Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/MkOrn3cx2BQqm02t_vueOKsFKPk.asa
File:                     MkOrn3cx2BQqm02t_vueOKsFKPk.asa (raw, json)
Hash identifier:          8g1RjrvQ79n3k/tOZkjWDSSi6fzCwbwd+67DGegC7ZY=
Subject key identifier:   32:43:AB:9F:77:31:D8:14:2A:9B:4D:AD:FE:FB:9E:38:AB:05:28:F9
Certificate issuer:       /CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Certificate serial:       019F23690A563501187BB1F09F8100982CAE
Authority key identifier: 80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/MkOrn3cx2BQqm02t_vueOKsFKPk.asa
Signing time:             Thu 02 Jul 2026 15:18:34 +0000
ASPA not before:          Thu 02 Jul 2026 15:18:34 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214805
Providers:                AS: 29049
                          AS: 49666
                          AS: 51889
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:23:69:0a:56:35:01:18:7b:b1:f0:9f:81:00:98:2c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
        Validity
            Not Before: Jul  2 15:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3243ab9f7731d8142a9b4dadfefb9e38ab0528f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:20:0a:e3:da:36:e9:bb:7b:cc:c8:11:d1:
                    bb:59:9a:d4:35:5a:9e:06:df:34:d1:c9:f0:ce:74:
                    82:66:74:c3:81:2e:8a:08:2a:dc:ab:86:95:5e:a0:
                    53:85:46:67:4f:06:7e:35:f2:db:2c:df:9f:dc:66:
                    81:ea:7f:0f:df:ff:f1:eb:c3:1e:85:59:3e:07:09:
                    e6:2c:2f:ae:cd:07:7b:18:25:8e:c4:86:10:f7:a9:
                    ad:29:8f:c9:dc:59:a9:f4:31:a0:53:20:a9:e6:6a:
                    56:78:ca:36:61:aa:89:51:a4:08:c2:d1:74:9f:08:
                    b3:28:b1:cd:fa:58:b6:84:3d:48:bc:24:93:ef:8f:
                    a6:d1:f3:68:b4:ca:20:c1:a7:14:99:9c:ed:95:f1:
                    88:99:65:91:c5:90:31:99:78:1d:15:6d:45:5b:da:
                    73:76:27:5d:05:2d:b5:0f:07:61:e8:7e:1f:28:96:
                    10:fa:15:0b:20:bb:90:49:32:5e:c3:a4:53:0f:15:
                    4b:39:b0:d5:bb:b2:66:bb:98:2b:e9:1d:5b:88:a3:
                    39:55:a2:81:1d:78:9d:be:61:7d:44:d5:46:42:ba:
                    7f:9a:f3:2d:57:e2:f0:c5:67:6c:b9:9a:b6:d6:f9:
                    7d:8b:3a:48:42:99:a9:fb:83:4d:3b:0a:04:a9:83:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:43:AB:9F:77:31:D8:14:2A:9B:4D:AD:FE:FB:9E:38:AB:05:28:F9
            X509v3 Authority Key Identifier:
                keyid:80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/MkOrn3cx2BQqm02t_vueOKsFKPk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214805

    Signature Algorithm: sha256WithRSAEncryption
         73:b3:2a:94:7d:a2:ff:74:75:bf:03:10:65:d5:08:c4:c7:6f:
         09:df:c6:ce:a5:33:81:48:c1:8a:90:c4:45:d1:56:ad:84:08:
         df:bd:b5:62:5f:92:29:5e:1c:b7:35:b3:2c:0e:2e:a2:ed:b7:
         56:5f:ee:83:8a:7a:06:db:63:7f:3f:82:fc:ce:51:aa:61:f0:
         ff:e0:32:9e:85:8a:ba:10:3b:20:86:49:a8:a9:89:d5:d0:06:
         8d:62:52:78:74:59:c1:df:0b:f9:b3:e8:62:ed:73:f5:9c:72:
         80:e2:3a:2d:51:c1:7b:82:3a:4c:00:40:bb:75:44:9a:16:b5:
         9d:d9:26:de:4a:35:7e:39:c9:df:c6:a9:37:80:35:9a:6b:20:
         31:40:07:c4:9f:df:d1:d0:9e:17:f8:71:63:4b:8d:69:a6:ca:
         19:1f:9d:6e:dc:8b:2b:7a:31:10:19:9b:d5:27:bf:26:29:e0:
         72:f9:94:04:e1:31:a9:9a:56:39:ac:51:99:79:30:dd:8c:2c:
         45:f9:f5:4d:5e:97:87:57:a6:66:af:89:6f:02:02:28:53:37:
         fc:bc:e9:d7:51:5f:c6:e3:df:3e:ad:9c:0b:43:68:e3:16:55:
         04:b9:28:e8:10:a2:1c:a2:22:58:04:47:b1:c0:52:4c:67:4f:
         e0:f5:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:38 2026 by rpki-client