Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/rV4fWnkrcGIszMs_FpYbegApVHE.asa
File:                     rV4fWnkrcGIszMs_FpYbegApVHE.asa (raw, json)
Hash identifier:          56jzfQdPh/s5EfuIXCaFZwWPR/T6Xgb5ZA7aJzX2/HM=
Subject key identifier:   AD:5E:1F:5A:79:2B:70:62:2C:CC:CB:3F:16:96:1B:7A:00:29:54:71
Certificate issuer:       /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial:       019E69EA5B1FA70378A220A76C30B0969723
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/rV4fWnkrcGIszMs_FpYbegApVHE.asa
Signing time:             Wed 27 May 2026 14:50:26 +0000
ASPA not before:          Wed 27 May 2026 14:50:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210198
Providers:                AS: 24961
                          AS: 58299
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:69:ea:5b:1f:a7:03:78:a2:20:a7:6c:30:b0:96:97:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
        Validity
            Not Before: May 27 14:50:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad5e1f5a792b70622ccccb3f16961b7a00295471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:42:52:f6:53:20:69:e6:d4:bb:1a:88:96:
                    58:5f:9f:03:e9:95:77:b9:5d:0e:fa:c2:e8:59:43:
                    1e:ff:5e:83:ab:32:c8:5e:c4:c1:a0:03:7c:e2:fd:
                    7d:2f:50:67:dd:1e:f4:46:6a:36:7f:4a:7e:be:a7:
                    4b:c0:0e:0f:5c:58:92:60:97:54:30:0d:66:f5:12:
                    c7:7d:0c:4d:93:b9:85:83:0e:12:9a:79:91:f0:c2:
                    c8:4f:09:b0:6f:a4:c1:53:01:13:4f:7d:ec:fb:7a:
                    0c:eb:f5:a9:8f:f6:79:44:62:bb:6e:07:97:5b:a6:
                    3d:c0:44:53:16:c4:22:75:c4:a8:80:30:e8:1b:f2:
                    95:a5:b5:18:c7:6e:72:c9:93:a7:93:c4:f4:d4:d1:
                    d4:4f:ff:13:40:95:cf:c5:ee:20:2e:ce:ba:6d:0f:
                    ad:3a:0b:7b:fe:aa:4d:cf:72:ae:c6:ec:d6:73:51:
                    93:15:ea:78:37:6d:2b:2b:25:61:48:f3:9a:dc:49:
                    fa:eb:69:7a:55:cf:71:3b:d3:d2:9a:5e:bc:18:4c:
                    40:1f:28:04:7c:0d:8c:fe:30:e0:c9:74:09:59:19:
                    92:d9:bf:12:ab:1f:0f:88:45:62:35:0d:48:a7:0a:
                    db:e7:bc:1c:fe:4e:bf:57:13:7d:74:00:69:1f:0e:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5E:1F:5A:79:2B:70:62:2C:CC:CB:3F:16:96:1B:7A:00:29:54:71
            X509v3 Authority Key Identifier:
                keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/rV4fWnkrcGIszMs_FpYbegApVHE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210198

    Signature Algorithm: sha256WithRSAEncryption
         17:96:7c:da:1e:40:83:d9:1f:a8:2a:b2:32:8b:40:7c:61:fb:
         78:96:5f:7a:f1:18:d7:87:c0:c7:ed:c2:6c:4a:2a:3a:d2:d3:
         44:f1:ad:8a:ce:db:6e:5a:b4:dc:a5:5e:d5:6c:05:97:d1:bd:
         6c:17:7b:10:80:61:56:c4:65:8a:9c:67:48:51:1a:19:00:48:
         e9:c0:07:9c:0c:d7:09:93:6b:17:ea:6e:6b:3d:87:98:3d:45:
         28:f0:00:2b:40:ac:16:cb:ea:40:9c:bb:04:78:09:d5:77:dc:
         48:3d:e9:2f:86:af:51:c1:a1:2e:f6:26:3b:0f:d5:4a:24:dc:
         49:2e:fa:cf:ce:5a:68:1a:ca:a5:63:85:d4:85:5d:6d:8f:4f:
         ce:55:12:e8:be:4a:0e:8e:82:e3:31:fb:33:d5:eb:1a:7f:19:
         a8:0f:01:fd:0a:bf:37:2c:66:7e:d3:21:64:87:49:fa:5e:1a:
         24:d2:43:63:51:81:c1:87:71:92:40:d1:ac:73:01:fb:04:05:
         dd:b3:28:fc:14:c5:c4:71:99:9a:60:19:9d:d3:d5:dd:8b:dd:
         6d:37:82:00:29:d6:0b:ec:43:55:c1:dd:a9:a0:e8:d5:2d:5d:
         92:2a:ce:d0:9f:8a:ab:db:57:50:3f:78:67:6c:9e:6b:4a:64:
         c5:ff:45:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:36:04 2026 by rpki-client