Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sU_krqndoay3N-djop6WUnEtSQ8.asa
File:                     sU_krqndoay3N-djop6WUnEtSQ8.asa (raw, json)
Hash identifier:          /mwAp7aIho2pbJqBqTTWKix5a9N4m0KJMNqdK/4irf8=
Subject key identifier:   B1:4F:E4:AE:A9:DD:A1:AC:B7:37:E7:63:A2:9E:96:52:71:2D:49:0F
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       019F190140AB4E0542D16668268CF6FC94D6
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sU_krqndoay3N-djop6WUnEtSQ8.asa
Signing time:             Tue 30 Jun 2026 14:49:00 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:00 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            31732
Providers:                AS: 6939
                          AS: 136557
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 08:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:40:ab:4e:05:42:d1:66:68:26:8c:f6:fc:94:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Jun 30 14:49:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b14fe4aea9dda1acb737e763a29e9652712d490f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:b5:3c:cb:0f:c0:ba:eb:54:01:ad:33:f6:
                    84:a2:3c:0c:e2:a3:05:6f:b9:08:f6:69:36:4a:f5:
                    44:90:d4:7a:84:3d:da:0f:e9:74:6e:63:a7:53:3a:
                    51:99:00:e5:ac:0b:7f:0e:ca:d5:24:e6:46:41:0e:
                    8e:b5:7a:69:ea:c3:cb:e7:c4:33:dd:f2:99:0f:37:
                    ac:ba:7d:cc:37:c7:dc:7f:33:44:83:de:f2:14:8f:
                    07:e8:a9:18:2c:0a:67:ec:e8:7b:86:f0:71:02:35:
                    12:b9:24:6b:95:a1:41:b6:0e:7a:5e:79:c4:5b:b5:
                    1c:f3:09:77:1e:9c:e8:56:32:c1:25:ef:21:1b:f5:
                    be:a1:23:50:51:d5:f7:23:1b:c3:a1:ee:07:17:3c:
                    5a:aa:dd:51:53:10:2a:f2:8d:85:7f:77:04:d1:0a:
                    95:16:9a:f1:bc:34:71:69:be:b6:14:99:ed:f6:5d:
                    eb:7b:bf:83:df:02:d0:4e:9d:cc:57:30:e9:74:36:
                    ce:d7:92:45:2b:1c:1f:24:8a:e4:cf:fe:b7:b3:4e:
                    2f:88:34:6a:c1:24:27:0b:43:b9:de:53:c9:a1:d9:
                    b2:09:93:22:5a:7f:d7:a6:85:be:e6:7e:d5:19:6c:
                    bf:eb:95:fc:c2:58:d5:f9:53:b4:39:84:16:01:da:
                    f5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4F:E4:AE:A9:DD:A1:AC:B7:37:E7:63:A2:9E:96:52:71:2D:49:0F
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sU_krqndoay3N-djop6WUnEtSQ8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31732

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:10:9b:6a:6f:5a:5b:18:7b:88:bf:36:ac:cf:bb:17:8a:
         68:a6:a6:7c:c6:cc:d5:32:b8:34:4f:9a:7a:80:d7:5e:5c:b9:
         9a:42:03:ef:52:e8:85:3a:62:e9:52:5d:94:8a:bc:89:7e:70:
         d6:e0:f9:74:14:56:2d:0f:09:52:e9:dc:34:36:82:4f:15:3e:
         bd:87:5d:27:60:44:a2:23:b3:26:d3:d2:46:d6:ab:b1:42:87:
         0d:3f:ee:67:98:4d:2d:32:c3:a2:e6:0d:e9:bb:be:b2:25:ed:
         ee:5b:0c:0e:34:92:e0:1b:ec:0c:bc:09:e7:c0:d8:aa:19:42:
         da:af:8e:df:42:c0:e1:a9:e4:f7:04:6d:c8:4a:84:1f:0e:12:
         79:1f:29:ad:c8:12:5b:88:d7:12:55:31:eb:f1:d3:37:bf:72:
         9e:d1:ed:8a:6c:be:c2:ca:62:40:1f:f4:65:d1:64:1e:89:30:
         5e:a7:ac:02:68:0e:84:dd:63:61:21:eb:e2:8b:b1:fe:b3:18:
         c7:d5:0a:f1:00:d5:ef:ae:f8:15:71:44:61:c6:cf:c6:9e:40:
         06:e4:2b:60:7b:a9:1f:55:be:8c:db:63:c0:ad:c5:8f:26:2e:
         a0:c0:01:9a:52:79:59:33:d9:ef:30:53:27:24:53:2c:35:68:
         5e:15:2c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:33 2026 by rpki-client