Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa
File:                     N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa (raw, json)
Hash identifier:          cD3zCeI88xWZ6CMz6J0M2Axze+U4XS2co5BuDwABalI=
Subject key identifier:   37:A2:B2:06:FE:57:C7:93:06:46:65:8E:D5:23:95:22:90:36:5B:F2
Certificate issuer:       /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial:       019E64EF2D8EC5F0FD411284F00FF10313EA
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa
Signing time:             Tue 26 May 2026 15:37:36 +0000
ASPA not before:          Tue 26 May 2026 15:37:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            42064
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:64:ef:2d:8e:c5:f0:fd:41:12:84:f0:0f:f1:03:13:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
        Validity
            Not Before: May 26 15:37:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37a2b206fe57c7930646658ed523952290365bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:3b:7e:22:c3:f0:cf:8d:2c:ba:50:2b:71:
                    03:33:f7:02:73:d0:6b:e6:08:44:ca:de:3a:5e:d0:
                    21:49:1e:62:2b:13:7b:4a:24:ca:40:7d:4c:e1:88:
                    87:29:19:be:c3:b8:f8:83:19:0d:29:e2:ad:4a:c2:
                    f0:e1:df:bf:2d:3d:3a:4e:fe:ed:2a:2a:61:a4:49:
                    e6:bb:9e:af:49:a2:89:4e:fc:33:c2:58:ba:36:60:
                    ca:07:e6:bb:fe:85:51:d7:58:da:e0:e1:42:c3:7a:
                    17:7d:ed:af:5f:73:70:78:04:5e:b9:65:3c:da:a7:
                    48:98:9f:23:4d:17:19:d6:99:a3:64:f7:7b:26:41:
                    97:18:bf:4e:3e:9f:c1:5c:f1:07:dc:7a:8e:34:85:
                    0d:c7:ca:61:41:52:88:0a:d0:8a:c0:aa:e6:da:8e:
                    a2:b6:52:7e:b4:ce:10:71:56:24:a8:73:7d:71:cb:
                    2a:3d:38:3c:63:fd:c6:a5:d5:61:48:74:15:43:ad:
                    bc:a1:41:b0:d1:c4:f7:84:af:47:b6:79:17:11:61:
                    fc:78:cd:e7:d0:e9:3a:92:b0:2c:6c:ad:58:17:ac:
                    57:95:13:72:69:ee:13:b4:2a:5d:c4:61:47:c5:86:
                    a4:72:21:c0:08:66:23:95:04:5e:e1:25:c5:96:9e:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A2:B2:06:FE:57:C7:93:06:46:65:8E:D5:23:95:22:90:36:5B:F2
            X509v3 Authority Key Identifier:
                keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/N6KyBv5Xx5MGRmWO1SOVIpA2W_I.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  42064

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:3f:54:67:ad:b5:72:3b:e9:b1:db:b3:8f:af:99:42:0c:
         b3:6c:0a:aa:f5:11:ee:ea:06:b8:1a:db:97:23:d3:46:ca:04:
         45:52:10:f9:67:8f:f0:70:2f:82:3e:5b:53:5d:da:9c:3e:3b:
         a2:fd:a5:ee:1b:c6:b1:1e:5d:01:fe:6b:34:67:00:d9:2b:a3:
         54:c9:ab:8f:98:50:be:81:a1:63:93:9d:ae:05:7a:d6:07:fc:
         f8:cb:1a:7b:b5:f8:9f:1e:dd:c5:c9:b8:ea:b6:eb:18:30:09:
         0e:8f:de:ec:f9:bd:b9:29:d6:8d:cb:aa:f5:e6:8d:2a:41:4e:
         e9:44:45:80:63:d1:e4:91:c3:bb:e8:66:cd:f6:78:88:ab:2d:
         db:ca:6e:3a:a2:64:4b:8a:df:1d:66:ab:25:55:26:91:da:a2:
         d8:83:31:ca:50:df:0a:1e:81:2e:25:ab:20:58:d4:57:7d:57:
         17:b1:b0:9f:ce:0c:7e:85:4b:42:59:0a:83:64:f8:b1:bc:a5:
         8d:d0:f5:6e:2e:4c:b6:a2:aa:db:b1:63:85:9b:a0:19:09:e5:
         e3:99:4c:fe:57:82:d1:e2:e5:8a:22:9c:7d:7d:70:87:15:2e:
         0d:26:d6:77:79:6f:73:aa:58:2f:0d:d1:c0:68:fb:de:8e:65:
         e4:07:64:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:26 2026 by rpki-client