Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/BWG7SPr-s2FbJRV3OZDVyzhytVw.asa
File:                     BWG7SPr-s2FbJRV3OZDVyzhytVw.asa (raw, json)
Hash identifier:          a/woNz20qUgYPX88IyjBpkPqZDYzx/nigIGBqf+2iyM=
Subject key identifier:   05:61:BB:48:FA:FE:B3:61:5B:25:15:77:39:90:D5:CB:38:72:B5:5C
Certificate issuer:       /CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
Certificate serial:       019F1901074A461ACBD9E7A0B1F0CC8A9D4E
Authority key identifier: EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/BWG7SPr-s2FbJRV3OZDVyzhytVw.asa
Signing time:             Tue 30 Jun 2026 14:48:45 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210872
Providers:                AS: 6661
                          AS: 6939
                          AS: 49624
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:07:4a:46:1a:cb:d9:e7:a0:b1:f0:cc:8a:9d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb23a5f47ec67e925a92491ab99b24ba371183f1
        Validity
            Not Before: Jun 30 14:48:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0561bb48fafeb3615b2515773990d5cb3872b55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:57:de:36:08:23:86:af:ac:6c:d0:e9:57:
                    bb:bc:76:b4:41:fb:92:41:52:2a:f6:7a:a9:18:fa:
                    24:93:af:61:27:72:76:93:4f:25:2b:41:7d:89:3d:
                    e4:c4:b3:48:da:1d:db:0a:e0:23:c9:72:bd:2e:f6:
                    76:7d:c3:12:71:b0:2a:cd:22:1d:28:ce:0e:a2:fb:
                    8f:02:44:50:09:88:f3:cd:82:b4:39:64:56:e4:0b:
                    7a:24:4e:94:a1:d8:1c:9c:25:37:49:d9:4d:e9:97:
                    f6:62:93:55:a7:c3:c1:25:3a:cb:f1:01:76:c5:f2:
                    87:02:b7:b4:7a:8e:30:4e:4d:06:95:9e:5a:14:05:
                    a9:4b:b1:e5:fd:b5:f3:07:6e:da:87:30:9b:cf:4b:
                    af:e3:09:0a:2f:18:39:25:cb:68:87:0e:a8:42:af:
                    6e:e2:05:a1:d8:8e:f2:d4:87:5d:44:90:d8:0a:40:
                    60:21:12:e8:ef:5f:b4:20:25:d5:f4:ee:3c:c7:a6:
                    6f:71:ac:cc:04:3d:58:35:ce:cd:a3:70:32:8f:2e:
                    a5:b2:d2:a4:5b:b5:a7:6b:1f:44:6b:3d:ee:8f:3b:
                    64:b7:a5:10:10:92:8e:51:18:ed:81:29:48:b9:bd:
                    89:e5:ed:23:a5:42:03:19:ed:bf:4d:82:68:6b:0d:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:61:BB:48:FA:FE:B3:61:5B:25:15:77:39:90:D5:CB:38:72:B5:5C
            X509v3 Authority Key Identifier:
                keyid:EB:23:A5:F4:7E:C6:7E:92:5A:92:49:1A:B9:9B:24:BA:37:11:83:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yOl9H7GfpJakkkauZskujcRg_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/BWG7SPr-s2FbJRV3OZDVyzhytVw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ab5500-f623-4a54-9ae2-ffe21ef98674/1/6yOl9H7GfpJakkkauZskujcRg_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210872

    Signature Algorithm: sha256WithRSAEncryption
         6a:83:a5:a4:8c:fd:22:d6:e8:53:5c:e0:f7:eb:a1:c1:f9:bd:
         44:8e:45:39:39:05:cb:f0:91:5f:98:df:71:d9:b2:de:6a:04:
         e5:1d:78:22:4c:f6:ac:27:71:e7:3b:be:42:d6:e5:e2:e5:ad:
         67:a4:57:59:29:01:8a:f6:ba:7f:db:06:7f:34:54:43:a9:b1:
         8d:eb:26:a9:16:d2:9f:1b:a0:70:06:9e:58:e4:bd:d2:03:dc:
         17:ac:35:56:82:59:c8:18:ba:6e:00:de:51:40:97:17:33:d8:
         f6:c6:d4:7b:25:b4:ae:12:ca:ce:c0:98:ca:a2:80:ad:64:77:
         d0:7c:20:df:0c:cc:8f:c1:71:0d:fe:06:7e:6b:f5:68:6c:18:
         09:a1:30:49:d8:65:46:17:67:52:17:55:de:e1:26:29:14:32:
         2f:ab:e0:5c:c3:ea:f9:7a:51:03:55:95:66:c9:c2:70:84:80:
         cf:52:2f:57:b5:dc:46:72:c5:9c:bb:c4:e5:57:bc:2e:bb:84:
         7d:de:8b:75:fc:7b:2e:97:6a:ee:1d:1c:0d:9b:95:e8:32:ca:
         8f:f6:e4:78:3a:3a:90:a4:8f:f9:ef:7a:63:ce:60:a6:c1:74:
         84:06:05:b5:d1:83:53:42:e0:d7:3f:ef:8c:28:89:49:4a:76:
         cb:11:18:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:29 2026 by rpki-client