Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/7_-zz7b2CyUds46tc3NTpPPQrhA.asa
File: 7_-zz7b2CyUds46tc3NTpPPQrhA.asa (raw, json)
Hash identifier: La+U/f27+kOyuRcb5YsK6WLu4+rgj3UU9PzwJmbHcu4=
Subject key identifier: EF:FF:B3:CF:B6:F6:0B:25:1D:B3:8E:AD:73:73:53:A4:F3:D0:AE:10
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 019F1901417828E933B5E3E1B5270EB9E455
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/7_-zz7b2CyUds46tc3NTpPPQrhA.asa
Signing time: Tue 30 Jun 2026 14:49:00 +0000
ASPA not before: Tue 30 Jun 2026 14:49:00 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 203402
Providers: AS: 31898
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:01:41:78:28:e9:33:b5:e3:e1:b5:27:0e:b9:e4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jun 30 14:49:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efffb3cfb6f60b251db38ead737353a4f3d0ae10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:1d:60:a0:81:ac:70:4a:97:81:25:cd:19:
30:ae:e8:68:49:48:66:14:f7:22:fc:72:06:b4:22:
48:99:25:5b:2d:72:35:cb:1d:bf:2c:42:a6:29:fc:
89:93:f7:f4:35:2a:73:af:dd:44:83:2b:7f:c9:f4:
d9:a2:58:ea:00:6d:be:67:b2:85:4e:db:35:c6:d8:
7f:41:8e:5f:a0:85:e4:b9:09:2c:12:47:9d:ac:01:
2b:14:3d:18:28:32:92:f5:c5:bd:e1:00:f9:85:e4:
ba:d6:dd:6a:b8:6b:14:6c:09:f8:90:ae:ad:01:d2:
11:87:b5:07:5e:02:b0:c7:7e:7b:5a:7e:c5:4f:c8:
df:4e:41:88:6f:ab:7b:9d:df:e9:c5:e3:5b:21:3f:
8b:8f:36:64:a3:e4:04:9d:06:45:2d:60:62:43:d8:
d2:13:49:2d:e6:60:4e:f5:0c:4c:a0:17:1f:48:49:
57:30:47:65:27:b2:a2:b0:28:72:4f:b0:29:17:09:
d1:d2:52:ab:b4:41:04:20:9a:c1:de:02:6d:af:10:
10:00:d4:a1:d0:bb:0a:48:2c:45:f9:1d:bf:ae:4f:
61:fb:57:fe:4b:77:c8:db:db:bc:b8:75:cc:24:7d:
9b:77:7d:ff:3a:b6:e6:5e:d5:4a:b8:26:4c:32:db:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:B3:CF:B6:F6:0B:25:1D:B3:8E:AD:73:73:53:A4:F3:D0:AE:10
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/7_-zz7b2CyUds46tc3NTpPPQrhA.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203402
Signature Algorithm: sha256WithRSAEncryption
4d:f5:ed:ea:df:f5:7a:1f:69:d3:ef:04:ff:83:5b:27:eb:ba:
27:4e:3a:a9:a0:f1:08:95:df:81:73:e8:f4:c4:aa:a2:e1:da:
8b:3c:05:4a:8b:0e:ec:d8:cd:eb:2f:cb:e2:75:cf:9c:e9:0c:
d6:10:6c:9b:80:c6:67:a1:fd:01:57:9c:9f:99:d5:59:3c:3d:
56:7b:f6:05:25:0c:16:3f:6d:43:be:6f:d0:5d:c0:1f:a6:78:
91:9d:38:58:19:67:4e:c2:8d:b0:c6:da:b8:b3:3e:fe:30:90:
76:5e:17:a9:1c:76:d5:00:77:74:b9:96:5b:31:fc:c5:0b:1e:
1e:f2:7f:46:5d:9f:15:53:bd:db:df:c5:d5:e4:58:75:e6:f1:
be:16:4c:a7:4d:f0:72:cd:47:45:19:90:ce:5e:d3:15:ef:d7:
90:11:5a:23:3c:47:4b:fb:51:73:5a:fc:ee:54:aa:8f:7d:42:
b6:27:aa:61:09:3e:46:a0:54:57:f6:18:f1:14:b7:34:13:43:
f1:93:94:a1:94:b9:73:b3:f4:25:62:78:f3:37:a2:ff:b2:d1:
d4:39:be:ee:60:b3:3b:79:06:7d:d3:06:c8:eb:ac:de:c8:91:
36:c4:8f:88:ac:08:2b:c9:7e:6d:3f:f4:a0:da:c3:ec:06:7c:
ea:e3:52:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:35:48 2026 by rpki-client