Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/0UXZLxmo0wM791OjAQvNwfm2flg.asa
File:                     0UXZLxmo0wM791OjAQvNwfm2flg.asa (raw, json)
Hash identifier:          fckAHmyvVNaeQqmLb5z5kUo++7GABr5luLIf2iVlPj8=
Subject key identifier:   D1:45:D9:2F:19:A8:D3:03:3B:F7:53:A3:01:0B:CD:C1:F9:B6:7E:58
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       019E64EF2DE333B1D40B6953215A7776226A
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/0UXZLxmo0wM791OjAQvNwfm2flg.asa
Signing time:             Tue 26 May 2026 15:37:36 +0000
ASPA not before:          Tue 26 May 2026 15:37:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            43100
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:64:ef:2d:e3:33:b1:d4:0b:69:53:21:5a:77:76:22:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: May 26 15:37:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d145d92f19a8d3033bf753a3010bcdc1f9b67e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:4f:e5:1a:78:77:99:07:96:67:21:1c:48:
                    f9:f7:52:70:8b:cb:c5:e2:95:cd:06:c4:d8:4d:c0:
                    ec:0d:58:7a:94:e6:3d:e1:7a:70:42:64:59:5e:c8:
                    a7:98:67:9b:4b:06:1d:e4:c6:f1:d1:f9:df:97:5a:
                    78:3b:a5:a2:5b:b4:88:94:5e:f4:dc:58:19:08:55:
                    53:83:22:a2:3e:03:f8:af:4a:5a:1f:23:cc:ab:29:
                    76:25:22:8d:e6:5f:8d:0b:48:28:8f:24:18:43:a6:
                    54:e7:e6:3c:d8:d9:d2:ae:16:35:d0:3c:52:e2:5d:
                    6a:65:1d:7b:b2:6d:2a:22:0b:ef:86:f5:f0:f0:f2:
                    7b:a7:4f:a4:04:b7:5b:b4:cb:00:27:c9:03:34:f7:
                    a0:81:8d:d8:f5:81:26:dd:e8:0c:4d:a0:50:a9:3d:
                    8f:f5:cc:1d:d8:aa:d2:53:d9:bd:a4:68:02:16:1b:
                    e8:40:2c:66:25:3a:5b:cd:37:53:35:b8:d0:43:b3:
                    1c:23:cf:34:39:00:c2:c5:46:fe:08:ab:0c:09:84:
                    ba:cd:50:15:10:fa:5e:0a:49:c1:52:23:4b:15:3d:
                    85:9a:a6:4d:e8:19:c9:08:28:c9:e7:76:ea:2e:98:
                    2a:4e:f0:b3:a9:39:49:e9:4d:65:91:ba:4e:15:7d:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:45:D9:2F:19:A8:D3:03:3B:F7:53:A3:01:0B:CD:C1:F9:B6:7E:58
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/0UXZLxmo0wM791OjAQvNwfm2flg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43100

    Signature Algorithm: sha256WithRSAEncryption
         25:22:7c:72:7a:dd:98:3f:b2:28:35:f4:4c:39:31:32:6c:03:
         cb:d5:54:8a:73:7f:95:33:a0:77:0e:fa:5b:c1:5f:0a:69:6f:
         ae:64:2b:04:51:0c:bd:f0:5f:b0:a5:09:e4:46:9b:8f:57:a5:
         e0:ff:a3:13:5a:a1:d4:03:8b:b5:b1:53:06:af:4a:58:d6:58:
         ab:7c:2a:c2:de:65:d7:fe:82:d7:b6:75:dc:b6:40:52:a0:ff:
         39:22:50:86:82:3c:71:b5:08:7b:08:a5:f7:bf:01:d8:f4:f6:
         be:91:cf:1f:a4:70:8e:9a:74:7c:95:da:7f:39:b5:97:96:9c:
         4f:2f:4f:8d:c5:ae:16:ea:f0:6b:55:be:2f:6b:d2:6e:3c:04:
         48:9a:31:43:94:bc:b2:4f:8b:1b:eb:a8:dc:26:6f:78:67:51:
         3c:96:fe:d6:9c:c7:0c:db:63:48:cd:00:71:60:34:e5:49:31:
         fa:65:76:a7:87:37:bf:03:29:d9:74:78:2b:28:a7:05:06:5b:
         a3:99:c0:29:30:d8:4e:23:49:00:d2:4b:5c:e2:f9:2e:37:2f:
         94:3c:c4:69:d8:37:8d:e5:df:33:80:83:8d:8c:a4:ec:9d:1e:
         2b:77:66:91:2f:00:5e:9f:a8:7a:d1:8a:18:3e:5e:35:ea:5d:
         97:28:e7:ec
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ5k7y3jM7HUC2lTIVp3diJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl
MjFiYjkwHhcNMjYwNTI2MTUzNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTQ1ZDkyZjE5YThkMzAzM2JmNzUzYTMwMTBiY2RjMWY5YjY3ZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC5P5Rp4d5kHlmchHEj591Jwi8vF
4pXNBsTYTcDsDVh6lOY94XpwQmRZXsinmGebSwYd5Mbx0fnfl1p4O6WiW7SIlF70
3FgZCFVTgyKiPgP4r0paHyPMqyl2JSKN5l+NC0gojyQYQ6ZU5+Y82NnSrhY10DxS
4l1qZR17sm0qIgvvhvXw8PJ7p0+kBLdbtMsAJ8kDNPeggY3Y9YEm3egMTaBQqT2P
9cwd2KrSU9m9pGgCFhvoQCxmJTpbzTdTNbjQQ7McI880OQDCxUb+CKsMCYS6zVAV
EPpeCknBUiNLFT2FmqZN6BnJCCjJ53bqLpgqTvCzqTlJ6U1lkbpOFX0fBQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFNFF2S8ZqNMDO/dTowELzcH5tn5YMB8GA1UdIwQY
MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt
ODUwZjM0OTA2MjI5LzEvMFVYWkx4bW8wd003OTFPakFRdk53Zm0yZmxnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5
LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCoXDANBgkqhkiG
9w0BAQsFAAOCAQEAJSJ8cnrdmD+yKDX0TDkxMmwDy9VUinN/lTOgdw76W8FfCmlv
rmQrBFEMvfBfsKUJ5Eabj1el4P+jE1qh1AOLtbFTBq9KWNZYq3wqwt5l1/6C17Z1
3LZAUqD/OSJQhoI8cbUIewil978B2PT2vpHPH6Rwjpp0fJXafzm1l5acTy9PjcWu
Furwa1W+L2vSbjwESJoxQ5S8sk+LG+uo3CZveGdRPJb+1pzHDNtjSM0AcWA05Ukx
+mV2p4c3vwMp2XR4KyinBQZbo5nAKTDYTiNJANJLXOL5LjcvlDzEadg3jeXfM4CD
jYyk7J0eK3dmkS8AXp+oetGKGD5eNepdlyjn7A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:45 2026 by rpki-client