Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/OFzeLQp8ZtYhjFWlwJy_x_KM2LY.asa
File:                     OFzeLQp8ZtYhjFWlwJy_x_KM2LY.asa (raw, json)
Hash identifier:          E0getpcGl6J6ZvnmJSNfKZfGDdp3vLQMHkNwq1dR66Q=
Subject key identifier:   38:5C:DE:2D:0A:7C:66:D6:21:8C:55:A5:C0:9C:BF:C7:F2:8C:D8:B6
Certificate issuer:       /CN=d0425d254dfff3e12a9672930843fc0e9abc9062
Certificate serial:       019F370A84426756A447E4D426A238BC08CA
Authority key identifier: D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/OFzeLQp8ZtYhjFWlwJy_x_KM2LY.asa
Signing time:             Mon 06 Jul 2026 10:47:43 +0000
ASPA not before:          Mon 06 Jul 2026 10:47:43 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197754
Providers:                AS: 8283
                          AS: 202585
                          AS: 210320
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:37:0a:84:42:67:56:a4:47:e4:d4:26:a2:38:bc:08:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0425d254dfff3e12a9672930843fc0e9abc9062
        Validity
            Not Before: Jul  6 10:47:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=385cde2d0a7c66d6218c55a5c09cbfc7f28cd8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:54:2a:5f:68:45:3d:18:66:45:8e:96:cc:
                    5d:56:83:49:95:26:d2:06:af:39:89:95:9b:7f:5e:
                    3c:f2:d0:49:1b:91:0e:39:35:bb:fd:48:2b:23:73:
                    79:18:aa:56:76:31:2d:3b:62:99:c7:88:06:91:6e:
                    82:2f:a4:bf:e8:da:54:58:70:eb:b3:b4:ef:a0:a2:
                    4b:02:fb:52:d8:c4:66:ab:69:5a:12:a5:7c:53:81:
                    d8:ae:12:c9:53:10:eb:d4:f4:aa:f8:60:d5:3d:db:
                    7b:62:e4:92:7d:fc:51:a4:cc:8e:fb:06:a0:46:88:
                    13:b3:50:2e:d7:5f:cc:be:9d:ab:f5:bc:64:b5:05:
                    e7:d2:d0:5a:66:ee:58:b2:33:ef:5a:28:40:e0:84:
                    64:68:81:8d:bf:a3:33:4c:93:85:d4:7a:84:98:df:
                    7e:5e:e6:8a:60:91:48:03:b1:6f:0f:fd:69:e7:df:
                    7a:f4:da:90:84:9e:38:26:2f:e0:9b:f6:a9:0b:dd:
                    04:95:f6:12:ed:22:71:2e:9f:85:02:40:d1:e1:b0:
                    62:3f:16:25:b0:2c:c4:62:01:85:4d:6d:77:57:06:
                    07:7e:3d:9e:6d:d8:06:0d:38:12:05:b7:3e:f8:54:
                    46:33:97:34:17:27:a9:3f:04:33:5b:81:14:d7:8f:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5C:DE:2D:0A:7C:66:D6:21:8C:55:A5:C0:9C:BF:C7:F2:8C:D8:B6
            X509v3 Authority Key Identifier:
                keyid:D0:42:5D:25:4D:FF:F3:E1:2A:96:72:93:08:43:FC:0E:9A:BC:90:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/OFzeLQp8ZtYhjFWlwJy_x_KM2LY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3150ee-70a3-4569-a732-53be7358e252/1/0EJdJU3_8-EqlnKTCEP8Dpq8kGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197754

    Signature Algorithm: sha256WithRSAEncryption
         27:83:a0:57:00:e7:d9:82:c5:12:55:09:be:1b:62:c9:80:ba:
         cc:5b:85:96:f3:0c:d3:9d:38:93:0b:8e:fc:99:ff:f9:bf:98:
         02:8a:b8:ad:29:b1:5a:1b:3c:49:d0:71:18:9f:a3:25:4e:b6:
         5b:8c:b5:78:d0:c8:75:4f:93:7c:d4:26:1b:2b:fe:6e:0e:7b:
         98:53:0c:c3:d7:04:08:a4:dd:1c:5f:96:97:a8:ce:ea:6b:fe:
         2a:89:fa:48:9f:bf:12:8f:78:9a:10:b9:7f:71:62:f6:e2:6c:
         41:8f:0f:a3:a6:4e:c8:b1:56:1f:63:c4:bd:57:4b:19:80:8e:
         06:80:fb:36:de:0c:26:c5:95:39:d4:13:0e:4d:c1:c4:7c:d0:
         dd:37:d7:b9:94:90:dc:d7:a8:ac:6b:13:2a:b5:0e:78:0f:07:
         e1:48:4e:b4:35:e1:db:42:55:a7:b4:f7:da:8a:be:fd:9b:5d:
         6f:9b:72:aa:5d:a5:16:aa:39:f9:d2:24:56:a8:77:8d:7c:17:
         cc:f8:7e:95:d8:8d:6c:27:58:da:af:b2:58:df:f2:c5:44:1e:
         dc:fb:1a:5b:da:8e:62:ec:2b:13:3c:b5:ca:e7:93:76:6d:da:
         29:f6:70:fc:41:f5:24:17:47:10:00:d2:07:83:aa:f8:d9:53:
         42:2d:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:23 2026 by rpki-client