Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/_I5a0P8T4VJzebOuAIGr0Xf9lEc.asa
File:                     _I5a0P8T4VJzebOuAIGr0Xf9lEc.asa (raw, json)
Hash identifier:          4TGEq37+do+qienVBiWKqzcP2qwax/q6NuHIkhYbhW0=
Subject key identifier:   FC:8E:5A:D0:FF:13:E1:52:73:79:B3:AE:00:81:AB:D1:77:FD:94:47
Certificate issuer:       /CN=23a89ab532393863bcb139163dcf4158a57f1baf
Certificate serial:       019F9AD89994AD920F58FC8CF678E8C1864C
Authority key identifier: 23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/_I5a0P8T4VJzebOuAIGr0Xf9lEc.asa
Signing time:             Sat 25 Jul 2026 19:55:14 +0000
ASPA not before:          Sat 25 Jul 2026 19:55:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199742
Providers:                AS: 42532
                          AS: 49581
                          AS: 58212
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9a:d8:99:94:ad:92:0f:58:fc:8c:f6:78:e8:c1:86:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a89ab532393863bcb139163dcf4158a57f1baf
        Validity
            Not Before: Jul 25 19:55:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc8e5ad0ff13e1527379b3ae0081abd177fd9447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:e6:09:b1:d4:42:c0:80:4f:f2:f6:10:95:
                    e7:a7:7a:91:80:a6:d5:c3:57:33:08:ca:81:d1:5f:
                    a0:2d:6c:59:78:b4:0e:bb:98:4f:e1:bd:09:b7:19:
                    0a:b7:86:53:1c:d7:a2:c5:ca:35:37:e2:bc:a5:0a:
                    bf:c6:5a:31:e1:cb:45:a1:42:4b:f5:2a:92:89:87:
                    e7:db:b7:a0:09:2f:bd:fc:cb:f7:7a:31:81:cc:08:
                    59:d9:e2:80:44:fe:ef:4b:b9:d7:9b:23:46:9e:c4:
                    94:c6:88:20:89:c8:e0:39:10:cf:71:31:48:e6:dd:
                    c8:a5:30:41:ba:29:42:08:52:36:46:0d:69:d4:36:
                    91:bf:70:cb:60:d5:34:f1:19:07:03:49:03:8a:c1:
                    f1:9d:4b:cc:00:dd:09:c9:75:0f:55:af:71:69:89:
                    14:b2:b9:4f:89:5b:af:ff:da:ef:d6:78:20:22:69:
                    71:e8:97:4b:b2:cb:c4:d2:d3:85:d5:18:5c:ab:e2:
                    b9:94:02:59:c0:61:37:eb:11:25:05:21:4d:f5:35:
                    7f:77:fb:2f:a0:ab:e7:b7:d8:cc:99:b5:21:f4:47:
                    e0:6a:d1:f6:12:95:7f:17:c5:da:70:db:a6:07:56:
                    0b:e5:c2:b6:84:4c:79:78:ee:b6:7c:c7:7d:d6:6a:
                    c3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8E:5A:D0:FF:13:E1:52:73:79:B3:AE:00:81:AB:D1:77:FD:94:47
            X509v3 Authority Key Identifier:
                keyid:23:A8:9A:B5:32:39:38:63:BC:B1:39:16:3D:CF:41:58:A5:7F:1B:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6iatTI5OGO8sTkWPc9BWKV_G68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/_I5a0P8T4VJzebOuAIGr0Xf9lEc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ec2ef6-35ae-4686-b462-149efb9503c4/1/I6iatTI5OGO8sTkWPc9BWKV_G68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199742

    Signature Algorithm: sha256WithRSAEncryption
         05:4e:d9:3a:8e:4c:6e:b6:fd:83:9b:85:cb:4f:94:44:49:aa:
         e4:44:e3:27:56:2f:9f:3b:62:ff:53:1a:43:5f:90:32:bb:3d:
         f6:61:f9:f5:15:5c:2d:ee:a3:5d:57:c7:a6:b1:52:05:f1:c8:
         a2:94:c6:44:ab:d8:1f:01:8f:e5:00:3c:ba:7a:7e:69:3a:4d:
         59:66:06:8c:fd:33:6c:2e:c6:e8:c7:ef:3f:34:7d:47:80:5e:
         a0:77:14:f4:78:a1:75:c6:f7:37:d3:88:ff:51:94:e3:69:3f:
         ac:d0:84:50:18:5a:c1:7f:fe:19:55:39:10:98:b2:dd:49:51:
         bf:51:4a:9c:81:1d:c9:5a:25:eb:b0:01:a4:55:f0:e7:2a:64:
         f4:c0:4e:99:5a:5a:a5:a5:58:3a:a2:8b:90:2c:b8:6a:ed:c2:
         d1:98:16:26:e0:ea:51:e7:8b:44:f4:f6:ce:3e:17:10:1c:ce:
         99:98:46:14:a0:01:ab:be:5c:bd:1c:c6:59:54:03:19:74:fb:
         66:9b:f6:61:3c:3d:18:d5:cc:0c:10:26:4f:b3:f6:cf:86:82:
         64:e9:19:2c:14:25:b0:b7:53:88:c3:41:8a:ed:66:e3:74:a0:
         dd:60:75:23:1e:d7:96:fa:74:1c:4f:6a:cc:28:b8:bc:e9:0a:
         3f:22:9a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:00 2026 by rpki-client