Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/BjDmUvjz2g0wnSp3u9Zwel-a2_4.asa
File:                     BjDmUvjz2g0wnSp3u9Zwel-a2_4.asa (raw, json)
Hash identifier:          naAJfE5EHss/EHa5WATU6Y51VhODzzTsRCijcIt3VT0=
Subject key identifier:   06:30:E6:52:F8:F3:DA:0D:30:9D:2A:77:BB:D6:70:7A:5F:9A:DB:FE
Certificate issuer:       /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial:       019F19011EE1E6FF45DCF91A47FC07E42633
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/BjDmUvjz2g0wnSp3u9Zwel-a2_4.asa
Signing time:             Tue 30 Jun 2026 14:48:51 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60574
Providers:                AS: 24940
                          AS: 33891
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:1e:e1:e6:ff:45:dc:f9:1a:47:fc:07:e4:26:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
        Validity
            Not Before: Jun 30 14:48:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0630e652f8f3da0d309d2a77bbd6707a5f9adbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cd:ca:a7:f6:bc:11:46:c7:56:e5:d2:fa:55:
                    a1:be:d3:9b:79:4b:83:59:64:96:e4:01:31:b9:04:
                    78:35:b1:97:d1:a0:32:c9:77:76:df:02:9a:eb:ee:
                    7c:cc:98:b3:8f:f9:d7:c6:dc:8e:ef:8f:fa:e2:31:
                    84:7f:ad:21:f5:76:9d:2d:b6:66:ed:eb:bd:50:ea:
                    73:a8:7b:84:7f:97:28:89:cb:96:95:68:57:09:63:
                    91:93:2f:e8:eb:b9:2e:3a:b4:0e:03:0c:8f:7f:c4:
                    f2:83:7d:94:32:fe:1a:7c:87:1a:6a:8c:02:ff:bd:
                    c9:a9:64:38:34:d8:02:61:a4:9f:d0:0c:d3:48:a9:
                    5b:9f:3b:d3:a7:d9:3b:c5:5f:e1:fa:49:c0:ea:c3:
                    13:2f:a5:10:1e:aa:0c:ea:04:94:6e:02:13:24:31:
                    88:d3:a0:d9:c3:bc:3a:64:61:8b:a7:a9:5f:0a:ad:
                    52:e6:3b:56:05:ae:19:94:e5:26:5d:70:cb:29:4c:
                    61:5e:ba:e7:b3:9c:0c:bf:07:7b:09:d2:2e:17:20:
                    2f:9a:e5:06:7d:7e:95:d0:6d:bf:50:ec:16:30:ad:
                    7a:3d:cb:27:94:38:f3:f4:10:1e:2a:89:37:a2:ea:
                    b0:43:6f:a1:43:c7:62:01:c8:13:51:e1:6b:d1:4a:
                    4b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:30:E6:52:F8:F3:DA:0D:30:9D:2A:77:BB:D6:70:7A:5F:9A:DB:FE
            X509v3 Authority Key Identifier:
                keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/BjDmUvjz2g0wnSp3u9Zwel-a2_4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60574

    Signature Algorithm: sha256WithRSAEncryption
         75:d4:d2:b2:13:03:6a:f4:7b:1d:73:ed:e9:33:f9:2c:5c:72:
         d9:bc:6d:57:4c:63:97:53:3c:2e:4d:ab:c9:59:10:f8:c5:b0:
         8a:23:aa:94:9a:5a:b8:4b:0a:67:46:81:27:86:05:2a:9e:d9:
         3c:52:bb:6d:ad:81:0e:b2:3d:9a:02:0d:71:a7:58:76:e9:49:
         47:17:86:80:60:90:10:db:d3:d3:9b:ff:da:2b:75:b6:87:20:
         14:a5:d6:db:b2:c5:c3:f4:d1:98:61:c5:39:f8:eb:8a:12:81:
         ac:82:ca:91:5e:1c:42:01:31:35:bd:57:5e:67:aa:d4:e4:13:
         8d:b0:85:d6:9a:2d:9b:a4:cb:e4:6a:4d:8d:fb:16:46:77:51:
         3a:74:54:d8:22:33:d7:33:a1:d5:d0:52:07:c5:8d:1e:a0:cf:
         b9:6e:06:ce:fa:4e:6c:c2:d4:02:75:a7:06:4f:68:37:97:90:
         12:4c:b5:d2:49:34:6c:0c:24:8e:c2:b0:62:c1:06:31:e9:38:
         84:91:d4:70:af:6a:d0:37:66:64:d6:33:fa:c4:cb:8e:29:9f:
         6b:8f:f0:f8:74:ac:ee:0c:b6:8c:ad:71:c3:51:39:ea:43:94:
         fb:cb:8a:ee:c1:c7:cc:3b:7f:c8:02:bc:84:cb:57:70:4b:4a:
         c6:ce:3d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:13 2026 by rpki-client