Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/ZLkUyts_ik035FHPNwJmjLRIrPI.asa
File:                     ZLkUyts_ik035FHPNwJmjLRIrPI.asa (raw, json)
Hash identifier:          SPbBsWohroURBEl28DxtmNiba7IFZbUfgRRzWaEzxEA=
Subject key identifier:   64:B9:14:CA:DB:3F:8A:4D:37:E4:51:CF:37:02:66:8C:B4:48:AC:F2
Certificate issuer:       /CN=ebf371e509735990943b73a85e470f3ea0a41db4
Certificate serial:       019F236880085A14A9B3B31E3AF1BA295CB9
Authority key identifier: EB:F3:71:E5:09:73:59:90:94:3B:73:A8:5E:47:0F:3E:A0:A4:1D:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/ZLkUyts_ik035FHPNwJmjLRIrPI.asa
Signing time:             Thu 02 Jul 2026 15:17:58 +0000
ASPA not before:          Thu 02 Jul 2026 15:17:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214485
Providers:                AS: 151704
                          AS: 214441
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:80:08:5a:14:a9:b3:b3:1e:3a:f1:ba:29:5c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf371e509735990943b73a85e470f3ea0a41db4
        Validity
            Not Before: Jul  2 15:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=64b914cadb3f8a4d37e451cf3702668cb448acf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:09:d7:cf:9f:ba:1e:b1:13:0a:f5:4f:44:
                    6b:61:b7:8d:70:22:c2:6b:89:61:53:93:03:e9:e0:
                    42:b4:23:50:fc:61:28:3d:89:09:fe:f4:da:c7:28:
                    19:19:7b:f1:b0:fb:ae:7d:aa:3c:05:62:63:5a:ce:
                    dd:eb:8e:fb:8c:7b:93:b2:c2:e1:22:eb:6a:7c:e5:
                    da:fb:84:d5:72:4e:92:d2:d1:a1:89:60:a2:0f:30:
                    8f:b9:92:85:a8:51:df:12:73:3b:c9:ea:f3:3c:98:
                    46:74:d8:54:1a:f4:9d:1b:1f:ac:b2:cd:0c:fc:a3:
                    81:30:cc:16:ac:d7:5f:7a:4d:5a:30:ce:d3:4b:e6:
                    d9:7a:11:de:21:56:af:31:0f:21:26:c1:d3:27:fc:
                    03:91:8a:0f:22:ab:73:6c:52:9a:a1:9f:dc:37:8b:
                    86:10:85:ce:3b:a2:76:e7:05:67:c2:81:28:0e:43:
                    fe:cd:38:65:15:ff:36:fa:4b:c0:71:6c:c8:bf:e9:
                    6c:ee:ab:61:65:45:32:0d:e4:a2:ac:5b:73:0a:64:
                    bb:77:87:6d:cf:5e:14:07:5b:63:d0:ec:16:df:69:
                    96:d5:ac:8a:17:b1:2e:9b:34:2e:43:fc:b5:75:18:
                    ba:30:5c:b5:da:e0:f8:f5:50:f0:41:32:83:84:66:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B9:14:CA:DB:3F:8A:4D:37:E4:51:CF:37:02:66:8C:B4:48:AC:F2
            X509v3 Authority Key Identifier:
                keyid:EB:F3:71:E5:09:73:59:90:94:3B:73:A8:5E:47:0F:3E:A0:A4:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/ZLkUyts_ik035FHPNwJmjLRIrPI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/af2d4a-0285-4d75-93e8-b4bb6ac4c144/1/6_Nx5QlzWZCUO3OoXkcPPqCkHbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214485

    Signature Algorithm: sha256WithRSAEncryption
         1b:ba:90:de:70:a0:cd:25:fe:cc:df:70:31:5e:03:14:10:b7:
         2d:9c:a6:30:08:39:11:e5:1c:5e:5e:f9:92:e0:ca:4c:09:65:
         57:a9:5a:11:af:a6:2e:d5:78:b7:d3:27:1d:bc:31:ab:e0:19:
         f1:31:b1:37:f3:49:75:ff:55:38:2f:f7:e4:ff:d8:d2:db:0e:
         aa:bf:84:2f:33:97:89:35:31:c3:08:81:41:a2:50:b4:e7:84:
         36:65:b2:72:26:87:2e:9c:fe:87:4e:c7:48:b7:52:3b:d5:6e:
         58:5f:60:0c:dd:25:1e:4c:fe:9e:d8:18:de:db:9f:50:a3:7c:
         bd:25:19:ca:47:bd:9c:1b:44:47:c5:48:8a:70:73:77:3d:74:
         13:52:46:ce:6e:cd:5a:30:9e:0b:35:3c:1c:20:20:44:c5:e2:
         c3:47:ac:a0:e1:47:20:d6:be:43:60:25:6c:a3:50:f2:d4:63:
         aa:e3:8c:51:64:09:fb:2d:c1:d0:e7:8e:5a:7b:8b:84:53:2e:
         62:88:bd:43:08:3e:71:1c:6f:03:7c:81:7f:b5:9f:92:b0:7f:
         47:a9:82:91:ea:0f:2c:05:58:a9:3c:4c:97:cc:d5:5a:31:04:
         e9:8c:f3:f8:9c:34:ec:96:5b:b9:0e:00:7e:cc:85:79:8c:3c:
         96:3a:d2:53
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8jaIAIWhSps7MeOvG6KVy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjM3MWU1MDk3MzU5OTA5NDNiNzNhODVlNDcwZjNlYTBh
NDFkYjQwHhcNMjYwNzAyMTUxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGI5MTRjYWRiM2Y4YTRkMzdlNDUxY2YzNzAyNjY4Y2I0NDhhY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkggJ18+fuh6xEwr1T0RrYbeNcCLC
a4lhU5MD6eBCtCNQ/GEoPYkJ/vTaxygZGXvxsPuufao8BWJjWs7d6477jHuTssLh
IutqfOXa+4TVck6S0tGhiWCiDzCPuZKFqFHfEnM7yerzPJhGdNhUGvSdGx+sss0M
/KOBMMwWrNdfek1aMM7TS+bZehHeIVavMQ8hJsHTJ/wDkYoPIqtzbFKaoZ/cN4uG
EIXOO6J25wVnwoEoDkP+zThlFf82+kvAcWzIv+ls7qthZUUyDeSirFtzCmS7d4dt
z14UB1tj0OwW32mW1ayKF7EumzQuQ/y1dRi6MFy12uD49VDwQTKDhGY+DQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFGS5FMrbP4pNN+RRzzcCZoy0SKzyMB8GA1UdIwQY
MBaAFOvzceUJc1mQlDtzqF5HDz6gpB20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9OeDVRbHpXWkNVTzNPb1hrY1BQcUNrSGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZjJkNGEtMDI4NS00ZDc1LTkzZTgt
YjRiYjZhYzRjMTQ0LzEvWkxrVXl0c19pazAzNUZIUE53Sm1qTFJJclBJLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hZjJkNGEtMDI4NS00ZDc1LTkzZTgtYjRiYjZhYzRjMTQ0
LzEvNl9OeDVRbHpXWkNVTzNPb1hrY1BQcUNrSGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNF1TANBgkqhkiG
9w0BAQsFAAOCAQEAG7qQ3nCgzSX+zN9wMV4DFBC3LZymMAg5EeUcXl75kuDKTAll
V6laEa+mLtV4t9MnHbwxq+AZ8TGxN/NJdf9VOC/35P/Y0tsOqr+ELzOXiTUxwwiB
QaJQtOeENmWyciaHLpz+h07HSLdSO9VuWF9gDN0lHkz+ntgY3tufUKN8vSUZyke9
nBtER8VIinBzdz10E1JGzm7NWjCeCzU8HCAgRMXiw0esoOFHINa+Q2AlbKNQ8tRj
quOMUWQJ+y3B0OeOWnuLhFMuYoi9Qwg+cRxvA3yBf7WfkrB/R6mCkeoPLAVYqTxM
l8zVWjEE6Yzz+Jw07JZbuQ4AfsyFeYw8ljrSUw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:49:52 2026 by rpki-client