Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/DRTrzTPHGlYA_dtKXzGTXLxXFVE.asa
File:                     DRTrzTPHGlYA_dtKXzGTXLxXFVE.asa (raw, json)
Hash identifier:          AUqyMLZSXseXhShAyL7jvq0DAiPZYPduaEFPG6bp3bs=
Subject key identifier:   0D:14:EB:CD:33:C7:1A:56:00:FD:DB:4A:5F:31:93:5C:BC:57:15:51
Certificate issuer:       /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial:       019E16F15B96BD5289E6BC865F30860FA34F
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/DRTrzTPHGlYA_dtKXzGTXLxXFVE.asa
Signing time:             Mon 11 May 2026 12:09:36 +0000
ASPA not before:          Mon 11 May 2026 12:09:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57797
Providers:                AS: 2027
                          AS: 34872
                          AS: 58057
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:16:f1:5b:96:bd:52:89:e6:bc:86:5f:30:86:0f:a3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
        Validity
            Not Before: May 11 12:09:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0d14ebcd33c71a5600fddb4a5f31935cbc571551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3d:0b:4f:0e:a6:10:ce:12:49:e5:39:4b:50:
                    2c:e3:de:c3:a1:8d:a2:12:32:12:da:fa:07:2d:e6:
                    57:63:9e:b5:3d:75:3e:00:3b:1e:d2:5a:62:d5:0b:
                    22:4c:00:d9:04:65:cf:ec:87:b3:f7:ac:b6:39:ba:
                    d8:93:45:7c:b5:c3:bc:b8:e9:b9:dc:9d:9b:ed:66:
                    82:6b:ae:1d:e1:40:5b:f6:1e:de:61:b0:f4:2f:cd:
                    13:c8:58:91:f4:ad:c7:e5:13:1c:c0:87:a3:96:7d:
                    84:ba:34:be:f1:66:2e:a8:a2:c6:7b:e3:ff:ef:f6:
                    c7:f2:c7:b6:b4:a3:88:80:ed:5b:cb:79:d6:47:2a:
                    b5:ce:34:22:2d:25:f1:7e:53:ea:6a:4f:95:4d:c0:
                    17:dc:40:81:17:35:8a:57:f8:01:9e:35:3d:ba:13:
                    d0:9e:46:c0:86:21:62:97:02:46:12:ac:3f:6a:35:
                    aa:dc:b9:30:4e:3e:0f:f3:0e:a5:cd:b6:db:8a:0e:
                    ba:ab:60:d1:5e:18:bb:9a:f8:3a:1d:38:a3:eb:de:
                    68:2d:7c:b0:aa:04:93:7f:5f:6e:c9:c9:8d:d1:80:
                    24:39:6b:d7:10:14:23:47:93:c3:2d:da:ad:f1:2b:
                    aa:5c:32:be:40:80:2f:0d:da:64:e2:83:89:31:97:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:14:EB:CD:33:C7:1A:56:00:FD:DB:4A:5F:31:93:5C:BC:57:15:51
            X509v3 Authority Key Identifier:
                keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/DRTrzTPHGlYA_dtKXzGTXLxXFVE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57797

    Signature Algorithm: sha256WithRSAEncryption
         52:c0:73:53:11:35:a5:da:cd:18:2f:7a:7c:2e:dd:22:72:c8:
         f5:15:f7:f7:ab:3d:85:e2:85:bb:c0:89:c2:9d:0b:5f:75:9b:
         8b:48:57:5a:d7:29:ee:2a:3a:57:f3:8a:f7:b6:a2:1f:ab:80:
         19:50:d5:0a:2b:60:26:40:7a:a4:36:53:35:3e:c6:80:99:c7:
         65:2f:3f:9f:cf:c3:1d:81:2d:e1:a2:87:76:18:9b:9a:4e:8c:
         01:5b:22:66:f0:ac:e8:8f:5f:f1:fd:5e:db:fd:21:bc:fa:68:
         03:2d:dd:42:83:6b:fe:c8:bf:f9:3b:b4:31:3e:89:d0:b7:a9:
         8a:8a:25:19:b8:79:11:5c:63:72:07:ea:6d:7a:5e:00:85:b6:
         94:49:37:dc:bb:f1:92:3d:c4:8e:c9:2d:36:22:f1:a2:c4:9c:
         4c:d4:76:09:ef:dd:22:22:71:87:5b:b5:e5:6f:25:5b:c8:2f:
         da:9b:05:65:fa:f6:54:b5:20:cf:74:6b:47:d2:8a:1e:99:f6:
         0f:10:f2:1c:0e:de:83:39:b9:86:3a:3f:6e:c9:6e:1e:95:48:
         bf:ff:4f:ee:ff:d5:fd:da:e2:9d:08:67:9c:ee:f0:11:aa:60:
         d8:e8:d9:85:64:39:3a:b5:7c:d2:0b:75:7e:a0:9b:f4:25:2c:
         58:b4:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:15 2026 by rpki-client