Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/XlA2AyMfKIrYW8MxOh278yMVZmU.asa
File:                     XlA2AyMfKIrYW8MxOh278yMVZmU.asa (raw, json)
Hash identifier:          R0uzi/ENllo1Wog3QDsTsrB9080L/NAmO9aeCLpvTWs=
Subject key identifier:   5E:50:36:03:23:1F:28:8A:D8:5B:C3:31:3A:1D:BB:F3:23:15:66:65
Certificate issuer:       /CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
Certificate serial:       019E5FD5A25DCAFD3A930C4D862254EFBEEF
Authority key identifier: 62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/XlA2AyMfKIrYW8MxOh278yMVZmU.asa
Signing time:             Mon 25 May 2026 15:51:36 +0000
ASPA not before:          Mon 25 May 2026 15:51:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            215343
Providers:                AS: 8849
                          AS: 56630
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:5f:d5:a2:5d:ca:fd:3a:93:0c:4d:86:22:54:ef:be:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e5e4fed5ccaf603b46684a21553ce8626ef9c1
        Validity
            Not Before: May 25 15:51:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5e503603231f288ad85bc3313a1dbbf323156665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:63:7c:33:5c:4f:65:96:5e:f9:7b:07:85:
                    c9:ee:5c:b9:10:e9:e5:22:e7:f7:26:ac:b1:fa:2b:
                    78:c2:53:c7:f0:d0:b2:58:32:a3:39:b3:30:7f:eb:
                    78:df:4a:05:e8:4d:8f:04:25:7b:28:e4:6f:79:47:
                    37:dc:89:44:c0:43:ea:be:fa:2c:4d:e7:36:f0:90:
                    9c:ce:17:f0:ba:63:96:71:64:e2:c2:e4:8a:f4:0b:
                    0b:96:5d:4d:7f:80:27:b2:bb:ed:6c:76:1e:12:40:
                    c3:4d:35:7e:43:b3:05:c3:25:b7:fc:c1:7c:a7:e2:
                    ad:a0:36:b6:56:a4:04:06:bc:8a:64:c3:e4:ee:b0:
                    b2:19:b5:f4:0c:e3:e2:61:3d:d4:c2:e8:41:23:2c:
                    22:16:17:f6:05:d8:d5:76:71:da:ba:43:af:05:f3:
                    05:e9:0b:f4:58:d4:0b:44:0c:08:c0:1f:db:8e:84:
                    c2:c7:68:c4:5e:d3:61:af:93:a9:8b:e8:f6:f2:d8:
                    15:51:bc:e3:da:82:27:26:57:80:cb:c6:5d:6b:82:
                    3a:bb:e6:1e:bb:f4:99:8c:b5:79:ee:c0:d9:20:37:
                    87:8a:58:80:58:70:7b:5f:c2:48:ea:c9:98:d1:fd:
                    35:6b:3c:48:0c:98:78:f6:3e:c8:94:2c:d2:72:b9:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:50:36:03:23:1F:28:8A:D8:5B:C3:31:3A:1D:BB:F3:23:15:66:65
            X509v3 Authority Key Identifier:
                keyid:62:E5:E4:FE:D5:CC:AF:60:3B:46:68:4A:21:55:3C:E8:62:6E:F9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXk_tXMr2A7RmhKIVU86GJu-cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/XlA2AyMfKIrYW8MxOh278yMVZmU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/044179-80dd-451a-bfd8-3e1d731dd630/1/YuXk_tXMr2A7RmhKIVU86GJu-cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215343

    Signature Algorithm: sha256WithRSAEncryption
         1b:03:14:23:ba:20:1e:93:25:74:07:aa:9f:1b:3c:fb:ae:c8:
         d7:c5:e6:d9:a7:ac:8b:01:e8:99:1f:68:85:98:79:cc:5e:af:
         5b:70:5a:9b:bc:26:ad:67:74:22:c9:f4:6f:e8:56:c0:c7:ac:
         6e:ab:10:72:0e:0e:35:28:e0:6a:52:4d:46:26:16:19:d7:38:
         15:1b:2a:a4:22:32:2c:c4:7a:cf:3d:25:16:60:2e:57:39:81:
         db:f7:f2:ff:42:29:aa:78:68:eb:0f:3e:45:36:1f:56:02:b7:
         9b:4c:1a:64:55:58:8d:ca:a6:f5:c6:58:b2:15:d9:d8:e3:b9:
         78:6b:de:01:b0:d9:21:4d:17:fb:67:8c:41:bb:f4:53:ac:66:
         0a:4c:db:e7:f6:3e:d8:fd:61:3a:da:36:a4:48:d3:be:76:3f:
         16:4b:6b:9e:ec:2f:93:0a:b3:c2:67:5b:d3:6f:52:4c:7e:e0:
         c0:c1:5d:1f:b1:49:59:aa:8f:b4:9e:36:20:b6:68:bf:36:94:
         30:39:7e:4d:92:8d:d7:4a:b6:59:91:44:0c:a0:4b:da:93:78:
         f8:2b:05:92:9a:14:6f:08:c8:bf:32:4b:ec:fe:ec:29:b8:e0:
         18:b7:b5:01:41:c3:5f:c4:76:72:1c:e6:23:09:85:42:22:06:
         b0:8e:b3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:12 2026 by rpki-client