Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/4qpUl82bel-7DJE-Y1XOPGRuBU0.asa
File:                     4qpUl82bel-7DJE-Y1XOPGRuBU0.asa (raw, json)
Hash identifier:          DQR02WV/oB/Qemouv5exbjGWVISHJPtXn22c6fv6nbk=
Subject key identifier:   E2:AA:54:97:CD:9B:7A:5F:BB:0C:91:3E:63:55:CE:3C:64:6E:05:4D
Certificate issuer:       /CN=57e72ce7f8c494235a084823965b904704bc8240
Certificate serial:       019E8399AD2838AFA75CD71B76C159EC29BE
Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/4qpUl82bel-7DJE-Y1XOPGRuBU0.asa
Signing time:             Mon 01 Jun 2026 14:32:27 +0000
ASPA not before:          Mon 01 Jun 2026 14:32:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214248
Providers:                AS: 3352
                          AS: 8220
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:83:99:ad:28:38:af:a7:5c:d7:1b:76:c1:59:ec:29:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240
        Validity
            Not Before: Jun  1 14:32:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e2aa5497cd9b7a5fbb0c913e6355ce3c646e054d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:7d:ae:db:72:58:8b:48:c3:55:32:2d:ce:
                    0d:7c:83:6b:f2:c7:2c:fe:a5:bf:6e:fe:7d:92:6e:
                    5a:2e:84:f0:92:1c:1c:fa:db:1f:f9:38:f3:e9:e4:
                    2f:cb:a0:48:1b:a9:d3:21:33:2e:d2:34:44:95:cd:
                    18:23:cc:68:10:47:ba:36:fd:86:43:74:09:dd:4b:
                    bf:de:d4:7e:d7:14:f6:fc:ed:b0:80:34:e0:af:4e:
                    85:50:7e:55:1f:d8:11:5e:b3:8d:b4:44:e8:c1:f6:
                    90:ef:6e:77:97:27:98:1f:32:87:ff:f8:a0:1a:dd:
                    f5:82:b3:44:ce:0f:84:65:97:79:6c:1f:2f:e3:19:
                    91:ca:7f:eb:0f:34:0a:ee:90:28:e7:60:d9:67:ad:
                    78:e8:fa:f7:95:61:e4:87:93:71:79:f2:e0:08:5c:
                    44:66:20:e5:af:59:73:61:7e:18:d0:f2:14:28:c6:
                    c9:5b:38:6b:d6:29:e9:c6:4b:e4:8d:48:81:1a:c2:
                    c0:45:47:0a:f1:d6:6e:ed:47:12:1d:2f:e6:f1:87:
                    5c:b3:4e:06:a2:c4:e1:cc:8a:bf:a9:df:56:3f:0f:
                    3c:3a:ae:6f:70:71:95:a2:00:ca:8e:01:5d:25:c9:
                    63:4d:1d:ef:7c:d3:ac:49:e8:41:1f:f6:f9:35:42:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AA:54:97:CD:9B:7A:5F:BB:0C:91:3E:63:55:CE:3C:64:6E:05:4D
            X509v3 Authority Key Identifier:
                keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/4qpUl82bel-7DJE-Y1XOPGRuBU0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214248

    Signature Algorithm: sha256WithRSAEncryption
         c2:cc:e9:24:93:7c:be:89:6d:03:8e:3b:e2:70:e3:b7:a7:82:
         a3:fa:e2:c5:fb:9e:4c:c6:6a:6c:99:55:d0:71:94:e5:b4:75:
         da:5b:5f:28:93:18:30:57:7d:c2:aa:64:67:2b:b2:bb:1b:82:
         a9:99:f6:60:ea:08:1f:42:f8:d7:be:62:a2:22:fb:cd:b2:d4:
         30:32:c8:35:36:91:81:58:b0:5a:7e:47:5b:b5:48:db:0e:32:
         58:35:cb:3e:70:f1:ee:ad:0f:79:aa:9e:98:2c:be:8b:88:5b:
         ad:3c:98:90:51:22:54:70:36:ce:70:eb:9c:0a:0c:4f:8b:d2:
         72:6e:c4:f0:9a:68:08:ed:13:69:16:c8:bb:65:2f:7f:c0:2e:
         bc:f7:5d:c8:bf:77:da:ef:72:8c:32:48:61:33:7e:4d:03:91:
         d2:cc:bd:6d:ec:1e:66:06:f0:86:e7:21:83:53:29:78:5c:d1:
         63:43:a5:14:c7:f5:bf:cd:c3:92:48:f6:d9:22:f0:e2:b6:22:
         aa:3b:27:03:ec:b2:89:75:42:4b:7b:70:f1:e0:ff:2f:a2:78:
         ab:39:d6:56:14:87:68:af:dc:22:91:59:a7:60:56:af:d8:b5:
         91:d1:87:87:e0:1b:d8:a7:f2:ae:47:ed:bd:0c:48:59:46:49:
         50:3d:c2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:54 2026 by rpki-client