Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/D3EXfnpLfks5hkWJ3JpH4AjPZus.asa
File:                     D3EXfnpLfks5hkWJ3JpH4AjPZus.asa (raw, json)
Hash identifier:          YU9VXUO2KnpRtE3dCPlyXEXuMHPtxfhZzrU9FfAfgzM=
Subject key identifier:   0F:71:17:7E:7A:4B:7E:4B:39:86:45:89:DC:9A:47:E0:08:CF:66:EB
Certificate issuer:       /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
Certificate serial:       019F190150B4C93850F0C5526F9177004FAC
Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/D3EXfnpLfks5hkWJ3JpH4AjPZus.asa
Signing time:             Tue 30 Jun 2026 14:49:04 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:04 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211153
Providers:                AS: 205235
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:50:b4:c9:38:50:f0:c5:52:6f:91:77:00:4f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6
        Validity
            Not Before: Jun 30 14:49:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0f71177e7a4b7e4b39864589dc9a47e008cf66eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:00:28:fb:5e:bd:1d:f4:70:f6:48:ae:f6:39:
                    cf:20:63:d3:ad:96:ba:a0:11:14:9d:28:9b:01:bc:
                    d1:9d:55:88:8b:91:14:f2:9d:86:93:ee:73:e8:cd:
                    f8:fa:74:b6:a3:ea:68:c4:bb:bb:7a:c8:05:1a:50:
                    b9:b1:4c:60:91:20:d3:f0:bf:e1:2b:6a:9a:c8:7b:
                    25:26:ed:f2:e9:d6:4f:9f:98:df:64:97:dc:f1:ce:
                    28:d2:e9:17:73:0f:16:e6:14:38:e0:9c:6c:90:27:
                    3b:5b:fe:1e:85:95:72:0a:51:ee:d4:8d:e2:a9:be:
                    79:4f:3d:f7:cb:28:da:cb:68:94:be:c6:24:a7:fd:
                    76:b5:2d:5c:59:24:71:06:ae:e5:ef:18:a8:7a:68:
                    0e:d4:a8:12:71:b8:64:69:54:67:8a:03:ea:b4:34:
                    ef:4b:31:d7:ee:c7:be:7f:41:43:d3:b0:94:4d:47:
                    22:7c:3f:a9:93:75:b8:49:85:fb:df:59:c2:e1:77:
                    3a:29:83:69:16:3d:e9:cb:0e:0c:d8:3e:7f:24:a2:
                    25:92:1e:69:92:49:71:71:4c:f3:d1:6a:3d:c5:ab:
                    6d:22:58:02:e7:35:e7:da:d2:fb:07:9e:76:c0:3e:
                    f3:62:2d:ab:14:04:a1:23:f7:41:08:55:98:ff:b8:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:71:17:7E:7A:4B:7E:4B:39:86:45:89:DC:9A:47:E0:08:CF:66:EB
            X509v3 Authority Key Identifier:
                keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/D3EXfnpLfks5hkWJ3JpH4AjPZus.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211153

    Signature Algorithm: sha256WithRSAEncryption
         a3:46:9a:3d:5e:ba:93:2a:8e:5b:43:1e:74:03:2b:ed:bd:d4:
         d3:5b:eb:38:b3:22:90:a5:90:0a:6a:04:73:0b:1c:83:95:e8:
         82:b0:7b:66:7a:11:eb:8e:c1:71:57:3a:bd:e0:bc:52:b7:17:
         7b:27:43:18:b3:99:84:0b:2e:07:99:d7:a9:9d:fb:b6:18:36:
         5e:50:df:de:f3:b8:00:18:4d:23:41:1b:fd:91:e8:12:47:7b:
         b6:c9:71:a4:3e:01:8d:4b:f8:61:a3:0b:56:8b:19:36:dc:50:
         33:2d:34:c5:0b:0b:3d:bd:8c:fc:22:f6:55:3f:ed:f6:66:c9:
         c7:61:c5:c7:f6:b6:0f:c1:c6:cd:da:fc:f2:1b:1b:50:af:68:
         6d:14:72:c6:ed:e9:4b:da:ce:ac:08:2e:5a:57:66:e0:1f:25:
         46:22:b1:96:bf:71:12:9f:24:8f:3c:5a:7b:15:4e:0f:0a:c1:
         ce:11:96:86:42:15:42:67:fb:0a:e0:0a:04:1e:ca:50:45:63:
         95:a2:05:80:be:98:7a:8e:ce:57:e2:2e:fe:5e:77:2f:75:5e:
         af:c7:b0:b4:d6:2b:fd:9d:3f:8b:80:ab:cf:62:54:bf:6a:92:
         c9:ca:4c:0e:7d:d4:b4:5a:92:cc:66:d5:63:92:62:90:4c:e7:
         c4:91:9d:69
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8ZAVC0yThQ8MVSb5F3AE+sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmIwN2ZlYmQ1ZDAwYTkyM2FlMzkwYTQxOTBmZTU2NDRj
ZGQ0ZjYwHhcNMjYwNjMwMTQ0OTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjcxMTc3ZTdhNGI3ZTRiMzk4NjQ1ODlkYzlhNDdlMDA4Y2Y2NmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wAo+169HfRw9kiu9jnPIGPTrZa6
oBEUnSibAbzRnVWIi5EU8p2Gk+5z6M34+nS2o+poxLu7esgFGlC5sUxgkSDT8L/h
K2qayHslJu3y6dZPn5jfZJfc8c4o0ukXcw8W5hQ44JxskCc7W/4ehZVyClHu1I3i
qb55Tz33yyjay2iUvsYkp/12tS1cWSRxBq7l7xioemgO1KgScbhkaVRnigPqtDTv
SzHX7se+f0FD07CUTUcifD+pk3W4SYX731nC4Xc6KYNpFj3pyw4M2D5/JKIlkh5p
kklxcUzz0Wo9xattIlgC5zXn2tL7B552wD7zYi2rFAShI/dBCFWY/7i2NQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFA9xF356S35LOYZFidyaR+AIz2brMB8GA1UdIwQY
MBaAFG37B/69XQCpI645CkGQ/lZEzdT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYt
ZGI4NWJhNDA2YzUxLzEvRDNFWGZucExma3M1aGtXSjNKcEg0QWpQWnVzLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYtZGI4NWJhNDA2YzUx
LzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM40TANBgkqhkiG
9w0BAQsFAAOCAQEAo0aaPV66kyqOW0MedAMr7b3U01vrOLMikKWQCmoEcwscg5Xo
grB7ZnoR647BcVc6veC8UrcXeydDGLOZhAsuB5nXqZ37thg2XlDf3vO4ABhNI0Eb
/ZHoEkd7tslxpD4BjUv4YaMLVosZNtxQMy00xQsLPb2M/CL2VT/t9mbJx2HFx/a2
D8HGzdr88hsbUK9obRRyxu3pS9rOrAguWldm4B8lRiKxlr9xEp8kjzxaexVODwrB
zhGWhkIVQmf7CuAKBB7KUEVjlaIFgL6Yeo7OV+Iu/l53L3Ver8ewtNYr/Z0/i4Cr
z2JUv2qSycpMDn3UtFqSzGbVY5JikEznxJGdaQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:31 2026 by rpki-client