Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/R-jquJ8tPgdX2hMBpuIObNqROCE.asa
File:                     R-jquJ8tPgdX2hMBpuIObNqROCE.asa (raw, json)
Hash identifier:          /pp7yPdgOzqXU/03x41XGhPjeuP0jNCBbcWtApFlL0U=
Subject key identifier:   47:E8:EA:B8:9F:2D:3E:07:57:DA:13:01:A6:E2:0E:6C:DA:91:38:21
Certificate issuer:       /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial:       019D690358D1F84299A1D471E100FAFC5636
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/R-jquJ8tPgdX2hMBpuIObNqROCE.asa
Signing time:             Tue 07 Apr 2026 17:35:20 +0000
ASPA not before:          Tue 07 Apr 2026 17:35:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58308
Providers:                AS: 29075
                          AS: 39305
                          AS: 59689
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:69:03:58:d1:f8:42:99:a1:d4:71:e1:00:fa:fc:56:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
        Validity
            Not Before: Apr  7 17:35:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47e8eab89f2d3e0757da1301a6e20e6cda913821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:3e:7b:2a:77:fe:f1:55:17:2e:e2:0b:85:
                    fe:34:6d:da:d4:3d:b9:48:0d:cb:7a:27:27:ed:bd:
                    a5:76:ef:4f:6b:54:f2:e2:18:10:59:f7:7a:93:8a:
                    cc:48:d7:16:50:8e:b7:62:e8:69:ae:de:89:55:90:
                    7a:74:c2:c5:a3:6f:26:87:e5:2f:25:ed:9b:87:19:
                    e8:17:0c:be:92:e2:b6:5c:7c:05:90:d5:8b:44:52:
                    26:d8:b5:dd:fb:fc:39:8d:82:9f:39:ba:2e:bc:2a:
                    ba:0b:ab:de:3a:b8:ba:27:35:32:15:e2:33:df:7e:
                    b9:66:53:0f:5a:8c:cb:7a:83:d9:e2:9b:c0:1b:96:
                    df:7c:28:d0:63:dc:61:d8:27:ff:39:4d:4c:54:48:
                    9d:90:90:dd:72:41:5f:d1:1c:92:df:22:fa:6f:47:
                    50:05:09:b2:ff:9a:2c:45:f8:4a:0d:65:87:9b:09:
                    b9:cc:c3:5a:ce:a7:cf:5b:07:93:7c:f1:3e:da:75:
                    5d:07:81:59:d6:64:f4:b2:a5:b5:61:93:9a:eb:db:
                    c1:36:15:97:02:17:7e:cf:a9:c2:50:ad:84:ee:b9:
                    f2:a3:15:48:da:d3:74:13:59:18:90:e2:79:54:42:
                    8b:e2:9d:53:1b:92:22:4a:08:8d:01:f2:6c:a4:81:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E8:EA:B8:9F:2D:3E:07:57:DA:13:01:A6:E2:0E:6C:DA:91:38:21
            X509v3 Authority Key Identifier:
                keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/R-jquJ8tPgdX2hMBpuIObNqROCE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58308

    Signature Algorithm: sha256WithRSAEncryption
         37:7b:2f:fa:ed:dc:5d:60:68:79:f7:29:11:7c:99:04:eb:9d:
         c3:48:c9:db:e3:bb:9a:a2:32:96:9a:1c:f2:a7:ba:0e:c6:85:
         a4:cf:ac:65:1b:65:de:88:b0:48:a2:50:ef:e2:56:96:c7:7a:
         1c:ae:92:05:64:ce:f5:67:12:96:49:12:10:03:b8:40:bb:66:
         e4:5a:f4:8b:24:50:c4:2b:cc:6f:70:75:79:f5:53:7a:fb:5c:
         17:c5:0f:08:d7:cd:6c:ad:26:1e:14:16:ae:f3:60:a2:ed:18:
         fb:8b:83:4c:80:7d:f4:cc:1c:44:dd:b4:ee:42:17:d8:ce:8d:
         f7:aa:f4:54:e5:45:11:55:a7:fc:bf:59:34:1f:52:e0:77:7e:
         34:69:b9:96:1b:0c:a9:24:12:13:b2:59:c3:02:71:fd:b9:2b:
         e6:b5:3d:9e:ae:79:59:ff:cc:17:9c:d4:93:95:60:88:b0:d8:
         2b:aa:0d:14:1d:65:bc:1f:20:8f:42:2d:f0:11:8f:4a:26:cb:
         67:04:a5:cb:27:fe:9e:2c:22:e2:50:e4:de:10:e7:e6:6f:96:
         66:8b:6d:8d:36:73:e4:8f:86:9f:4e:45:48:b8:0f:5e:b1:d0:
         0b:81:18:58:96:35:e2:8d:b3:6d:30:dd:11:20:98:67:94:80:
         41:84:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:11 2026 by rpki-client