Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/BrCRXsHpEtSIIhcLUGRO-lRRBKU.asa
File:                     BrCRXsHpEtSIIhcLUGRO-lRRBKU.asa (raw, json)
Hash identifier:          yt0TMenJTFnX0aHTLiNRjPfZAmhJQsPxqGPiHUXJDzc=
Subject key identifier:   06:B0:91:5E:C1:E9:12:D4:88:22:17:0B:50:64:4E:FA:54:51:04:A5
Certificate issuer:       /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial:       01A067748E586B4E7C94603782F6BBCE9117
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/BrCRXsHpEtSIIhcLUGRO-lRRBKU.asa
Signing time:             Thu 03 Sep 2026 13:28:06 +0000
ASPA not before:          Thu 03 Sep 2026 13:28:06 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            29065
Providers:                AS: 5619
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:67:74:8e:58:6b:4e:7c:94:60:37:82:f6:bb:ce:91:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
        Validity
            Not Before: Sep  3 13:28:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06b0915ec1e912d48822170b50644efa545104a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c2:e5:cf:64:6a:c4:62:57:b4:9e:38:a1:6f:
                    a5:06:17:8a:0e:9b:81:95:3a:08:7d:89:98:49:d1:
                    23:d0:d8:9f:46:82:fe:04:ec:57:07:66:37:4b:77:
                    30:2e:40:41:cc:c8:c4:ed:2e:e6:33:12:f1:91:b4:
                    48:c2:82:aa:6c:d8:6a:06:7d:7a:16:67:b8:08:e4:
                    41:e7:ff:33:aa:2a:fd:0b:ad:13:b7:71:2f:21:65:
                    1d:4c:66:e0:21:a2:3e:9c:aa:69:5a:a7:9d:c7:fa:
                    52:49:d8:e5:1e:46:5a:d3:dc:88:ff:28:97:57:a0:
                    36:38:f3:32:74:f8:c6:34:b9:64:a0:01:38:25:ac:
                    74:fa:b9:2b:9e:46:8a:27:b4:29:11:0f:dc:c9:64:
                    b9:3d:f2:e7:94:75:19:a3:85:87:64:30:b1:5f:88:
                    6c:73:bd:e1:9b:6e:90:27:83:bb:d4:71:cf:96:8f:
                    94:02:69:99:8e:1d:43:db:dd:c0:8a:c3:52:7f:cf:
                    9a:82:32:14:30:66:75:83:f2:c6:87:ee:3d:ae:ee:
                    00:49:be:a7:a7:f8:05:e2:24:96:20:ba:2d:35:83:
                    36:36:0a:96:68:37:18:d7:2e:41:bd:68:09:93:43:
                    b2:19:b0:d1:9c:32:72:78:c3:c7:a6:f8:0e:5d:a4:
                    6e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B0:91:5E:C1:E9:12:D4:88:22:17:0B:50:64:4E:FA:54:51:04:A5
            X509v3 Authority Key Identifier:
                keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/BrCRXsHpEtSIIhcLUGRO-lRRBKU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29065

    Signature Algorithm: sha256WithRSAEncryption
         1d:e7:a1:7b:0e:40:f1:79:15:a0:70:0d:06:e0:19:74:cc:dd:
         7b:ac:43:c6:bc:24:2b:91:03:8c:7b:1c:0f:d2:8b:23:19:4b:
         cd:3b:c9:f0:2c:b1:a8:6e:22:52:75:d9:d9:31:e7:93:16:f0:
         a6:68:71:ed:9c:ea:44:42:16:0a:a8:35:da:bf:fd:7d:b8:36:
         1d:74:9b:39:75:53:46:53:8a:5c:01:b2:c9:dd:fb:c9:eb:ee:
         c9:44:2b:60:38:96:67:b0:f5:48:f9:f3:54:39:e0:c8:e5:77:
         01:70:6a:07:28:b8:ce:bb:97:00:e7:a5:7a:04:a7:c4:90:ac:
         d4:b4:bd:af:47:5c:e8:bd:c3:85:2e:3d:06:49:f4:54:58:fb:
         ff:51:fd:43:ff:16:5a:4e:54:f8:3b:be:29:19:33:81:4a:9f:
         e3:9d:47:b8:bf:ad:8c:91:89:9d:f7:81:f0:b8:28:c2:7a:a1:
         56:a8:ad:fb:be:04:d3:82:45:a9:52:7f:d3:83:46:d8:97:aa:
         d3:70:1f:7f:c6:cc:95:a5:cc:f3:e9:ae:d2:12:80:bd:4d:5f:
         05:ff:84:8f:06:68:61:73:f4:10:1d:d0:7e:15:2f:7f:06:ed:
         03:7a:2f:33:6a:25:76:f9:23:f9:0f:f7:55:42:34:02:cd:d8:
         ae:77:2c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:07:01 2026 by rpki-client