Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/C3EbT65pZdTh7IHQ_SH1E1Q3faQ.asa
File:                     C3EbT65pZdTh7IHQ_SH1E1Q3faQ.asa (raw, json)
Hash identifier:          6RJCYSiIM4CZdaMt1QH6napTMQyBB8/2uvcNOS+XnT4=
Subject key identifier:   0B:71:1B:4F:AE:69:65:D4:E1:EC:81:D0:FD:21:F5:13:54:37:7D:A4
Certificate issuer:       /CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
Certificate serial:       019F1901203C6EF43362B3C0C7113809009C
Authority key identifier: 10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/C3EbT65pZdTh7IHQ_SH1E1Q3faQ.asa
Signing time:             Tue 30 Jun 2026 14:48:51 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198053
Providers:                AS: 62000
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:20:3c:6e:f4:33:62:b3:c0:c7:11:38:09:00:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10ab57ab0e96518679114cbf0ee8af54bbfda5f5
        Validity
            Not Before: Jun 30 14:48:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0b711b4fae6965d4e1ec81d0fd21f51354377da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:70:e8:77:8e:8b:9f:9a:85:f9:ba:c1:2b:
                    7b:e0:de:c0:3d:b8:2b:c6:22:1f:72:fc:56:33:04:
                    f8:7d:74:39:e2:6a:5c:35:2e:b9:54:d1:14:c3:9e:
                    2c:5f:dc:4c:0c:96:c7:01:52:73:cf:61:4c:4e:05:
                    94:9b:ad:48:3e:78:af:e3:22:e0:68:cf:25:3f:81:
                    16:14:9b:60:20:9c:2c:4d:6d:a4:47:79:29:14:05:
                    3a:29:f3:73:37:3d:4b:3e:b5:a9:f9:ce:49:c3:78:
                    e5:37:8e:2d:14:4c:6a:2a:c2:d4:4c:91:0d:db:56:
                    98:18:9d:de:1b:cb:bc:b1:ec:d6:2c:8f:d4:2c:8b:
                    ac:bd:1a:70:9a:9b:cc:32:3a:c0:95:c3:34:cf:44:
                    46:d7:58:a9:7e:27:dd:e4:1e:91:c1:cd:c1:5a:d4:
                    2d:14:7a:3e:9b:e6:c5:d0:a5:ab:3b:21:0b:e1:e7:
                    7c:96:76:b8:ac:26:2e:d7:39:a9:2b:a1:5d:8a:89:
                    85:c4:39:35:ad:21:24:f0:c6:66:21:d3:82:5e:75:
                    a1:17:d8:a7:f2:b9:0b:29:b9:1a:ef:01:2c:8d:c9:
                    00:8d:88:b3:ef:4e:9d:27:07:ef:c4:ac:0f:1b:a5:
                    5c:1a:56:74:b3:41:22:fd:d7:1c:44:75:45:46:28:
                    1b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:71:1B:4F:AE:69:65:D4:E1:EC:81:D0:FD:21:F5:13:54:37:7D:A4
            X509v3 Authority Key Identifier:
                keyid:10:AB:57:AB:0E:96:51:86:79:11:4C:BF:0E:E8:AF:54:BB:FD:A5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKtXqw6WUYZ5EUy_DuivVLv9pfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/C3EbT65pZdTh7IHQ_SH1E1Q3faQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b61ac2-6e27-4d4e-ab9e-f380bf0fdd84/1/EKtXqw6WUYZ5EUy_DuivVLv9pfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198053

    Signature Algorithm: sha256WithRSAEncryption
         28:02:7c:32:1e:92:fd:66:44:aa:fa:1d:99:cb:56:84:1d:b1:
         1c:72:2b:00:b6:f8:34:16:ef:8d:a0:e5:a1:af:d4:4b:94:50:
         d7:37:8f:32:3b:87:06:cb:c1:f4:2d:c4:97:c2:81:76:8b:46:
         77:0d:64:c7:56:68:c8:ff:05:e4:0b:12:94:77:aa:44:a8:98:
         cf:fd:7b:67:86:12:02:a1:7e:0d:70:20:5f:2e:26:ff:89:08:
         4f:79:8a:09:c3:34:52:b9:f4:2f:38:0d:49:a9:12:2c:a5:3d:
         60:2d:1b:de:f9:4f:65:83:93:e0:7c:0d:1a:af:d6:e3:33:de:
         2f:df:0f:51:90:c2:80:0b:e3:a0:78:64:39:f3:f6:e4:ae:56:
         06:20:6d:cf:4a:a5:ed:f3:67:62:a3:d2:1c:fd:1a:0c:9e:96:
         e7:71:40:5c:2e:1f:3c:8b:14:91:05:fb:25:b9:20:37:86:68:
         f5:f8:35:80:88:86:fb:ce:75:dc:b5:a9:d6:93:fa:c8:b7:34:
         63:84:80:6e:1b:c2:1c:8c:20:52:58:02:a3:1e:4e:d2:9c:d2:
         1e:37:d1:2a:6f:52:ed:8a:d4:03:ee:82:05:81:fa:85:7c:ee:
         c5:fb:17:66:b1:a6:48:41:d1:ea:db:28:da:0f:a5:03:3c:15:
         0f:19:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:22 2026 by rpki-client