Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/xbchSaLkTdFt4wEuu6EBOcEGUHc.asa
File:                     xbchSaLkTdFt4wEuu6EBOcEGUHc.asa (raw, json)
Hash identifier:          MVxdCe95XTvFNQ809Puimx3OP36cNRgQmrBs9S5azkA=
Subject key identifier:   C5:B7:21:49:A2:E4:4D:D1:6D:E3:01:2E:BB:A1:01:39:C1:06:50:77
Certificate issuer:       /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial:       019F190128BF198AE6CB5E9E239CACBEFD70
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/xbchSaLkTdFt4wEuu6EBOcEGUHc.asa
Signing time:             Tue 30 Jun 2026 14:48:54 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:54 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            15576
Providers:                AS: 174
                          AS: 3356
                          AS: 8220
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:28:bf:19:8a:e6:cb:5e:9e:23:9c:ac:be:fd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
        Validity
            Not Before: Jun 30 14:48:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c5b72149a2e44dd16de3012ebba10139c1065077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:7e:33:77:09:9b:a6:6f:7f:fa:76:13:90:
                    e4:14:cb:a9:50:54:f2:3f:99:9e:da:f4:a8:dc:be:
                    da:4f:19:79:7f:e9:82:b9:73:d2:30:f7:bc:b8:ee:
                    e9:55:b0:bf:d8:fa:95:3c:72:28:60:cd:8b:c0:df:
                    af:ff:d4:52:80:48:10:23:b9:c1:b5:4a:8e:ec:45:
                    ce:ea:b1:56:43:1d:3e:6e:e4:a7:d7:63:a2:ca:49:
                    12:af:fa:50:5c:a9:d9:4f:99:3c:a1:35:5b:3a:82:
                    31:d0:88:2e:cf:ce:33:e9:38:ba:8b:a2:c9:35:29:
                    1c:46:c2:3e:2d:95:ae:a5:a6:67:21:40:78:b6:e3:
                    88:5a:92:12:4d:cb:40:be:9c:3a:72:4a:b8:6a:33:
                    4f:63:66:e6:4a:96:12:7f:95:8c:8e:48:97:42:c0:
                    69:ab:52:9e:10:ce:0c:d5:71:6c:37:3a:15:e4:c9:
                    f9:b9:a7:38:c7:e4:51:ae:1a:fd:0b:d6:fb:db:3b:
                    e1:26:7f:24:64:df:42:c3:88:96:cd:f1:19:15:f8:
                    f3:1e:4f:d6:7e:30:a4:23:5a:aa:43:44:c3:0a:7e:
                    98:e7:e3:1c:85:e8:09:fa:c1:97:fd:b2:82:ab:9c:
                    c8:1a:8d:75:98:5f:94:1f:3c:61:01:dd:5c:33:58:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B7:21:49:A2:E4:4D:D1:6D:E3:01:2E:BB:A1:01:39:C1:06:50:77
            X509v3 Authority Key Identifier:
                keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/xbchSaLkTdFt4wEuu6EBOcEGUHc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15576

    Signature Algorithm: sha256WithRSAEncryption
         71:7c:d1:c8:ba:0a:19:9e:a8:f5:ef:24:e8:96:e3:c9:93:ae:
         48:79:2c:2a:86:1c:cb:86:48:ee:b2:4e:3b:d5:c6:4f:fa:d5:
         aa:90:7a:8e:14:46:77:a4:05:ca:3b:34:e7:47:59:dd:f6:ab:
         1b:f6:b6:20:46:e7:31:b4:ac:af:c8:e0:a4:d0:a1:ad:8b:65:
         77:7a:ab:c0:07:36:e0:1b:f6:ba:e5:e8:d6:56:d4:ac:b0:f3:
         da:35:67:f8:bb:98:16:7e:e0:96:bb:3a:f8:56:1e:20:38:53:
         2d:2e:e8:a5:32:13:c0:3d:17:7b:10:5f:e9:82:47:5e:06:e3:
         cd:7b:d2:5d:40:fd:a1:c9:54:81:a5:b5:d7:a5:dd:09:f5:e6:
         25:fe:83:62:09:99:ee:55:35:f4:71:e6:37:b4:b7:59:f0:01:
         06:ba:2b:b1:e3:99:6a:d1:0c:47:5e:aa:0b:55:59:d1:d6:6c:
         bf:fe:c7:e1:77:b7:3f:eb:be:68:5d:1d:29:e1:d1:8f:87:22:
         ba:09:aa:b8:ca:f2:91:de:f7:7a:6b:71:cc:64:7d:d5:cb:98:
         dc:36:96:9b:4c:50:e0:ca:c7:b1:a0:30:bc:f9:b7:36:6d:ff:
         23:dd:17:db:6b:b0:99:63:85:8f:05:00:20:2f:10:58:6c:39:
         39:f3:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:50:11 2026 by rpki-client