Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/AwdJHeacAfkweSQYRGMwo3nU9V0.asa
File:                     AwdJHeacAfkweSQYRGMwo3nU9V0.asa (raw, json)
Hash identifier:          b6OkEhIae1SAldveBiatM6sXbKIKl6hmx05zqjza9SM=
Subject key identifier:   03:07:49:1D:E6:9C:01:F9:30:79:24:18:44:63:30:A3:79:D4:F5:5D
Certificate issuer:       /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial:       01A07B9C0FE16DAD280B2C3F2E3F1398CDBB
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/AwdJHeacAfkweSQYRGMwo3nU9V0.asa
Signing time:             Mon 07 Sep 2026 11:23:40 +0000
ASPA not before:          Mon 07 Sep 2026 11:23:40 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            24958
Providers:                AS: 174
                          AS: 6461
                          AS: 8928
                          AS: 24916
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:7b:9c:0f:e1:6d:ad:28:0b:2c:3f:2e:3f:13:98:cd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
        Validity
            Not Before: Sep  7 11:23:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0307491de69c01f930792418446330a379d4f55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:64:6e:fb:30:85:9f:a8:f4:4a:a7:a9:08:
                    90:ed:50:47:eb:d6:7e:f3:a1:be:cb:03:88:d2:27:
                    50:09:87:ed:d6:19:f1:4f:ec:14:9a:61:4e:c9:14:
                    aa:a7:98:34:47:2e:34:eb:08:2f:7b:3d:30:32:6b:
                    e2:a9:a0:dd:ba:35:19:fd:46:50:e0:25:35:6a:51:
                    4e:a1:29:32:83:e1:4d:63:e4:e1:78:d5:ad:43:03:
                    c5:ca:f4:c4:f5:eb:f6:8f:6d:92:47:17:df:10:50:
                    7f:0b:08:cd:f9:7c:57:d2:a7:0d:ce:0f:50:a5:bc:
                    92:fe:10:d1:f0:1c:5a:13:50:a4:32:43:b8:dc:e1:
                    7b:45:9c:e3:10:8a:3f:4d:ca:50:3d:86:8e:a5:b4:
                    14:f8:6c:a8:11:43:c6:3e:2f:bd:11:ad:35:f6:df:
                    65:e0:d4:3f:a2:a9:05:8f:be:c2:71:e9:75:cd:ee:
                    c1:8e:64:9f:df:6a:f8:3f:4e:40:88:f0:eb:de:31:
                    b7:10:64:f5:da:eb:f5:fd:ab:37:a3:1a:cc:88:b5:
                    67:c5:49:3c:1a:c9:ef:9c:f8:67:08:15:ec:17:04:
                    7a:52:59:bd:5f:f6:69:0a:72:5e:c2:e6:0d:a9:17:
                    1f:77:d6:05:e2:f4:70:ae:a9:47:c8:fd:36:2d:81:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:07:49:1D:E6:9C:01:F9:30:79:24:18:44:63:30:A3:79:D4:F5:5D
            X509v3 Authority Key Identifier:
                keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/AwdJHeacAfkweSQYRGMwo3nU9V0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24958

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:c9:5e:97:e3:8c:2c:00:f8:e3:f4:59:dc:69:9a:ad:41:
         8f:91:c5:73:59:7c:0e:56:d0:ae:d1:ba:eb:c2:0b:64:9a:22:
         ed:0b:7e:69:99:77:e7:c7:ed:8b:e5:47:e9:06:d2:4d:0e:6f:
         16:e7:f7:5f:c1:cb:07:97:bc:4c:83:d8:ff:5c:00:36:60:f0:
         3b:7c:9a:ac:cb:1a:3b:2e:29:08:a5:5e:b8:12:1d:41:a1:47:
         64:05:e7:d0:97:09:d4:26:8c:a4:a1:47:af:1a:eb:cb:cc:40:
         a5:50:24:28:5c:d5:ab:83:71:00:53:49:5d:0b:e2:7c:ca:fe:
         a5:7d:e3:bb:be:23:75:31:00:4f:c1:8b:19:35:7e:be:31:6c:
         33:6e:27:82:ce:ad:50:98:c1:2c:b2:0f:0b:bf:42:2d:d7:a0:
         c9:83:22:7a:8c:ef:dd:1d:9d:e2:3b:6d:1b:22:39:c7:8d:f0:
         06:57:fb:57:ee:b6:2d:63:35:dd:95:15:2e:d2:c9:a8:10:97:
         e8:c7:c9:78:af:84:a8:0d:fa:c2:30:3a:ce:04:d6:bd:f8:32:
         d0:a8:49:5c:37:41:8a:80:31:d7:ad:a9:8d:56:58:cc:73:c4:
         c3:2e:d1:0c:41:ad:fe:9a:2c:ed:b7:cd:09:ae:cf:21:12:bb:
         fc:eb:55:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:53 2026 by rpki-client