Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/C45tLQeLfwaM1RdOqpO-QuLUeQA.asa
File:                     C45tLQeLfwaM1RdOqpO-QuLUeQA.asa (raw, json)
Hash identifier:          7MH0/rLqYLLQ3/jeeFbZW6qka1ApF6OnChXUKCMlfQ0=
Subject key identifier:   0B:8E:6D:2D:07:8B:7F:06:8C:D5:17:4E:AA:93:BE:42:E2:D4:79:00
Certificate issuer:       /CN=6e199938e5863ef3ec7a17e3e957821122cacb72
Certificate serial:       019F23683497F205EE439A25F0B3DB5F5C24
Authority key identifier: 6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/C45tLQeLfwaM1RdOqpO-QuLUeQA.asa
Signing time:             Thu 02 Jul 2026 15:17:39 +0000
ASPA not before:          Thu 02 Jul 2026 15:17:39 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57913
Providers:                AS: 5398
                          AS: 41327
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:68:34:97:f2:05:ee:43:9a:25:f0:b3:db:5f:5c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e199938e5863ef3ec7a17e3e957821122cacb72
        Validity
            Not Before: Jul  2 15:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0b8e6d2d078b7f068cd5174eaa93be42e2d47900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:d3:43:1a:75:05:2c:86:0c:c9:32:10:eb:
                    ff:ee:0e:ec:4a:32:d4:7a:9f:c5:8a:18:f7:e1:41:
                    c0:ce:ec:24:30:48:6c:f9:8b:5a:9a:fb:5c:e5:72:
                    66:23:f0:1b:01:ae:9b:a8:d9:f6:a3:11:c4:50:3a:
                    b8:01:5a:37:3f:20:57:a6:b5:8d:a6:39:9c:ac:14:
                    58:3a:1b:53:df:09:a4:1f:93:51:57:01:7c:7c:86:
                    10:15:49:b2:11:ce:0d:14:99:96:b0:f6:b6:34:e4:
                    8f:07:1b:46:ed:6b:df:51:94:a5:31:cb:1d:3f:38:
                    c5:a3:ad:bc:ab:93:bd:a5:f9:cf:f3:15:9c:e2:63:
                    71:71:fb:79:ae:fa:2f:94:f8:3f:2a:a1:4e:12:e4:
                    2e:7e:1c:8c:9d:8c:4d:83:1f:50:97:9d:76:cc:9e:
                    8f:00:0e:5c:42:fb:e7:62:31:08:ae:ad:44:a2:06:
                    b3:a3:aa:3e:79:af:93:33:61:17:5b:89:62:5d:a5:
                    de:99:44:4b:d5:9a:6b:3f:c5:25:1f:a6:8a:68:33:
                    a6:f1:7d:9c:1b:2a:35:f0:cd:a9:69:2e:3b:dd:20:
                    4c:1b:0c:d3:cb:d5:b6:ce:de:4d:53:32:78:eb:d9:
                    93:40:8d:9e:81:6a:80:49:6f:45:8a:16:19:1a:22:
                    b5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8E:6D:2D:07:8B:7F:06:8C:D5:17:4E:AA:93:BE:42:E2:D4:79:00
            X509v3 Authority Key Identifier:
                keyid:6E:19:99:38:E5:86:3E:F3:EC:7A:17:E3:E9:57:82:11:22:CA:CB:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bhmZOOWGPvPsehfj6VeCESLKy3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/C45tLQeLfwaM1RdOqpO-QuLUeQA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af72e8-f0d2-4d66-b520-3aba595b58a8/1/bhmZOOWGPvPsehfj6VeCESLKy3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57913

    Signature Algorithm: sha256WithRSAEncryption
         97:5a:5e:41:53:22:b3:1f:fc:97:0a:af:8a:b2:61:3c:a3:66:
         de:79:76:b9:8c:f4:5c:7d:68:ef:85:29:ce:5d:28:c0:f9:5a:
         81:32:b4:0d:56:6a:1e:28:75:2f:a4:35:76:1f:40:c9:ef:bb:
         40:e7:a5:6e:85:80:46:d6:e1:2e:e5:c9:6a:8d:5e:07:56:68:
         b9:52:d2:bc:53:3c:6f:19:59:03:55:e8:a3:94:af:c8:0d:23:
         70:5a:6a:05:7a:c0:98:e4:4f:5e:34:bf:0c:3e:30:d5:3f:4e:
         df:fe:1f:a1:7c:9d:47:9c:19:d7:c8:b7:9d:62:58:93:53:47:
         78:e1:fd:3a:6e:f8:49:ab:f8:7e:50:93:b7:9e:59:5b:eb:04:
         1f:64:69:f5:f3:1b:2d:7c:a0:81:b0:84:8f:c1:d1:1d:e7:b9:
         af:92:51:09:91:f6:8e:54:56:78:86:77:3c:a5:c2:e3:76:5e:
         71:2f:78:bb:47:c8:c4:a7:42:59:57:f5:20:03:22:63:5d:0f:
         ea:87:63:b3:de:0a:b4:00:f8:9e:2c:cc:f9:90:c9:25:bc:da:
         6c:b4:4f:89:e6:b8:da:1f:83:82:de:3a:5f:dd:fc:ee:81:14:
         73:d1:83:b3:02:a7:10:1a:97:8c:91:7f:35:99:3a:43:fd:d5:
         b2:ad:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:21 2026 by rpki-client