Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/R7qJzjI_I0ZyfxtzpHAwF6z7ftA.asa
File:                     R7qJzjI_I0ZyfxtzpHAwF6z7ftA.asa (raw, json)
Hash identifier:          JOhc4+TJAT9y3euT9g0kxLqAA+8lYprveqxEcA29tPI=
Subject key identifier:   47:BA:89:CE:32:3F:23:46:72:7F:1B:73:A4:70:30:17:AC:FB:7E:D0
Certificate issuer:       /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial:       019D2846C0C471A3CDABA7C871602F9A23B4
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/R7qJzjI_I0ZyfxtzpHAwF6z7ftA.asa
Signing time:             Thu 26 Mar 2026 03:53:38 +0000
ASPA not before:          Thu 26 Mar 2026 03:53:38 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42742
Providers:                AS: 3216
                          AS: 12389
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:46:c0:c4:71:a3:cd:ab:a7:c8:71:60:2f:9a:23:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
        Validity
            Not Before: Mar 26 03:53:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47ba89ce323f2346727f1b73a4703017acfb7ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:23:20:a3:92:2d:12:75:81:6d:7f:42:cb:
                    41:48:f4:a9:e8:c9:28:e4:e4:c4:5a:5d:21:27:d9:
                    7d:69:de:b3:9c:a6:6b:59:b8:76:01:70:e2:99:8e:
                    35:b8:a6:7a:45:68:d6:4e:2b:92:33:f3:d1:8b:77:
                    a7:67:a4:48:bb:29:b6:63:2c:d7:65:dc:20:94:bd:
                    99:31:64:ed:91:0b:53:1a:69:7a:cf:a3:82:fb:95:
                    1f:ca:30:07:a2:06:46:b9:97:5a:7a:b0:27:51:c3:
                    68:37:c8:fd:a9:81:a8:c7:2a:73:63:a6:61:47:d0:
                    cd:88:eb:c1:72:af:95:6f:4d:17:d4:c7:9a:c5:c5:
                    4a:0c:96:3a:9b:56:2a:5b:73:fc:f2:0d:fb:ed:63:
                    5b:65:34:8e:74:2f:6b:d8:3d:63:92:89:ac:c7:eb:
                    e5:f2:e1:66:c4:27:1a:d6:d2:f8:63:32:b1:70:a7:
                    89:6b:13:fa:85:8c:b3:28:90:47:a3:1c:1c:a7:d5:
                    ee:99:f3:fc:18:af:3e:3e:7a:c4:80:45:71:b7:64:
                    e8:a8:cc:2e:fb:9c:df:bd:46:5f:3f:99:7a:86:1b:
                    2d:6f:bf:84:4e:32:d7:05:4e:61:f9:98:43:6f:62:
                    cf:f8:a7:4c:29:b9:a0:92:08:a5:cc:0e:c8:de:63:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BA:89:CE:32:3F:23:46:72:7F:1B:73:A4:70:30:17:AC:FB:7E:D0
            X509v3 Authority Key Identifier:
                keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/R7qJzjI_I0ZyfxtzpHAwF6z7ftA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42742

    Signature Algorithm: sha256WithRSAEncryption
         53:05:96:66:9d:ac:35:a1:5a:c2:97:ef:7b:58:2f:5d:b8:7f:
         06:52:6a:fe:6b:e5:81:ab:4b:c6:ae:22:8a:08:eb:f1:14:b3:
         c3:09:87:bc:bc:98:a0:f4:b7:cd:5d:b7:ae:22:d6:b0:60:22:
         ab:53:61:ea:33:83:14:e5:59:c4:5e:c7:6d:f8:d1:18:ef:05:
         83:a0:1d:e0:d4:67:4d:9a:e6:78:9c:32:ad:6c:21:d6:0e:74:
         3f:8e:1f:52:87:5e:60:5c:29:5a:6f:7c:3e:be:44:fa:85:98:
         f9:06:3b:9b:78:5c:a1:f2:97:3f:ce:90:6f:77:27:a0:13:61:
         76:16:ae:47:bc:a5:43:ce:76:d1:02:c0:08:44:39:76:c6:0b:
         d0:71:76:4d:de:b8:68:9d:ba:a1:bc:f9:1e:d2:c6:bd:a5:71:
         a0:20:e6:d5:2a:05:f6:0b:5c:eb:68:90:87:6d:ad:eb:ae:d3:
         04:4e:aa:a6:ff:a1:52:7d:08:75:38:a4:b2:ff:9f:9d:4e:77:
         60:7b:a6:fb:3a:cc:76:93:8a:58:89:1b:bc:6d:ac:7e:75:82:
         dc:78:83:b2:b2:de:9c:d4:af:a5:bb:68:1b:3a:26:d6:28:ec:
         88:bb:7f:69:e7:b8:02:66:56:bb:6c:4d:00:79:7a:f7:ad:ab:
         5c:30:38:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:43:49 2026 by rpki-client