Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/W19ujnq5zmLk5Ey2K1kacGWH2JY.asa
File:                     W19ujnq5zmLk5Ey2K1kacGWH2JY.asa (raw, json)
Hash identifier:          RQn3eQA/eV9y1T80EJok00M34sgWyNFRnnz0Rki534s=
Subject key identifier:   5B:5F:6E:8E:7A:B9:CE:62:E4:E4:4C:B6:2B:59:1A:70:65:87:D8:96
Certificate issuer:       /CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
Certificate serial:       019CADB10B06C14D24BC83201E86B9D87362
Authority key identifier: 2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/W19ujnq5zmLk5Ey2K1kacGWH2JY.asa
Signing time:             Mon 02 Mar 2026 08:36:26 +0000
ASPA not before:          Mon 02 Mar 2026 08:36:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214938
Providers:                AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:b1:0b:06:c1:4d:24:bc:83:20:1e:86:b9:d8:73:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd336acec6ed0772f5b159042d5f8206d9aa8cb
        Validity
            Not Before: Mar  2 08:36:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b5f6e8e7ab9ce62e4e44cb62b591a706587d896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:99:3f:81:6c:dd:79:b3:e8:61:4e:61:1c:
                    c1:e9:88:d2:b2:2b:ef:9d:0d:f7:20:de:36:82:4a:
                    13:c9:18:68:18:3f:50:42:fe:d9:4a:77:04:39:80:
                    b0:d0:74:15:ad:26:23:ce:2c:dc:c5:49:58:f1:7f:
                    ed:5f:e8:31:70:13:e8:12:29:f7:00:79:3a:58:df:
                    60:db:83:ff:27:25:f9:4c:a0:97:e7:48:eb:a3:24:
                    45:60:28:fc:7c:b7:19:6c:f2:74:00:ac:66:31:b4:
                    76:a8:ac:b7:62:3c:7f:be:d2:18:d9:e9:b0:ee:80:
                    74:a8:69:bf:4a:0c:74:16:0b:a7:9b:c3:db:56:96:
                    0e:f2:42:d1:bb:c8:49:d3:7b:94:26:20:f7:be:98:
                    23:27:5d:2c:92:51:b8:78:6a:c3:23:ff:35:41:79:
                    32:47:f7:58:48:d3:cd:eb:1e:95:77:4e:1e:35:32:
                    b2:26:3f:fd:9d:a1:7e:28:40:22:97:9e:e2:dd:59:
                    97:a3:66:c5:4d:8f:1a:47:eb:0f:d2:c4:1d:4f:18:
                    db:8f:2b:aa:bf:d8:63:87:62:62:3b:6c:07:10:f1:
                    ed:9a:97:af:56:31:2d:e2:96:28:48:a0:13:83:fd:
                    1f:9b:2f:e4:72:3d:7f:f8:e0:1d:e5:01:ee:a1:31:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5F:6E:8E:7A:B9:CE:62:E4:E4:4C:B6:2B:59:1A:70:65:87:D8:96
            X509v3 Authority Key Identifier:
                keyid:2F:D3:36:AC:EC:6E:D0:77:2F:5B:15:90:42:D5:F8:20:6D:9A:A8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9M2rOxu0HcvWxWQQtX4IG2aqMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/W19ujnq5zmLk5Ey2K1kacGWH2JY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b8f697-6c03-4083-a731-267dcec47d20/1/L9M2rOxu0HcvWxWQQtX4IG2aqMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214938

    Signature Algorithm: sha256WithRSAEncryption
         33:b3:50:20:97:d2:0e:a4:e6:c5:fc:e5:4d:ac:b7:d3:80:6c:
         c0:a3:10:f9:36:ab:2c:02:af:45:07:3b:2e:9d:83:b4:53:d7:
         8e:b0:ee:fb:c3:de:b3:98:ce:ed:fc:dc:64:d5:7a:fd:98:02:
         fe:1e:88:9f:dd:8b:d4:a5:4f:b5:66:48:fe:69:d4:85:0b:de:
         e3:bc:7e:ea:d9:03:6a:12:6b:1a:43:c2:9c:0e:10:2c:a0:30:
         c0:eb:eb:00:f2:99:7a:e5:bf:c5:5b:64:cd:da:14:1c:d7:63:
         58:73:59:fd:83:56:ee:7a:21:70:13:ec:9f:3e:f6:46:f5:92:
         0b:9c:43:11:c0:09:6f:38:17:28:47:7f:b4:ce:c2:c9:83:b8:
         58:04:57:9f:4e:aa:8c:d2:5c:d1:2c:ae:18:c4:49:7e:8d:ef:
         f2:a9:e9:31:76:35:0a:f7:7c:f1:28:04:87:70:62:f2:4d:dd:
         7f:f6:46:73:42:98:bc:04:3b:b9:d1:83:90:ab:d3:2f:05:6a:
         34:36:e9:76:7c:ca:24:ac:6b:22:c3:09:64:f8:b6:a4:53:21:
         93:5d:64:78:da:a3:df:ff:88:1c:8d:3d:1a:05:be:34:38:7b:
         cb:ec:20:30:f2:e9:a8:b5:63:53:9c:b0:ca:04:f3:69:fb:12:
         42:25:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:00:55 2026 by rpki-client