Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/1-oVMePvmP_ShU4g9iq3PEMwk624.asa
File:                     1-oVMePvmP_ShU4g9iq3PEMwk624.asa (raw, json)
Hash identifier:          pi0ntWvCbn7cLEwUcdMKB4Mh3rw+t4rGo3pT9vesjgs=
Subject key identifier:   FA:85:4C:78:FB:E6:3F:F4:A1:53:88:3D:8A:AD:CF:10:CC:24:EB:6E
Certificate issuer:       /CN=d7401e0249418b357547268824f6244925d8db39
Certificate serial:       019D06E3403E8C464BB231EA36FA938015A4
Authority key identifier: D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/1-oVMePvmP_ShU4g9iq3PEMwk624.asa
Signing time:             Thu 19 Mar 2026 16:17:29 +0000
ASPA not before:          Thu 19 Mar 2026 16:17:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60478
Providers:                AS: 24904
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:06:e3:40:3e:8c:46:4b:b2:31:ea:36:fa:93:80:15:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7401e0249418b357547268824f6244925d8db39
        Validity
            Not Before: Mar 19 16:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fa854c78fbe63ff4a153883d8aadcf10cc24eb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:b4:1c:a3:54:a9:ed:47:02:39:b8:5a:55:
                    5f:3a:88:3f:f3:7c:a7:e4:fa:36:0a:7f:04:8f:7d:
                    ca:c3:11:47:1a:12:65:e8:85:f5:05:57:16:77:23:
                    3c:df:46:07:ce:ad:33:ba:3b:d9:1c:21:4b:b0:b2:
                    ff:99:a9:b1:01:94:7f:02:66:75:9e:ee:af:d7:53:
                    c0:db:c2:b2:c8:f9:8c:b4:ac:8a:ad:c3:02:c9:ea:
                    22:8c:64:2b:f4:7c:c1:e2:81:e0:2c:de:b7:17:b6:
                    0c:35:d1:9c:65:c9:2e:74:59:bc:2c:79:82:2d:fc:
                    ef:10:01:49:9f:53:39:94:b0:ac:12:7f:25:3f:c3:
                    04:70:cd:43:e9:f2:58:69:11:38:0f:e3:0a:83:a5:
                    4b:5c:1c:97:2d:ed:d0:8b:1f:a2:5f:ba:1b:08:2b:
                    89:0c:ac:3c:ba:74:63:c7:78:f2:7a:76:c4:72:21:
                    83:f7:2f:aa:15:23:22:56:a7:3b:4e:4c:8e:a7:d8:
                    15:80:fa:de:93:72:11:e8:8c:99:89:78:84:cd:fd:
                    cf:8f:86:19:4b:05:f4:2d:83:3a:ec:27:7a:2d:47:
                    20:33:c7:ba:27:67:53:8b:a7:51:f3:40:dc:98:c2:
                    ac:03:4a:ac:b3:24:05:00:79:4e:c8:20:49:2b:5a:
                    9e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:85:4C:78:FB:E6:3F:F4:A1:53:88:3D:8A:AD:CF:10:CC:24:EB:6E
            X509v3 Authority Key Identifier:
                keyid:D7:40:1E:02:49:41:8B:35:75:47:26:88:24:F6:24:49:25:D8:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10AeAklBizV1RyaIJPYkSSXY2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/1-oVMePvmP_ShU4g9iq3PEMwk624.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d73137-b089-4db4-b6b2-507891395417/1/10AeAklBizV1RyaIJPYkSSXY2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60478

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:0c:10:1b:9a:73:48:12:ee:0d:66:0a:98:1a:ae:60:49:
         5e:fa:76:0b:d9:66:d1:1f:b2:1a:15:aa:b0:c4:84:d4:61:8b:
         18:7b:5d:1e:47:e0:a9:7e:1f:39:9c:94:36:7b:c5:6a:08:17:
         ba:cc:3b:74:11:97:61:53:5b:0a:9b:17:a8:98:87:4e:56:3f:
         c3:38:05:87:5d:8d:92:7b:30:6a:cb:36:1a:5f:e7:2b:c9:71:
         ac:0c:e3:6d:98:7c:22:bc:ef:77:31:b8:da:fb:bf:7c:33:52:
         17:4b:1e:2c:86:33:ff:08:d4:1f:11:a2:2a:56:66:88:47:c4:
         c5:fa:e1:13:c6:f3:7d:a7:26:93:99:b7:a2:3d:8e:45:39:ad:
         7e:0f:6d:96:3f:25:79:70:3a:08:94:f0:d8:6d:f9:0d:9b:48:
         da:1d:b0:4f:7e:89:76:46:dc:c2:da:38:90:6f:78:69:6c:dc:
         2d:31:0e:42:f6:67:25:03:20:7c:f5:01:ec:d7:0d:96:09:00:
         14:10:2c:f6:2b:50:a3:f5:ef:f6:9b:a6:39:7a:b7:94:e1:cc:
         95:60:d3:2a:55:c8:6a:36:c3:b8:33:82:61:dd:42:51:58:6c:
         e9:13:5a:58:cf:c6:ce:18:8e:37:5c:a6:54:ef:3a:35:2c:04:
         28:95:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:29 2026 by rpki-client