Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/k8cKlqP4deq3hyxYaiQ4GhXCA5I.asa
File:                     k8cKlqP4deq3hyxYaiQ4GhXCA5I.asa (raw, json)
Hash identifier:          CisMnnWLCTdGxCNLWXEduRycUM2+pYKyAFoWjqKXGyI=
Subject key identifier:   93:C7:0A:96:A3:F8:75:EA:B7:87:2C:58:6A:24:38:1A:15:C2:03:92
Certificate issuer:       /CN=24f266d831fc27a42a3208899e8df626c4571007
Certificate serial:       019F23686FA8F6218BC2A731ABE08BB407D6
Authority key identifier: 24:F2:66:D8:31:FC:27:A4:2A:32:08:89:9E:8D:F6:26:C4:57:10:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/k8cKlqP4deq3hyxYaiQ4GhXCA5I.asa
Signing time:             Thu 02 Jul 2026 15:17:54 +0000
ASPA not before:          Thu 02 Jul 2026 15:17:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216432
Providers:                AS: 20473
                          AS: 204844
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:6f:a8:f6:21:8b:c2:a7:31:ab:e0:8b:b4:07:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24f266d831fc27a42a3208899e8df626c4571007
        Validity
            Not Before: Jul  2 15:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=93c70a96a3f875eab7872c586a24381a15c20392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:11:ad:c2:11:9f:fb:fd:ec:f5:66:e1:35:
                    3c:87:ae:28:3b:14:32:8e:b4:7e:4c:9a:63:08:eb:
                    31:b4:ff:aa:86:d8:2e:f4:2d:12:13:a9:cd:d7:07:
                    7e:60:1a:34:80:ff:8f:6b:2c:2b:05:02:90:0e:1b:
                    52:7a:dd:36:d8:e9:9d:5d:6c:78:c2:f8:e4:e5:de:
                    31:48:ea:7f:d8:e9:fd:ed:6c:37:12:40:83:f4:32:
                    13:ed:e3:f9:c1:80:8f:62:f0:55:4e:b7:d3:f8:c6:
                    8a:d9:c8:97:fc:9e:3f:71:10:01:d3:d5:71:fe:0e:
                    bb:ba:d2:e1:c4:2c:ed:d4:a8:8c:d5:95:e9:cd:8a:
                    f1:f1:8e:92:34:0d:ac:2a:e0:5c:ec:50:67:22:85:
                    40:cf:22:48:e3:f0:3b:e7:de:f7:9c:66:5e:ff:5f:
                    da:a0:a5:e2:51:c8:61:f2:1f:9e:98:64:44:9d:59:
                    22:b0:2a:c3:5b:e4:6a:4c:59:5a:73:b1:ce:d7:f3:
                    3d:28:fd:d8:7f:b6:30:b2:33:0b:aa:08:d0:b9:bb:
                    03:e3:63:ae:7e:b4:ab:29:10:5c:a0:0e:cd:d7:9e:
                    24:aa:19:4c:1c:3d:ea:63:bf:6e:ae:de:f3:f2:0c:
                    7c:ec:d3:ce:0b:3b:eb:b9:e6:c7:e6:ea:b8:54:fb:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C7:0A:96:A3:F8:75:EA:B7:87:2C:58:6A:24:38:1A:15:C2:03:92
            X509v3 Authority Key Identifier:
                keyid:24:F2:66:D8:31:FC:27:A4:2A:32:08:89:9E:8D:F6:26:C4:57:10:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPJm2DH8J6QqMgiJno32JsRXEAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/k8cKlqP4deq3hyxYaiQ4GhXCA5I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/JPJm2DH8J6QqMgiJno32JsRXEAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216432

    Signature Algorithm: sha256WithRSAEncryption
         3d:78:40:c0:13:87:00:4c:69:bf:5c:b6:f7:8f:22:7a:9b:30:
         5f:6f:b1:ef:e4:76:9e:3e:d9:68:02:5b:1a:02:33:94:8a:c6:
         74:6c:93:20:ae:3f:fc:9d:68:8b:4c:7b:c7:06:71:b1:0f:05:
         c8:56:36:ca:68:7e:15:13:ea:3c:4b:de:ab:11:32:a9:d1:07:
         8b:42:9d:e9:b4:7a:fa:5b:5b:6b:4e:2b:70:ce:4d:21:80:7b:
         eb:ac:33:15:7d:17:2d:d3:b4:e2:38:22:e1:d1:3d:12:c2:24:
         9f:67:91:b1:06:dc:84:97:72:ed:38:2d:63:0b:f3:89:21:0c:
         cf:8f:04:88:39:39:d3:55:b9:5e:9d:b5:6b:b9:d6:c2:20:bc:
         e6:36:6f:e1:50:b8:cc:8c:7f:8c:27:ab:df:6e:91:49:9e:18:
         b7:c8:91:06:db:25:5d:d1:80:f7:6b:e5:6a:6c:b4:5c:57:f4:
         25:66:c1:5a:3e:93:8e:ef:6c:fb:79:65:60:6e:e0:97:07:7d:
         1d:2e:48:8d:aa:7e:e1:e3:f8:56:18:f8:4c:99:8b:6f:f4:51:
         cb:12:35:99:34:30:9d:7a:39:ad:bc:6e:fe:a2:04:7c:bd:7e:
         b2:e3:05:f7:87:5c:4e:2c:ad:6b:61:51:af:a6:46:cf:f0:4b:
         a9:ff:ec:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:26 2026 by rpki-client