Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/ozXAdPsdIFqyx1N_0quYyoEkT7k.asa
File:                     ozXAdPsdIFqyx1N_0quYyoEkT7k.asa (raw, json)
Hash identifier:          7S1hNli0f7Eh9CTGs9N/Ok/OO+DwCV2KnybIJmgIzr0=
Subject key identifier:   A3:35:C0:74:FB:1D:20:5A:B2:C7:53:7F:D2:AB:98:CA:81:24:4F:B9
Certificate issuer:       /CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Certificate serial:       019F930BD5B2EBA9A79246796FBF239ABBA9
Authority key identifier: 8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/ozXAdPsdIFqyx1N_0quYyoEkT7k.asa
Signing time:             Fri 24 Jul 2026 07:34:14 +0000
ASPA not before:          Fri 24 Jul 2026 07:34:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219421
Providers:                AS: 11967
                          AS: 31898
                          AS: 41051
                          AS: 47272
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:0b:d5:b2:eb:a9:a7:92:46:79:6f:bf:23:9a:bb:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
        Validity
            Not Before: Jul 24 07:34:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a335c074fb1d205ab2c7537fd2ab98ca81244fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6d:de:e3:18:2b:f8:27:c9:3f:85:c5:9e:6d:
                    f8:f6:be:7f:43:c1:32:eb:33:55:78:be:07:f8:ee:
                    4d:5b:54:4f:fc:00:38:57:37:e8:cb:4d:f9:72:e8:
                    9c:de:be:29:7b:9a:0c:78:a1:b7:51:35:1d:e5:da:
                    6f:f5:f6:4a:1c:27:66:f9:b8:7a:fe:57:d2:45:38:
                    65:72:f5:95:07:7a:c9:81:a0:3a:25:30:77:29:19:
                    ff:1a:96:91:a8:d3:1e:e2:41:9b:ce:aa:fc:d7:ca:
                    d0:29:b6:5d:75:fc:24:e8:23:ec:b7:b1:1e:89:6c:
                    86:45:f3:92:40:cf:21:72:5b:ba:db:d7:38:c8:d6:
                    96:9d:53:89:43:db:a6:be:e3:95:d6:59:98:d5:b3:
                    25:9c:84:d7:3d:0e:e2:06:ed:30:a8:8f:57:4f:7a:
                    f8:e9:df:9d:5c:b0:f3:a6:0d:ce:cc:2d:b9:94:27:
                    32:45:8e:d3:1b:f1:49:14:6a:92:59:dc:81:0a:dc:
                    41:d6:01:bd:57:72:73:7f:c7:93:7b:8b:d2:b6:f5:
                    67:a6:0c:50:78:4c:82:df:18:e8:87:6e:3a:4c:46:
                    18:71:97:d7:7f:85:df:5d:9f:f2:8f:13:3d:e8:e0:
                    d3:92:fb:e5:80:43:d5:19:3a:4f:bb:54:4f:ba:08:
                    c2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:35:C0:74:FB:1D:20:5A:B2:C7:53:7F:D2:AB:98:CA:81:24:4F:B9
            X509v3 Authority Key Identifier:
                keyid:8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/ozXAdPsdIFqyx1N_0quYyoEkT7k.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219421

    Signature Algorithm: sha256WithRSAEncryption
         9e:45:6e:a1:47:73:2b:06:5e:7f:00:ef:f3:79:61:9e:8b:e2:
         75:77:50:f3:29:a3:7b:92:f8:9f:ef:a6:56:b3:8a:36:00:c7:
         2d:ad:da:35:cd:5b:50:7d:5b:20:10:8c:76:db:4a:ac:6c:c2:
         d5:a0:1e:93:a8:31:28:ec:95:39:14:39:89:0a:a0:b9:94:b0:
         5c:b9:59:65:01:7d:2f:e1:5e:7a:cc:5f:f6:1a:74:1f:61:e2:
         4e:a5:9f:65:0e:b3:d0:1d:fa:69:b8:3c:9b:23:25:fc:0e:84:
         48:dd:ce:60:49:8d:25:06:d0:b1:b0:eb:31:66:1c:6a:20:b5:
         94:52:fa:39:00:96:80:03:26:db:dd:8d:83:3e:36:e6:2e:6b:
         e5:0f:82:40:bc:32:4f:1e:bc:6a:91:94:5a:cc:f2:77:4b:21:
         07:96:5b:94:7c:16:58:e0:0f:98:b1:02:b9:2c:72:8b:31:df:
         95:f6:71:9b:01:41:48:47:4d:ff:d6:cd:5f:a8:c4:ff:1e:cf:
         d2:19:f2:e4:a4:ca:bf:44:02:2b:40:3d:e2:0f:4d:6f:e2:63:
         01:f8:a5:3d:b1:92:78:cf:cd:cf:ff:1f:3e:c2:2c:27:18:af:
         0d:56:09:5b:c6:47:4c:40:e1:a2:97:5e:90:48:dc:a6:bd:57:
         14:76:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:06:35 2026 by rpki-client