Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/z5djvf3-CKw5x5kwKKqaRZmCe2I.asa
File:                     z5djvf3-CKw5x5kwKKqaRZmCe2I.asa (raw, json)
Hash identifier:          ZvW8uuufeamy31o99OQxuIpFF7lTKfAP5mzTU9+Pnks=
Subject key identifier:   CF:97:63:BD:FD:FE:08:AC:39:C7:99:30:28:AA:9A:45:99:82:7B:62
Certificate issuer:       /CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
Certificate serial:       019D24E93E17FE28FE9FF770B8DDAF42F790
Authority key identifier: D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/z5djvf3-CKw5x5kwKKqaRZmCe2I.asa
Signing time:             Wed 25 Mar 2026 12:12:38 +0000
ASPA not before:          Wed 25 Mar 2026 12:12:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199771
Providers:                AS: 21473
                          AS: 60345
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:e9:3e:17:fe:28:fe:9f:f7:70:b8:dd:af:42:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e1f581cd11e1d0a2b693a53d3a5b6fded4dfa
        Validity
            Not Before: Mar 25 12:12:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cf9763bdfdfe08ac39c7993028aa9a4599827b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:7f:af:24:07:db:27:64:c2:9a:10:48:99:
                    ac:af:51:aa:9a:2f:28:c2:be:2d:8b:90:08:66:b3:
                    29:86:75:eb:1b:0c:b6:4c:13:3d:9f:25:f0:f3:e8:
                    ba:1c:98:6e:fc:77:42:7b:25:a3:ca:d3:a0:84:f8:
                    1a:1d:f9:9c:15:1b:cc:bc:87:00:bc:42:3c:44:5c:
                    c5:e5:01:7a:ae:02:7f:d6:4d:a5:87:6d:76:e0:75:
                    fd:dd:fa:62:01:a2:62:c3:71:7e:56:13:6a:cc:a3:
                    56:4d:f2:ab:c5:a1:1b:fe:c2:dd:84:69:74:e9:f2:
                    94:4e:e7:33:1b:77:17:ce:a5:9d:65:11:63:f9:e0:
                    92:8e:fa:44:c3:bc:c4:59:f9:e2:70:6e:f2:7d:fc:
                    d8:3e:2d:23:4a:da:03:e7:06:3d:0a:67:12:a7:e8:
                    3e:48:0f:8f:fc:9d:9d:15:23:56:cb:c1:82:f3:cb:
                    1f:87:fa:1c:ca:f7:47:5f:21:b8:00:4c:04:21:09:
                    d5:ef:6f:d4:50:20:3a:33:62:0a:f0:d0:5b:79:c9:
                    e1:90:4c:e5:dc:5b:ef:22:58:5a:70:12:b9:ea:06:
                    29:aa:3d:de:6f:d1:e3:ad:51:49:a6:d3:02:0a:1f:
                    cf:7c:76:60:22:cf:6b:43:5b:4e:03:70:04:1d:ed:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:97:63:BD:FD:FE:08:AC:39:C7:99:30:28:AA:9A:45:99:82:7B:62
            X509v3 Authority Key Identifier:
                keyid:D2:2E:1F:58:1C:D1:1E:1D:0A:2B:69:3A:53:D3:A5:B6:FD:ED:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i4fWBzRHh0KK2k6U9Oltv3tTfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/z5djvf3-CKw5x5kwKKqaRZmCe2I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f5b43a-cbe6-4ac5-9758-3fa19462313c/1/0i4fWBzRHh0KK2k6U9Oltv3tTfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199771

    Signature Algorithm: sha256WithRSAEncryption
         60:86:29:25:86:32:65:1a:2f:b2:c0:ab:f7:b5:e4:4c:f7:7d:
         c6:22:8c:59:8f:77:92:da:d1:43:e3:ae:d7:11:39:25:e4:b6:
         5a:ab:2d:dd:9a:3e:45:d2:c5:f5:a9:5b:95:7a:40:8b:4e:33:
         2f:6e:a7:ed:c0:d7:d1:15:c8:64:6b:22:fc:4e:5f:b8:b3:f9:
         77:fa:ea:49:65:fa:88:af:76:b5:0e:d1:aa:3c:f6:88:7d:72:
         82:25:21:57:03:21:f8:16:5e:5e:ec:a6:93:19:81:95:00:76:
         cc:79:d0:8e:94:92:51:3a:6e:80:55:6a:73:79:5c:ab:0e:7d:
         9a:36:24:f3:db:b7:07:e8:80:9f:9d:f0:e7:86:5e:f5:79:b9:
         2b:c1:23:19:29:af:7f:e9:f3:30:2b:ce:c9:8e:14:da:e8:ee:
         2e:c2:1e:ea:00:da:96:38:c9:64:46:be:98:79:87:e1:f5:04:
         30:66:e6:a3:a5:f5:9f:da:48:de:cf:98:07:30:a1:49:c3:fa:
         df:f4:92:79:3b:ef:46:30:f7:cd:3f:69:39:6e:fd:5a:75:72:
         2e:94:ab:7b:8a:a4:23:dd:a5:85:e1:aa:e0:b2:c0:b0:e0:a5:
         4f:c2:2d:7e:96:2f:82:ae:b7:53:b6:d2:f2:4c:80:ab:0b:5e:
         0c:79:45:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:22 2026 by rpki-client