Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/_Jzbksm-JMXJG_vIupQOGd5OWfA.asa
File:                     _Jzbksm-JMXJG_vIupQOGd5OWfA.asa (raw, json)
Hash identifier:          Tb8L6c/yPd6zHGW5vozp+7vssh8lOxc/2tcpUf5JfNM=
Subject key identifier:   FC:9C:DB:92:C9:BE:24:C5:C9:1B:FB:C8:BA:94:0E:19:DE:4E:59:F0
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       019F1901440722CC23BF96D21606D06AF22C
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/_Jzbksm-JMXJG_vIupQOGd5OWfA.asa
Signing time:             Tue 30 Jun 2026 14:49:01 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:01 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            59944
Providers:                AS: 29075
                          AS: 30781
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:44:07:22:cc:23:bf:96:d2:16:06:d0:6a:f2:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: Jun 30 14:49:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc9cdb92c9be24c5c91bfbc8ba940e19de4e59f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4f:78:32:94:58:a1:1d:36:fd:69:8f:e8:fc:
                    6b:e4:51:a0:4e:d4:3c:fd:e5:3c:e3:d3:34:09:c8:
                    0a:26:5a:51:2d:d9:1b:55:f5:c7:9d:d2:0f:fe:82:
                    6d:85:f4:46:bb:ac:b2:59:18:39:f2:09:fa:a1:b2:
                    75:4d:11:b9:00:73:e2:1e:86:31:ea:e7:68:cc:f9:
                    01:cc:65:49:73:8e:50:ee:af:a9:0b:ea:c4:fb:b4:
                    74:20:24:32:23:70:53:7c:d9:88:b2:ae:04:fb:87:
                    b9:84:0d:b5:22:c5:97:ed:b1:b2:7b:52:58:30:10:
                    24:39:78:b4:d6:70:32:90:31:b7:26:9b:08:d4:24:
                    f9:f6:40:be:0c:43:ef:94:5d:1a:f5:91:ff:9f:5f:
                    c2:ed:0e:9e:bf:b3:60:a2:34:76:a2:c6:b2:7c:69:
                    67:4d:b3:ba:97:1d:f9:86:0c:63:8c:2c:e8:b0:f1:
                    a9:8f:2a:2c:69:dd:49:fc:64:96:29:c7:19:f0:46:
                    8b:31:cb:dd:6c:a4:ce:96:d2:1e:b6:05:30:93:78:
                    91:c0:1a:71:18:69:b2:9f:a7:86:ea:13:eb:d5:a8:
                    00:3c:c8:28:12:07:c0:1d:1a:1a:2c:76:da:23:47:
                    46:49:b8:61:a9:78:e3:3f:03:1b:8e:27:a6:a4:6e:
                    5e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9C:DB:92:C9:BE:24:C5:C9:1B:FB:C8:BA:94:0E:19:DE:4E:59:F0
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/_Jzbksm-JMXJG_vIupQOGd5OWfA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59944

    Signature Algorithm: sha256WithRSAEncryption
         b3:98:bb:f3:34:c5:43:07:b1:ff:3c:01:23:14:31:a2:ec:b8:
         85:97:d8:d5:27:c8:e5:2b:82:10:b8:ce:9e:c8:01:27:83:bc:
         d0:68:4c:d4:36:ed:ea:e9:e5:83:c0:68:99:f5:29:27:1b:c1:
         57:42:98:46:6c:e1:bc:f0:f2:2d:06:b7:29:8c:3a:ff:1e:89:
         94:2b:49:e8:f1:2b:d9:27:54:92:23:10:76:40:90:18:db:f3:
         73:72:25:fa:2c:73:35:0a:47:24:b0:78:c3:80:f0:90:54:36:
         17:f5:00:81:36:72:b1:89:a3:e7:ea:ef:9c:de:5c:b4:58:79:
         1c:5c:6f:d9:af:be:1f:52:2a:74:37:a1:78:23:01:0b:16:9e:
         d7:fa:2b:0f:f7:19:a6:ce:2e:5c:07:df:14:eb:8c:f7:84:fe:
         4b:e9:38:e6:dd:a1:bf:2d:92:c0:bd:9d:9b:89:42:bb:07:24:
         9b:ba:d6:34:34:da:49:72:74:9c:58:d8:b3:bb:4a:9f:7d:30:
         89:35:c1:ac:4d:a1:6b:6d:70:8f:bc:83:b8:53:f1:46:4c:0e:
         7a:55:12:50:70:3b:95:88:20:b4:e2:61:fe:e7:52:27:41:8f:
         f3:f9:d8:86:77:94:af:d6:cf:b9:90:b4:e7:a5:28:ab:2b:5e:
         dc:f7:1c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:58 2026 by rpki-client