Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/XiOLVjMMRIXjDwamXxHQaw_QW5M.asa
File:                     XiOLVjMMRIXjDwamXxHQaw_QW5M.asa (raw, json)
Hash identifier:          j0uAz4SCp4axiJ6lvLbL24SoF2CItfFxlFx3BSZUkLs=
Subject key identifier:   5E:23:8B:56:33:0C:44:85:E3:0F:06:A6:5F:11:D0:6B:0F:D0:5B:93
Certificate issuer:       /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial:       019EBC44E2B9C7F1BEAF70A16E731E7800E4
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/XiOLVjMMRIXjDwamXxHQaw_QW5M.asa
Signing time:             Fri 12 Jun 2026 14:38:11 +0000
ASPA not before:          Fri 12 Jun 2026 14:38:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214930
Providers:                AS: 20473
                          AS: 34927
                          AS: 41051
                          AS: 47272
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bc:44:e2:b9:c7:f1:be:af:70:a1:6e:73:1e:78:00:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
        Validity
            Not Before: Jun 12 14:38:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5e238b56330c4485e30f06a65f11d06b0fd05b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2c:49:8b:65:c4:cc:20:fb:3e:54:a1:5b:2a:
                    03:ac:3d:c9:70:74:9d:55:c7:92:4f:90:85:95:f6:
                    38:a8:e9:89:74:1b:06:7b:d6:60:26:f8:da:b7:e9:
                    8e:e2:21:57:9d:09:a7:ba:2e:87:72:d0:64:31:43:
                    bb:14:64:b9:0e:1c:61:af:90:76:a2:4a:7b:5d:c6:
                    81:8c:35:33:c0:04:49:1e:3b:28:3c:99:f9:32:bd:
                    21:7a:5b:b2:1a:a8:c9:7e:3c:bb:8e:ad:ac:f0:b5:
                    5e:13:13:7a:39:eb:d9:a5:f4:48:8b:ff:7a:24:19:
                    fa:a1:fc:c7:84:63:d7:5f:66:31:d0:b5:41:e8:29:
                    06:e9:63:88:48:78:f4:c6:a8:22:dd:55:2f:3f:26:
                    0a:1c:30:ee:d5:12:29:e9:d7:b2:6b:82:c6:cb:6b:
                    e4:10:47:64:03:c9:b5:9e:d9:88:c7:c2:da:bd:45:
                    9f:79:53:d2:56:0a:bd:84:64:fc:e3:b6:c2:42:35:
                    66:a1:91:f6:9e:0c:56:35:51:85:79:3a:fe:2d:86:
                    07:82:ff:f8:db:cd:af:74:6a:b5:5f:19:56:c9:2a:
                    14:46:40:d9:8d:14:80:f0:af:97:2a:dc:44:9b:2b:
                    4c:e1:cb:b3:9d:91:23:8c:d8:dc:5f:38:90:f7:60:
                    58:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:23:8B:56:33:0C:44:85:E3:0F:06:A6:5F:11:D0:6B:0F:D0:5B:93
            X509v3 Authority Key Identifier:
                keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/XiOLVjMMRIXjDwamXxHQaw_QW5M.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214930

    Signature Algorithm: sha256WithRSAEncryption
         3a:65:6c:85:b9:7a:ee:87:54:f4:ec:93:92:7e:c5:55:a0:ae:
         6f:60:14:c1:64:da:56:c1:cf:59:a3:e8:f8:26:88:b1:43:5f:
         f9:5e:90:b5:e5:e7:d6:c5:4e:58:ff:12:24:57:6c:21:81:7e:
         8f:71:55:e5:e2:7d:d7:37:86:fe:14:e8:a8:a0:3c:6f:75:4b:
         c3:3e:21:ed:e0:b8:22:8c:ff:70:4c:be:92:38:8a:ed:72:3a:
         5d:a2:f4:04:fc:af:b4:7f:ee:f5:39:cc:a2:4b:c2:49:8e:26:
         db:f9:ed:00:71:8d:07:95:3c:fd:b8:69:c3:f5:11:d8:52:45:
         79:5f:8e:9d:8e:de:d3:90:f3:4b:cf:dc:33:a6:78:68:fe:b5:
         19:62:f6:c3:41:7b:14:f2:0f:71:2b:0a:32:dc:89:ca:5d:41:
         d6:c4:48:f2:db:7d:bd:ad:6e:c7:c4:05:07:44:a3:23:d0:6c:
         ff:7d:ec:f8:80:39:1d:cb:10:d9:59:7b:47:7c:9e:d2:1a:c3:
         56:ed:6f:24:b0:a2:07:13:6a:6e:9f:8e:38:6c:c7:32:a8:5f:
         bf:a5:ed:e0:a7:c7:f5:0a:32:f7:b5:79:ec:2e:8a:ba:43:cd:
         78:22:6e:e0:0a:f3:77:5a:3b:4b:c1:1a:4c:66:11:1f:62:2c:
         e3:09:59:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:41 2026 by rpki-client