0e:cb:83:da:12:8d:62:51:f0:fa:27:95:bd:e7:
         69:c3:37:3c:ce:0b:70:a3:05:74:0d:8f:e8:38:02:3d:0b:04:
         db:19:42:f6:15:ef:2e:39:9f:d8:74:52:4f:90:b9:b8:d9:52:
         72:89:62:0e:80:91:60:28:52:37:28:7c:5d:04:4d:c1:54:ef:
         30:6f:bc:1c:ac:cd:b1:b1:1d:a0:75:15:eb:c2:29:87:e5:6b:
         30:c8:ed:03:c8:b4:af:8d:4d:af:05:8d:d0:e5:a9:0f:08:1a:
         eb:04:41:0e:76:79:ee:42:39:9a:f0:a2:40:c3:39:2f:ee:ba:
         ff:68:1b:74:37:77:ee:be:e7:8e:b5:3a:01:7f:8d:1a:6f:3b:
         5a:f5:8e:87:3f:31:d4:cc:53:9c:2f:b4:b5:8b:90:08:8f:b1:
         d6:87:8a:fe:1e:93:27:2c:1e:b6:e0:5b:ef:c4:14:02:dc:21:
         f7:c9:ee:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:16:32 2026 by rpki-client