Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/sKwkfCXbsIoN8Tz06VbLnX982Mw.asa
File:                     sKwkfCXbsIoN8Tz06VbLnX982Mw.asa (raw, json)
Hash identifier:          71Gnrq1SXo9YWAgxUMMoZvsmt9ojmvRIGQ+aSBy2/Tk=
Subject key identifier:   B0:AC:24:7C:25:DB:B0:8A:0D:F1:3C:F4:E9:56:CB:9D:7F:7C:D8:CC
Certificate issuer:       /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial:       019F190156DCDE1E1A9005C00E23B118AF93
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/sKwkfCXbsIoN8Tz06VbLnX982Mw.asa
Signing time:             Tue 30 Jun 2026 14:49:05 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:05 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            59715
Providers:                AS: 6762
                          AS: 12874
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:56:dc:de:1e:1a:90:05:c0:0e:23:b1:18:af:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
        Validity
            Not Before: Jun 30 14:49:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b0ac247c25dbb08a0df13cf4e956cb9d7f7cd8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:ab:31:22:d2:aa:63:23:d3:1a:e5:ff:ce:
                    ac:76:3d:d1:0c:61:47:36:07:0e:12:92:5e:56:ac:
                    88:45:ef:4f:92:ff:8a:8a:8f:27:26:d8:c3:b8:62:
                    a1:a5:1d:2c:0a:61:d9:19:75:e0:54:d1:52:a1:19:
                    12:08:41:7c:74:4d:ca:aa:ab:7f:ad:78:cf:0d:df:
                    da:4d:98:2d:d5:17:1d:7a:3b:7e:f8:4b:4a:e8:f8:
                    e6:35:04:22:ed:00:68:87:30:89:d8:18:87:74:60:
                    e1:28:d3:77:73:32:53:1f:f0:91:1c:20:a0:80:c9:
                    7d:26:8c:de:50:19:14:6f:2b:2f:02:fa:7f:36:bc:
                    81:31:0f:3c:78:f0:ad:b8:73:d1:e7:a1:4d:d6:70:
                    b6:66:ec:05:9b:45:f2:9e:16:d0:6f:c1:f9:10:04:
                    a5:53:00:7e:da:6c:2a:7d:b2:f6:ca:e8:c1:f7:22:
                    88:e6:ae:80:4b:cb:d1:2d:dc:c9:e0:c7:c0:25:2e:
                    87:a4:ca:4b:e6:fa:e4:0a:d3:0f:c1:d0:52:e8:2f:
                    ab:c4:4c:63:a6:de:cd:d9:61:34:a9:54:8d:d6:ed:
                    03:7e:f1:1d:58:ea:17:6e:9e:84:fb:63:ca:87:f4:
                    dd:bd:b1:2b:be:20:64:b8:07:50:f9:11:4c:df:90:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:24:7C:25:DB:B0:8A:0D:F1:3C:F4:E9:56:CB:9D:7F:7C:D8:CC
            X509v3 Authority Key Identifier:
                keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/sKwkfCXbsIoN8Tz06VbLnX982Mw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59715

    Signature Algorithm: sha256WithRSAEncryption
         37:f0:58:1c:da:1a:98:e8:06:8a:58:24:61:b3:93:4d:1f:8d:
         49:0a:fa:9c:50:3d:ce:a3:9c:a9:00:d6:b7:95:78:7a:e5:bd:
         d8:3f:ed:b4:27:09:00:1b:c7:e3:20:6f:6e:a8:aa:a5:96:ac:
         55:c8:da:07:98:f6:94:0d:fd:6a:e8:76:30:e9:ac:6f:e9:fe:
         09:d1:d3:e0:0d:3b:a4:6f:30:11:77:d0:92:69:36:a3:0f:70:
         59:a8:54:e3:d8:c7:b0:57:71:08:be:46:53:fa:ea:c7:70:bc:
         4c:c3:96:fe:03:bf:11:28:26:7a:65:b9:0d:76:2f:c3:bb:8e:
         a9:51:9b:49:40:08:37:a2:66:22:db:c5:59:63:20:5d:b5:14:
         7e:36:79:48:8e:8d:4f:da:0d:b9:b8:ab:ce:58:1e:0a:ed:b3:
         f5:fa:78:11:f5:e3:fc:72:4a:3f:d4:4e:13:4e:20:4b:2c:d4:
         2b:de:f4:a8:a1:08:16:de:87:cf:4b:90:51:2e:cb:49:2f:1f:
         25:59:93:4c:a8:38:30:f6:b0:d1:6c:3d:89:73:d9:c5:66:b3:
         fc:34:71:04:8f:c2:81:76:59:c3:ae:b0:d9:f6:6c:eb:92:78:
         c9:0b:aa:2a:0a:df:75:8c:f7:b7:09:b7:3f:cd:c6:18:5c:97:
         16:8b:06:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:17 2026 by rpki-client