Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/OzKbANdQErY5Sru6905yulOIjk4.asa
File:                     OzKbANdQErY5Sru6905yulOIjk4.asa (raw, json)
Hash identifier:          D30wXszSwD391+3ksN4oCa8HuVRBTEm37iuSMSv9Q3I=
Subject key identifier:   3B:32:9B:00:D7:50:12:B6:39:4A:BB:BA:F7:4E:72:BA:53:88:8E:4E
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019D1ED4D960A416199C9B275F67E9478BB3
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/OzKbANdQErY5Sru6905yulOIjk4.asa
Signing time:             Tue 24 Mar 2026 07:52:38 +0000
ASPA not before:          Tue 24 Mar 2026 07:52:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 201279
                          AS: 213449
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1e:d4:d9:60:a4:16:19:9c:9b:27:5f:67:e9:47:8b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Mar 24 07:52:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3b329b00d75012b6394abbbaf74e72ba53888e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:d4:5b:bf:ec:8f:d7:bd:64:51:cb:d1:d4:
                    38:6b:91:b4:4b:87:bf:b4:8b:e1:9f:35:72:1b:27:
                    90:0c:7f:3a:f7:14:44:ea:f7:26:30:46:06:e6:3e:
                    0b:f3:11:9f:6e:63:cd:e1:b1:f3:49:be:19:54:9c:
                    70:08:72:07:cd:15:00:de:93:90:a5:f7:d4:25:d3:
                    3d:00:c8:d0:d7:c0:7f:8b:aa:f4:4a:84:6f:f7:c4:
                    2f:70:b6:c6:16:94:03:52:22:b0:50:25:dc:71:3c:
                    8c:cc:6a:d4:02:8b:32:30:96:5b:99:6b:99:f8:d7:
                    18:5e:89:77:f7:50:7c:3b:29:62:4e:37:b8:ae:1b:
                    1e:50:f9:0a:9c:e6:cb:57:82:90:3c:16:4b:0e:62:
                    26:6d:c6:ef:2a:13:7e:28:af:94:bd:17:4c:37:f4:
                    24:e8:7b:90:76:b8:9e:a6:62:da:a4:bd:04:51:94:
                    ce:f7:a1:e5:16:26:12:f3:5e:71:50:b4:f5:a1:a3:
                    9b:cb:d9:96:12:6b:d0:18:56:16:44:0c:f3:c9:36:
                    c8:41:ac:93:96:8d:09:ca:6e:b9:7a:1c:b8:9e:ac:
                    22:de:a9:64:14:2f:5a:f6:94:15:cd:14:31:c6:55:
                    56:d4:64:85:9d:8f:29:a3:e8:ce:12:0d:f1:e6:89:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:32:9B:00:D7:50:12:B6:39:4A:BB:BA:F7:4E:72:BA:53:88:8E:4E
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/OzKbANdQErY5Sru6905yulOIjk4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         83:f4:1d:0b:75:9f:d4:8a:e8:a2:df:dc:a2:70:03:96:72:91:
         3e:cd:bf:89:e2:47:53:30:d3:05:14:87:69:66:76:cc:e6:89:
         e4:b3:99:96:03:c6:9a:a4:87:73:eb:44:70:d0:3e:f7:0c:f1:
         3b:c5:23:29:89:bb:2d:ed:48:4d:9e:25:29:29:fa:00:c4:1a:
         de:d3:1a:ab:23:49:79:ac:c0:f6:ee:e7:c4:7d:02:68:77:b2:
         a6:dc:56:ca:f8:3c:b7:5e:dc:8b:09:c9:68:67:11:aa:47:e8:
         c7:7d:dc:32:01:d9:0c:83:e5:de:73:43:cc:e9:4d:aa:25:ed:
         19:1b:ee:b0:b2:2a:27:36:63:d1:00:e9:11:bb:b3:cb:2d:06:
         fc:af:b1:01:80:7a:4f:b9:c4:90:fa:03:e1:37:2e:a4:d3:4c:
         95:9c:14:70:d3:5b:bb:fb:b3:5e:84:26:7f:1d:37:b5:c1:6d:
         2b:07:1c:3d:7a:8e:3b:0d:c7:3c:f2:b6:a3:19:ad:6e:70:1c:
         dc:0f:97:2b:f8:9b:5f:84:a9:8e:53:47:74:58:58:d3:38:55:
         e8:8f:37:42:af:a0:76:42:b6:6e:28:71:de:5e:13:44:eb:b9:
         df:16:cc:2b:91:05:01:1c:4a:1d:db:16:71:0c:ba:b4:30:45:
         58:9c:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:34 2026 by rpki-client