Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/1-lkGZhIuyoLc-xdILurzrx5fcUA.asa
File:                     1-lkGZhIuyoLc-xdILurzrx5fcUA.asa (raw, json)
Hash identifier:          APoM994M8OUix1Q1A5wwIVp1ItNTgJQaQCCwGYmbLkI=
Subject key identifier:   FA:59:06:66:12:2E:CA:82:DC:FB:17:48:2E:EA:F3:AF:1E:5F:71:40
Certificate issuer:       /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial:       019E1C96F9C2D44D803A518D8D1635E14A6B
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/1-lkGZhIuyoLc-xdILurzrx5fcUA.asa
Signing time:             Tue 12 May 2026 14:28:36 +0000
ASPA not before:          Tue 12 May 2026 14:28:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            62451
Providers:                AS: 8412
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:96:f9:c2:d4:4d:80:3a:51:8d:8d:16:35:e1:4a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
        Validity
            Not Before: May 12 14:28:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fa590666122eca82dcfb17482eeaf3af1e5f7140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:c3:e6:ee:9e:08:0a:4d:5a:05:42:01:0f:
                    ab:91:c3:c4:51:fa:43:5d:c2:3c:b0:a7:43:40:00:
                    d7:85:ce:82:89:cc:df:7c:97:b0:f8:21:2a:ea:d4:
                    21:68:b4:91:04:42:32:c0:14:e7:ea:42:d9:d8:6d:
                    52:6b:5a:20:83:02:0a:19:2a:81:ed:ad:89:9e:f4:
                    a0:3e:85:c8:93:21:cf:0b:c6:e1:2c:02:21:df:3d:
                    b9:5f:94:69:37:cc:e8:e1:26:d5:00:b4:3f:e7:4b:
                    f1:40:4e:9c:39:af:90:20:16:e2:34:64:22:21:ae:
                    dd:6b:b1:ef:f2:48:ec:af:97:42:22:44:c4:9e:c4:
                    01:4e:a9:7b:ee:c4:9c:a2:e8:18:8c:55:6d:c7:4d:
                    60:f4:0e:83:a2:8e:6d:d1:ea:4a:d8:92:06:30:c9:
                    ea:7e:a8:14:78:0d:38:22:69:14:57:c1:1b:ee:2e:
                    f6:2c:05:48:0b:7a:33:73:a9:a2:c5:2f:f3:fc:15:
                    6d:4a:e8:40:04:a9:0d:d8:e8:fd:35:38:fb:8c:ed:
                    bc:63:e7:ad:e7:72:10:ae:e4:35:68:4f:47:2f:46:
                    8c:39:10:23:9c:56:c6:9d:86:e8:0b:3a:42:b9:12:
                    26:47:5c:5d:b4:4e:59:60:86:e2:55:57:b9:11:e0:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:59:06:66:12:2E:CA:82:DC:FB:17:48:2E:EA:F3:AF:1E:5F:71:40
            X509v3 Authority Key Identifier:
                keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/1-lkGZhIuyoLc-xdILurzrx5fcUA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62451

    Signature Algorithm: sha256WithRSAEncryption
         66:ca:bf:f8:97:2c:25:ff:ff:2c:ce:4f:b0:26:d5:fc:ce:a0:
         c9:cc:a8:3c:08:70:b8:e6:f1:5a:0f:39:55:2f:a0:65:bb:ee:
         34:bc:10:8e:34:78:75:45:69:01:61:3f:59:8c:7e:af:45:7d:
         20:a5:a4:5a:c1:bd:3a:94:4e:67:1d:bb:ed:e4:ca:ee:0b:40:
         82:a9:9e:4f:dc:f1:be:69:45:b7:02:02:e8:3a:4a:ff:35:f4:
         89:e6:e3:2c:aa:0b:c9:19:59:65:b7:e1:34:8f:37:82:fb:cb:
         24:c3:98:48:ae:b8:ed:bf:d0:d7:10:97:01:7a:5b:d1:fe:45:
         9b:85:eb:ef:10:1c:bf:da:f7:89:c9:b7:3c:25:91:a3:55:85:
         bb:48:67:aa:0f:6e:b6:a1:ed:bf:74:e4:1a:c9:02:38:bb:d4:
         6d:fa:cd:1d:89:19:86:6f:ea:cf:08:2f:fe:aa:4a:f7:1e:3a:
         55:f0:35:3e:64:6c:d3:79:48:49:54:0a:8d:9d:35:96:0c:f3:
         a6:d7:3e:ec:b8:3c:a8:09:1f:19:19:cf:06:35:7f:55:9c:55:
         fc:15:ac:25:fe:ea:0d:80:a5:6d:79:35:59:30:2c:55:3d:08:
         64:7a:6a:18:1d:77:ec:49:c3:37:6e:ba:6e:2b:b2:d6:37:ee:
         d9:62:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:55 2026 by rpki-client