Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/TeBvR9keyGWF1HddOFbKAa_omvQ.asa
File:                     TeBvR9keyGWF1HddOFbKAa_omvQ.asa (raw, json)
Hash identifier:          CT9r+WMtWcO8eC0u8ppmte+isZN/hlSgsMu3YMgGTWQ=
Subject key identifier:   4D:E0:6F:47:D9:1E:C8:65:85:D4:77:5D:38:56:CA:01:AF:E8:9A:F4
Certificate issuer:       /CN=23a89ab532393863bcb139163dcf4158a57f1baf
Certificate serial:       019E0E12D8BB1CEA98268163971143658185
Authority key identifier: 23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/TeBvR9keyGWF1HddOFbKAa_omvQ.asa
Signing time:             Sat 09 May 2026 18:49:36 +0000
ASPA not before:          Sat 09 May 2026 18:49:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199742
Providers:                AS: 58212
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:0e:12:d8:bb:1c:ea:98:26:81:63:97:11:43:65:81:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a89ab532393863bcb139163dcf4158a57f1baf
        Validity
            Not Before: May  9 18:49:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4de06f47d91ec86585d4775d3856ca01afe89af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:40:95:f4:ac:a8:3a:2f:11:bb:a9:80:c1:
                    cd:d9:75:cd:d7:1c:3d:5e:bf:ed:b0:a6:76:81:5f:
                    7d:14:13:50:19:16:69:33:bd:18:94:cf:92:ce:8b:
                    f0:4f:bc:b1:b8:ce:69:0b:a8:1c:79:c5:88:d4:f2:
                    b3:40:7e:05:38:a2:45:09:79:03:c1:27:36:f7:e1:
                    06:22:70:69:da:0f:a0:90:b5:ba:e0:c6:d9:59:df:
                    91:f5:74:48:a1:06:0d:30:dd:8e:5c:b4:01:0f:92:
                    b7:6f:4b:64:86:14:63:73:4d:a4:f5:6f:4e:cf:d4:
                    4e:fe:19:69:45:df:0a:b7:ca:79:f2:24:bb:21:aa:
                    ba:e5:b0:0b:36:d3:59:9f:7f:a1:1d:9d:d5:eb:d5:
                    57:d6:a9:01:4c:de:9a:bd:bd:82:3f:e0:74:51:5a:
                    40:5e:da:8c:1e:9b:4d:f6:1a:eb:59:b4:49:57:53:
                    df:6a:10:b9:7e:d0:7b:cd:2b:be:3d:a0:8f:15:f7:
                    06:09:0a:67:7a:40:d0:fd:44:48:80:ae:5e:9c:66:
                    5f:e9:df:d1:44:40:8a:93:eb:9b:af:ce:47:77:99:
                    15:83:5c:9a:5a:b6:d7:38:3a:6c:be:aa:46:c0:99:
                    00:65:f8:13:f5:d9:9d:fd:39:ea:b3:36:37:78:50:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E0:6F:47:D9:1E:C8:65:85:D4:77:5D:38:56:CA:01:AF:E8:9A:F4
            X509v3 Authority Key Identifier:
                keyid:23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/TeBvR9keyGWF1HddOFbKAa_omvQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199742

    Signature Algorithm: sha256WithRSAEncryption
         ad:f9:d3:b5:27:69:dd:7b:ec:5a:37:01:cb:3b:66:47:05:dc:
         d5:8d:82:1c:1f:72:cf:34:be:3a:2d:91:6c:02:db:35:67:c4:
         f3:67:29:02:3b:f2:09:cf:73:38:7b:aa:eb:14:e2:b3:6f:19:
         95:d4:b3:81:a9:d3:5b:e5:33:86:ec:3e:98:df:76:f1:ca:e1:
         af:63:98:fd:27:f4:4d:a2:68:24:eb:75:f1:21:08:9f:d4:51:
         f9:93:1d:aa:4d:bd:d5:af:34:8d:a8:2e:3d:e1:37:ac:89:6c:
         b3:9f:47:bf:5c:08:10:c7:d8:ff:f8:03:44:16:38:51:50:44:
         3b:68:fc:65:8d:08:41:30:ac:f5:18:37:38:67:01:44:e0:bb:
         b4:b4:ee:58:29:c2:c4:7a:87:43:68:c6:0b:f6:5c:45:73:19:
         74:5f:02:95:b9:3a:f7:08:6a:0f:2c:f1:66:10:a1:55:eb:36:
         b1:07:db:c5:81:6e:73:89:81:15:40:b4:86:7b:1e:0f:f8:46:
         44:bd:f3:99:04:e2:f7:29:a9:31:3e:b9:03:a3:15:e9:fd:84:
         85:1b:52:74:51:7c:86:60:09:70:fb:4b:a4:be:b6:cf:6d:29:
         0c:0c:3d:1a:12:54:e1:16:3f:d9:f2:f7:81:4b:d3:72:7f:12:
         22:d3:70:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:53 2026 by rpki-client