Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/FXZzLUTLI2bnJX3HE0iocMnGK24.asa
File:                     FXZzLUTLI2bnJX3HE0iocMnGK24.asa (raw, json)
Hash identifier:          0jHNXzmBRRsiRYGYoiH0GyC90Hc/n11rPyQ1ORy1E6M=
Subject key identifier:   15:76:73:2D:44:CB:23:66:E7:25:7D:C7:13:48:A8:70:C9:C6:2B:6E
Certificate issuer:       /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
Certificate serial:       019F31DA15B4A8A46637582CC55EC81DF958
Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/FXZzLUTLI2bnJX3HE0iocMnGK24.asa
Signing time:             Sun 05 Jul 2026 10:36:43 +0000
ASPA not before:          Sun 05 Jul 2026 10:36:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            59954
Providers:                AS: 49673
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:31:da:15:b4:a8:a4:66:37:58:2c:c5:5e:c8:1d:f9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3
        Validity
            Not Before: Jul  5 10:36:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1576732d44cb2366e7257dc71348a870c9c62b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:c9:30:fd:2b:8a:4f:b0:6e:f6:de:3c:6e:
                    bb:49:1d:4f:1f:49:1e:f2:62:be:db:9a:a7:19:3f:
                    25:68:36:cb:9f:ee:7a:aa:fe:c4:16:7b:37:6d:51:
                    5f:86:07:25:5d:b4:56:4d:47:b3:ab:cf:de:f4:1d:
                    95:1b:a6:b3:19:c9:2f:0c:b5:1f:80:4d:9d:79:19:
                    3a:df:d9:85:2c:51:6b:a4:7a:77:4d:17:50:5b:3c:
                    4f:f4:11:5b:cb:57:ff:d5:ec:21:af:cb:49:3c:e0:
                    8c:8a:2b:7f:df:5d:e1:7b:ab:ac:76:4e:db:a5:97:
                    6a:bf:d6:0a:a5:5b:d2:1e:aa:ba:b1:55:ed:e6:3b:
                    14:10:89:cc:53:95:8a:72:4b:88:31:9f:6c:c7:ad:
                    a2:67:93:22:32:cb:29:6d:8b:ed:cc:14:2f:8a:d3:
                    79:d4:ac:0f:31:b4:59:7d:da:3d:01:80:38:5d:73:
                    83:95:de:80:c5:d3:68:a0:0e:68:9a:f0:a0:b4:1c:
                    a4:00:20:25:34:39:83:d7:c0:08:fc:9f:33:af:07:
                    1f:ad:e0:8d:69:70:a5:7e:17:ca:93:72:e2:06:7b:
                    a4:3c:6d:89:6b:3a:54:55:00:19:dd:26:6e:8d:9e:
                    0c:5e:46:82:74:2a:26:4d:34:59:46:ee:1e:76:05:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:73:2D:44:CB:23:66:E7:25:7D:C7:13:48:A8:70:C9:C6:2B:6E
            X509v3 Authority Key Identifier:
                keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/FXZzLUTLI2bnJX3HE0iocMnGK24.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59954

    Signature Algorithm: sha256WithRSAEncryption
         84:7e:5c:28:e9:12:e5:cc:d7:a1:8f:fa:20:78:63:d1:e4:ce:
         7a:af:b1:e4:0f:b6:49:9a:88:e8:dd:6f:d0:0a:a7:2c:21:ec:
         3a:7e:8b:84:ca:8b:18:cc:32:88:54:22:2d:8e:6b:f8:d6:cc:
         5a:d5:fe:8f:31:eb:c0:ef:c7:3b:70:ad:d4:af:40:56:f0:25:
         fe:34:78:64:d4:71:1a:da:e9:82:4a:db:ab:fd:92:76:3b:66:
         44:9a:14:95:43:cc:0b:8a:8b:ae:74:a6:3b:5d:10:51:65:88:
         aa:3c:4a:6b:da:8e:65:8b:9b:60:b6:f8:fd:fb:4c:d4:b0:e8:
         37:26:f5:14:5b:5e:fc:0d:db:1f:a8:d9:ca:ff:a3:e7:4a:03:
         0a:a7:3f:0b:5f:5a:76:91:86:84:1e:9e:90:43:7f:9a:08:74:
         4c:61:78:2b:01:6a:4d:19:31:c7:f7:83:d8:f8:99:36:ab:d9:
         b5:92:b5:9a:87:08:79:86:7a:d9:ee:78:5f:27:10:af:6f:ea:
         f5:7f:c4:28:af:53:ae:f9:29:6b:ce:b4:b8:23:7d:0a:b9:a1:
         05:18:90:9b:ea:45:08:62:2a:09:b8:e6:d7:1e:9d:26:26:97:
         e6:9a:28:f6:06:8d:01:13:30:f4:e5:97:e2:06:3c:f9:59:25:
         28:6b:eb:f0
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ8x2hW0qKRmN1gsxV7IHflYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4
MGIxZTMwHhcNMjYwNzA1MTAzNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTc2NzMyZDQ0Y2IyMzY2ZTcyNTdkYzcxMzQ4YTg3MGM5YzYyYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXzJMP0rik+wbvbePG67SR1PH0ke
8mK+25qnGT8laDbLn+56qv7EFns3bVFfhgclXbRWTUezq8/e9B2VG6azGckvDLUf
gE2deRk639mFLFFrpHp3TRdQWzxP9BFby1f/1ewhr8tJPOCMiit/313he6usdk7b
pZdqv9YKpVvSHqq6sVXt5jsUEInMU5WKckuIMZ9sx62iZ5MiMsspbYvtzBQvitN5
1KwPMbRZfdo9AYA4XXODld6AxdNooA5omvCgtBykACAlNDmD18AI/J8zrwcfreCN
aXClfhfKk3LiBnukPG2JazpUVQAZ3SZujZ4MXkaCdComTTRZRu4edgVFiQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFBV2cy1EyyNm5yV9xxNIqHDJxituMB8GA1UdIwQY
MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct
ZmZiNzA5Zjc2NjhjLzEvRlhaekxVVExJMmJuSlgzSEUwaW9jTW5HSzI0LmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj
LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDqMjANBgkqhkiG
9w0BAQsFAAOCAQEAhH5cKOkS5czXoY/6IHhj0eTOeq+x5A+2SZqI6N1v0AqnLCHs
On6LhMqLGMwyiFQiLY5r+NbMWtX+jzHrwO/HO3Ct1K9AVvAl/jR4ZNRxGtrpgkrb
q/2SdjtmRJoUlUPMC4qLrnSmO10QUWWIqjxKa9qOZYubYLb4/ftM1LDoNyb1FFte
/A3bH6jZyv+j50oDCqc/C19adpGGhB6ekEN/mgh0TGF4KwFqTRkxx/eD2PiZNqvZ
tZK1mocIeYZ62e54XycQr2/q9X/EKK9Trvkpa860uCN9CrmhBRiQm+pFCGIqCbjm
1x6dJiaX5poo9gaNARMw9OWX4gY8+VklKGvr8A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:16 2026 by rpki-client