Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/JYn2M7_rIc8fBVgkcpLz4v7BoHA.asa
File:                     JYn2M7_rIc8fBVgkcpLz4v7BoHA.asa (raw, json)
Hash identifier:          eCyWidd/dL2hFEJIIveZsFQRYZ6KUzyiJR/MShyECHo=
Subject key identifier:   25:89:F6:33:BF:EB:21:CF:1F:05:58:24:72:92:F3:E2:FE:C1:A0:70
Certificate issuer:       /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial:       019F19011D0DD838993BC75FE77BC7B10214
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/JYn2M7_rIc8fBVgkcpLz4v7BoHA.asa
Signing time:             Tue 30 Jun 2026 14:48:51 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            43617
Providers:                AS: 29551
                          AS: 58145
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:1d:0d:d8:38:99:3b:c7:5f:e7:7b:c7:b1:02:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
        Validity
            Not Before: Jun 30 14:48:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2589f633bfeb21cf1f0558247292f3e2fec1a070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:de:5b:33:e8:ee:f5:ba:e0:5b:cf:23:d6:9d:
                    eb:8c:40:70:fc:65:27:27:bd:88:03:91:fb:a0:a1:
                    e1:da:e4:e4:0e:3f:b2:66:f7:24:85:31:67:77:31:
                    6f:ca:c9:a4:0f:b0:6f:0d:28:aa:32:3c:df:57:44:
                    8a:b0:9a:5a:bd:16:24:4b:c0:5b:2d:db:7c:6b:31:
                    7a:b2:e7:fc:dc:93:14:8d:64:1c:3e:e0:69:9d:64:
                    03:81:bc:cf:ca:7b:0f:63:a9:fa:9b:9d:91:e0:62:
                    78:97:e1:ba:90:3c:6f:ce:44:eb:a9:dd:73:68:0c:
                    a1:3e:eb:10:c9:f3:81:7f:97:46:8c:a0:b3:97:61:
                    8d:64:92:06:c9:0b:3f:94:42:d6:fb:37:d4:6e:97:
                    b1:89:61:a8:97:97:9f:25:04:6c:6c:63:9c:45:ef:
                    f5:88:42:03:73:9b:35:89:16:27:c3:47:04:64:05:
                    aa:5d:74:16:c0:ba:d9:ac:d2:8e:b3:7c:91:80:1a:
                    93:b7:75:23:4e:f5:ca:c8:30:26:4a:4d:a8:b0:b9:
                    b2:39:8b:43:e9:d0:c0:53:37:a6:b4:93:52:23:80:
                    78:70:f0:b3:8f:24:78:14:ea:c8:66:f9:0f:57:af:
                    98:3e:0f:a9:ee:67:2c:78:50:56:4d:22:51:43:57:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:89:F6:33:BF:EB:21:CF:1F:05:58:24:72:92:F3:E2:FE:C1:A0:70
            X509v3 Authority Key Identifier:
                keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/JYn2M7_rIc8fBVgkcpLz4v7BoHA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43617

    Signature Algorithm: sha256WithRSAEncryption
         7a:28:ee:56:7b:21:80:a1:88:85:39:75:82:7b:34:fa:85:9b:
         ce:17:65:32:80:4c:e5:d7:18:bb:e9:21:5f:d6:59:af:cf:28:
         cc:c9:ed:81:fc:72:86:67:5a:55:04:a2:d3:86:4f:3b:71:27:
         7d:8d:0d:c6:ef:12:c1:98:06:98:51:f2:34:ae:38:be:fc:7d:
         4a:e8:13:ea:20:2f:ad:24:5a:da:20:1b:25:32:4d:df:cc:f7:
         c7:9e:2c:b5:23:54:30:7f:a8:b7:1d:f1:5c:86:df:00:3f:b1:
         c9:46:f5:35:fe:65:8d:09:1e:90:08:e6:51:f9:2e:5f:61:ff:
         0d:55:f6:7b:59:9c:25:b1:36:a1:e4:f7:75:e8:c0:a4:e2:a7:
         bb:60:c5:e8:ba:f2:72:18:52:43:40:66:4e:4c:0e:ae:8c:18:
         bb:b1:a1:80:ac:5d:0f:06:d7:ed:96:ba:59:92:cd:5a:6e:03:
         28:0a:83:fc:cd:aa:54:19:15:0e:3c:b0:2d:62:bb:38:81:c9:
         8b:8e:c1:31:52:b6:e7:ac:ae:ca:c6:95:a7:93:e2:26:87:8f:
         86:f0:2b:1c:cf:f3:3d:92:e2:28:68:c1:13:71:d8:09:de:87:
         d6:5b:e6:43:51:65:0f:6c:0e:51:6b:ee:8b:52:9f:5c:9d:87:
         c1:75:ed:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:30 2026 by rpki-client