Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/awsbCnJoaMEotcUFvwKzN1W0E40.asa
File:                     awsbCnJoaMEotcUFvwKzN1W0E40.asa (raw, json)
Hash identifier:          mkyrUYAnBBTtmalXFepPgOKeFlfZdDF0SDY2zoXrZQA=
Subject key identifier:   6B:0B:1B:0A:72:68:68:C1:28:B5:C5:05:BF:02:B3:37:55:B4:13:8D
Certificate issuer:       /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial:       019F1901613ABEA8F063D4F053F07F9450D6
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/awsbCnJoaMEotcUFvwKzN1W0E40.asa
Signing time:             Tue 30 Jun 2026 14:49:08 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:08 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            15605
Providers:                AS: 3356
                          AS: 6762
                          AS: 12637
                          AS: 41327
                          AS: 56911
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:61:3a:be:a8:f0:63:d4:f0:53:f0:7f:94:50:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
        Validity
            Not Before: Jun 30 14:49:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b0b1b0a726868c128b5c505bf02b33755b4138d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:69:38:7e:6a:15:f6:db:44:d6:e2:e9:81:
                    31:9d:df:d3:f0:3a:ba:41:01:f2:9b:17:68:a6:99:
                    50:45:ec:38:65:8a:03:19:87:d7:bc:3d:72:a1:63:
                    83:4e:94:5e:3f:e4:17:10:64:c1:93:be:9f:eb:2e:
                    5d:b2:0d:8c:3a:7f:fa:30:5c:db:54:5d:5f:a2:e3:
                    ea:ca:e7:f3:c8:aa:2e:45:de:e2:3c:82:3a:63:4a:
                    3c:c4:45:66:d3:c4:9e:4f:60:41:8f:92:a9:59:63:
                    31:2f:c7:ac:b5:2b:c2:05:2f:4c:aa:52:0d:7b:ad:
                    be:cd:11:c6:21:08:f1:62:e5:65:f0:3b:fc:a0:f3:
                    ac:f6:f4:da:aa:5f:c6:54:38:a5:3e:b4:4f:4a:86:
                    a3:4d:dc:34:46:0a:80:1e:64:52:26:60:91:fb:11:
                    ab:50:42:99:e1:8c:ca:5a:75:95:16:5c:57:19:77:
                    e4:f9:ba:d6:0d:a3:c2:72:cc:b5:13:2b:fe:14:aa:
                    d7:38:fb:ba:9c:22:5f:cf:91:6f:d7:0f:27:8e:2a:
                    f2:78:cd:94:9d:f1:ed:f6:74:dc:e2:ba:7b:c8:87:
                    f4:11:a8:c8:15:33:2e:ab:ed:52:29:34:41:d4:e0:
                    3b:36:28:a3:14:c8:c9:d3:d6:84:32:2a:16:ff:e7:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0B:1B:0A:72:68:68:C1:28:B5:C5:05:BF:02:B3:37:55:B4:13:8D
            X509v3 Authority Key Identifier:
                keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/awsbCnJoaMEotcUFvwKzN1W0E40.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15605

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:dd:b2:1f:d7:31:cc:ec:d1:f1:25:da:45:f5:57:68:ff:
         c1:cd:49:99:7f:e1:41:24:6e:27:3a:94:e4:e1:9f:3e:17:d9:
         80:26:88:3c:78:47:32:af:bb:8c:7f:32:3c:f4:c8:1a:c9:d5:
         06:02:33:98:84:cf:8b:70:0f:75:a5:2e:1c:08:a0:e1:bf:9b:
         b7:4c:58:e5:c1:11:e3:d9:8c:e4:7c:55:a6:d2:8d:73:0b:3f:
         4a:3e:52:8f:b2:8d:40:6d:05:79:3d:36:58:c6:72:e9:1d:5b:
         57:a2:19:02:14:c0:1c:96:b9:3a:c8:d4:5e:ca:a4:0f:93:f5:
         f0:65:08:5a:e5:15:d5:ee:92:5e:4f:af:4e:df:36:b3:db:c6:
         25:7f:25:6c:25:88:3e:ec:cc:46:b2:0f:28:4e:d1:58:85:a9:
         b5:01:79:40:60:94:04:67:83:03:be:3e:88:48:a6:a7:c8:20:
         1b:12:5c:e1:f7:08:00:21:8d:fb:b3:63:61:b0:fa:8b:00:33:
         cf:9b:7b:54:42:e6:8a:98:e6:49:5e:b7:b6:09:23:f7:7d:9d:
         cf:33:d0:b9:2c:78:e7:40:2c:42:19:78:e7:64:c7:2f:88:d2:
         23:29:ad:19:cb:1f:3f:78:d7:b7:34:9c:9f:e7:79:9c:b5:61:
         fd:8e:b0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:19 2026 by rpki-client