Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/044xYX9HsasQkNnZ6gNIrDun9Kk.asa
File:                     044xYX9HsasQkNnZ6gNIrDun9Kk.asa (raw, json)
Hash identifier:          QqGXRDWhRxy4fIleJhf8VPuBnT0lLwsILfpI5ZVk2bI=
Subject key identifier:   D3:8E:31:61:7F:47:B1:AB:10:90:D9:D9:EA:03:48:AC:3B:A7:F4:A9
Certificate issuer:       /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial:       019F31DA14E92724329956243D47F9E6D518
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/044xYX9HsasQkNnZ6gNIrDun9Kk.asa
Signing time:             Sun 05 Jul 2026 10:36:43 +0000
ASPA not before:          Sun 05 Jul 2026 10:36:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48472
Providers:                AS: 49673
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:31:da:14:e9:27:24:32:99:56:24:3d:47:f9:e6:d5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
        Validity
            Not Before: Jul  5 10:36:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d38e31617f47b1ab1090d9d9ea0348ac3ba7f4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:28:ad:de:cb:f6:d0:87:0c:70:a6:e5:ee:
                    72:2c:e2:a7:e7:d0:eb:58:8e:b1:b8:29:66:0e:90:
                    d5:d0:8d:eb:be:90:fd:b1:86:c9:ee:16:3a:de:5c:
                    82:38:0c:0c:95:34:0a:23:6f:46:fc:c9:d2:53:5a:
                    e6:37:22:1d:88:7e:59:5c:b2:6a:b6:a9:77:1e:ef:
                    72:90:5c:fc:5e:8a:06:01:bf:8d:9b:cb:11:d2:6e:
                    d6:ff:ee:12:e1:c8:a0:7c:e9:33:13:1d:6c:c3:2d:
                    f5:7b:60:26:5b:3a:75:43:2f:fa:88:3a:7e:23:9f:
                    96:0c:19:cd:4f:bc:c5:aa:7f:4f:69:a0:64:da:11:
                    ce:dc:d0:ca:62:82:64:05:60:e5:28:92:90:ce:39:
                    68:f4:63:63:5f:a5:af:36:f6:97:df:db:44:79:73:
                    96:64:aa:4e:cc:00:54:9b:32:b1:e0:9a:8b:03:9e:
                    ac:5c:0f:06:0f:97:01:57:12:f8:3c:d2:bc:fa:ff:
                    ed:21:72:b9:0b:8b:b9:54:dd:37:6a:3a:7a:a1:37:
                    29:27:0b:07:7d:ac:a1:2a:a0:7e:e0:66:3a:d6:a4:
                    c8:b0:15:dd:c3:ad:0b:72:d4:31:00:62:d9:a7:e5:
                    5f:77:66:83:13:13:8a:2a:e4:59:62:29:56:8d:b0:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8E:31:61:7F:47:B1:AB:10:90:D9:D9:EA:03:48:AC:3B:A7:F4:A9
            X509v3 Authority Key Identifier:
                keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/044xYX9HsasQkNnZ6gNIrDun9Kk.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48472

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:c1:de:6e:d8:38:a3:1a:ab:86:21:b6:b6:9f:4e:dd:92:
         f4:26:37:a5:c3:9d:5f:a6:ba:d7:cb:0b:d2:cc:35:9c:7f:e3:
         e6:95:18:d3:03:55:8b:90:b2:54:16:28:ce:ef:fc:e3:70:61:
         a5:0b:c3:8b:5d:51:50:26:b8:c8:ef:e2:86:a4:40:7d:50:9a:
         c0:f5:e3:4a:5c:7f:3f:4f:c5:cb:04:d2:7d:34:32:ef:ac:b2:
         a5:5d:99:98:65:d3:68:cc:e7:2a:d6:74:4d:fe:85:cb:d1:1e:
         1e:79:1d:5d:6e:7e:60:37:1e:49:69:0a:0f:cb:0b:e5:7e:df:
         9c:ac:78:c5:9b:7d:d4:c8:3b:71:d0:98:d6:ab:c2:f9:8c:d7:
         8a:b9:52:f2:de:83:29:6c:64:cf:ec:9c:e7:d7:fc:8f:58:4a:
         c3:19:e5:96:f4:7d:76:ee:0d:27:e0:3e:94:da:4d:09:8e:70:
         b9:26:9f:fe:3b:f9:13:75:05:96:24:eb:ef:d2:c2:e8:e8:9e:
         00:d3:22:84:f3:9c:9d:ec:19:c2:8f:e1:47:e9:f6:33:f7:73:
         f2:4c:76:a8:2c:ef:9e:01:47:b2:bc:c6:39:5e:1e:19:71:f1:
         79:ff:4a:c6:37:57:57:46:2f:c3:58:19:40:07:dd:d4:43:5a:
         41:75:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:00:20 2026 by rpki-client