Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/jcjMa-7upncM2TRGZRTWQhfEsIM.asa
File:                     jcjMa-7upncM2TRGZRTWQhfEsIM.asa (raw, json)
Hash identifier:          2VcC86tvnEUYj8Iwy6Xs+Guz1K51yD41MnnJU1wPR6A=
Subject key identifier:   8D:C8:CC:6B:EE:EE:A6:77:0C:D9:34:46:65:14:D6:42:17:C4:B0:83
Certificate issuer:       /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial:       019D11C8DD393CF04B1C606595E8D2FF77CE
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/jcjMa-7upncM2TRGZRTWQhfEsIM.asa
Signing time:             Sat 21 Mar 2026 19:04:29 +0000
ASPA not before:          Sat 21 Mar 2026 19:04:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214906
Providers:                AS: 207252
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:11:c8:dd:39:3c:f0:4b:1c:60:65:95:e8:d2:ff:77:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
        Validity
            Not Before: Mar 21 19:04:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8dc8cc6beeeea6770cd934466514d64217c4b083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:be:62:1d:58:80:2d:ed:25:c9:1a:c0:38:
                    77:e2:3e:c0:9c:aa:0b:40:0f:d7:a3:e5:31:69:d5:
                    9c:b4:7e:5e:2d:97:7c:d8:d2:aa:b8:89:e3:e3:56:
                    6c:62:ef:63:5f:c7:f7:d4:f4:cf:45:63:d3:41:3a:
                    5a:2b:ee:21:6c:de:a4:ed:6e:4d:64:96:ee:14:d3:
                    b2:31:61:28:59:b5:6b:a8:5e:9a:cf:33:6b:f4:8e:
                    97:a1:e1:dc:a5:14:cf:ab:12:32:78:8f:ff:a2:52:
                    cf:11:91:36:a7:70:9b:cf:e6:a8:f4:4d:e0:96:76:
                    10:2d:2a:14:3b:98:f1:28:7e:62:1c:ee:ca:60:51:
                    0a:d8:58:2f:46:32:27:44:82:9a:bc:8e:5b:4a:29:
                    c8:a7:51:04:89:d8:2f:6f:d9:92:fa:a6:9e:cd:2d:
                    09:82:a9:53:c5:2f:ae:ba:38:a6:4a:97:d9:3a:28:
                    69:36:ae:60:65:d0:e4:00:c4:e4:5c:c5:49:6f:47:
                    73:11:c6:37:4b:f0:32:f4:9a:73:35:f6:c0:de:c1:
                    97:9b:bf:24:3e:82:0e:db:2e:3d:3c:a0:59:82:4a:
                    16:7a:74:a1:9d:39:4b:74:10:55:25:50:ad:7b:07:
                    3a:e5:58:bf:21:d6:74:bc:3d:42:c7:d1:8f:35:74:
                    ed:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C8:CC:6B:EE:EE:A6:77:0C:D9:34:46:65:14:D6:42:17:C4:B0:83
            X509v3 Authority Key Identifier:
                keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/jcjMa-7upncM2TRGZRTWQhfEsIM.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214906

    Signature Algorithm: sha256WithRSAEncryption
         5f:d1:89:1c:c5:11:c1:83:92:26:43:88:75:b5:a2:ed:a1:e9:
         7e:ed:03:10:ff:18:56:43:f8:8e:84:f7:13:ff:52:98:94:fe:
         0f:a3:0a:51:c9:7a:35:b1:8d:1e:ba:42:72:e8:af:f1:94:14:
         95:1d:26:ee:5a:6c:79:02:1f:68:56:f9:d1:73:af:8d:5f:ae:
         8a:2b:39:25:79:d5:a1:75:d8:63:40:92:b7:6c:71:67:c6:d2:
         9a:db:ec:81:93:ec:d1:7c:b7:69:23:06:90:c5:3a:8f:35:80:
         a6:7c:5e:3a:ea:f7:e1:d1:a8:18:0e:73:a0:f7:4c:c9:75:b0:
         07:bf:87:d8:03:c5:a5:41:56:51:b5:d6:b4:7e:26:82:bf:22:
         d0:b3:bb:be:37:7b:b1:4d:c5:60:f7:5c:26:6f:ce:37:ab:98:
         2f:bd:95:f2:a8:5a:ca:ad:e4:2b:d3:2a:b8:53:96:05:55:77:
         47:50:7d:a4:2f:4f:a8:56:7b:03:bf:7b:eb:44:f6:db:16:af:
         bf:69:5b:a8:42:72:24:b3:cb:a5:a1:da:ca:41:40:3f:a1:68:
         eb:f0:73:d9:f9:5d:ea:2f:9d:04:17:97:e0:f4:d9:ca:b8:65:
         d0:5d:b3:46:55:be:c9:57:69:27:30:b1:fa:f7:9b:a9:3e:87:
         82:e4:29:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:20:35 2026 by rpki-client