Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/kjwvRpYiwOhcBYij8xZk0n0qpVs.asa
File:                     kjwvRpYiwOhcBYij8xZk0n0qpVs.asa (raw, json)
Hash identifier:          eLOVHbyXbAmwSoR/i5JEDYllBqHeZO1blxzW1aKtYRM=
Subject key identifier:   92:3C:2F:46:96:22:C0:E8:5C:05:88:A3:F3:16:64:D2:7D:2A:A5:5B
Certificate issuer:       /CN=3eb1788fe220e46434692d1cc437072d792d7888
Certificate serial:       019F190138F9665C490D9DD465B177C16B2D
Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/kjwvRpYiwOhcBYij8xZk0n0qpVs.asa
Signing time:             Tue 30 Jun 2026 14:48:58 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212674
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:38:f9:66:5c:49:0d:9d:d4:65:b1:77:c1:6b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888
        Validity
            Not Before: Jun 30 14:48:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=923c2f469622c0e85c0588a3f31664d27d2aa55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:9a:07:d2:4c:79:e0:82:5e:1f:23:09:d7:
                    27:1b:b3:46:f8:55:30:a0:68:30:0e:77:5f:d4:66:
                    45:49:fe:33:74:3c:10:a9:ec:f9:85:04:0d:53:e3:
                    5f:e1:93:26:df:1f:39:0b:20:d9:ed:e2:04:e8:ed:
                    e2:95:8c:b0:40:bc:09:10:2d:c7:3e:7f:f8:98:6d:
                    be:0d:f6:93:5d:45:4d:a7:f5:d7:20:46:d6:c9:51:
                    9f:2d:4a:b3:ef:fe:db:8a:20:9e:86:e4:6a:17:28:
                    ab:73:6e:7e:f2:5a:e0:9e:eb:71:a5:70:ac:b4:31:
                    35:ae:a4:95:ec:78:41:5c:33:91:0f:fb:78:fc:b0:
                    ce:e1:e4:7d:23:1a:15:e9:81:fb:49:be:ac:1c:c3:
                    ea:75:8b:65:13:b8:d7:a2:c1:8c:b2:eb:ff:8c:23:
                    c1:bb:61:97:39:65:89:06:d1:2c:72:15:e3:cd:f2:
                    a8:6c:30:1d:f3:79:08:22:9c:f8:fb:b3:d9:2d:dd:
                    12:93:04:cf:d6:b3:ca:f5:b8:af:c8:47:c3:5b:2f:
                    62:62:9d:14:2f:91:43:9b:d8:45:50:bf:c9:76:df:
                    7e:b9:fb:95:f4:f3:a6:f2:4b:98:de:20:e0:67:2c:
                    7f:69:87:54:8f:0e:93:56:9e:e6:a4:1a:7b:90:0b:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3C:2F:46:96:22:C0:E8:5C:05:88:A3:F3:16:64:D2:7D:2A:A5:5B
            X509v3 Authority Key Identifier:
                keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/kjwvRpYiwOhcBYij8xZk0n0qpVs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212674

    Signature Algorithm: sha256WithRSAEncryption
         70:1a:37:26:c0:83:7a:64:7a:a8:56:8b:16:55:28:64:b8:a5:
         5b:7a:d7:ec:2d:b9:e6:d5:c8:03:7b:f1:4e:a1:ae:8e:ad:d7:
         3c:35:c9:7c:34:ed:05:42:25:cf:e0:12:54:f7:e3:b8:ce:47:
         12:d1:53:73:bb:36:15:b8:e1:f0:4b:e6:10:97:59:90:44:73:
         46:41:5a:89:0a:35:ae:db:9d:e1:c6:e2:cc:92:c6:a8:1c:9d:
         20:08:d4:c8:3b:c3:fe:0a:8e:a2:7c:20:1a:c3:ea:e7:85:bc:
         ba:d3:40:4b:54:71:ff:15:50:3c:9a:06:a7:da:5e:2e:ce:11:
         9a:7c:82:39:b5:61:5c:84:cc:fc:84:f5:d4:89:4f:8d:ed:0d:
         4e:35:8f:bd:3b:9a:6c:41:00:d5:1b:49:13:89:88:7c:d5:ca:
         b1:8c:19:71:ae:25:c2:86:ad:e6:17:ef:79:3f:d2:fc:ef:82:
         2a:06:24:3f:66:cf:8e:4d:47:4e:b8:80:e2:0d:37:6c:41:87:
         d7:84:0e:d0:af:70:b4:1d:a7:7e:d4:f4:cc:df:19:07:de:bf:
         62:07:4e:f5:cf:9d:41:5a:19:ef:7a:0f:93:d3:56:d9:d5:26:
         f7:93:8f:dc:61:4b:32:da:fa:a4:7e:ec:64:9e:3e:0e:61:dc:
         02:db:2e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:08 2026 by rpki-client