Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/bX3VSCwwmfzgHON93o3xUGV0RGQ.asa
File:                     bX3VSCwwmfzgHON93o3xUGV0RGQ.asa (raw, json)
Hash identifier:          ijaCS3mqldZ4pWneFno46A31UHhq2PJZI7Dj9j47OsM=
Subject key identifier:   6D:7D:D5:48:2C:30:99:FC:E0:1C:E3:7D:DE:8D:F1:50:65:74:44:64
Certificate issuer:       /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial:       019EB6E12F6080B628F6BA04985CDFB2F715
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/bX3VSCwwmfzgHON93o3xUGV0RGQ.asa
Signing time:             Thu 11 Jun 2026 13:31:11 +0000
ASPA not before:          Thu 11 Jun 2026 13:31:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57692
Providers:                AS: 719
                          AS: 39324
                          AS: 199508
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:e1:2f:60:80:b6:28:f6:ba:04:98:5c:df:b2:f7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
        Validity
            Not Before: Jun 11 13:31:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6d7dd5482c3099fce01ce37dde8df15065744464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:f0:f6:ca:bb:c8:4a:00:fb:bc:d2:d7:0d:
                    5b:ae:00:95:6e:9a:bd:73:92:01:bb:40:2f:95:f3:
                    f7:0a:de:46:79:b8:4b:69:bc:26:25:8c:9b:e1:12:
                    f7:c3:94:bc:ca:27:ff:27:18:35:9a:93:90:61:7b:
                    49:c4:6d:16:85:9a:ce:dc:08:76:e7:6f:09:af:76:
                    d5:54:84:97:ce:ec:b5:e9:48:d8:e9:58:08:93:fd:
                    25:c0:f7:c1:f7:91:ac:2d:ff:a6:cb:99:bd:8e:b6:
                    78:f4:9c:61:93:2e:a7:02:a2:5e:1b:69:7f:68:76:
                    1e:5c:77:c0:e5:7a:2e:f8:e4:ba:1f:40:7a:10:c2:
                    1d:a8:08:5e:ce:21:7c:cb:a1:38:16:64:85:75:de:
                    d8:1b:11:e5:44:5f:eb:d5:bf:7f:76:54:eb:a9:a0:
                    ca:31:c2:35:d2:f5:a6:5b:78:c8:19:0f:40:cb:db:
                    49:bb:a5:8e:32:43:b4:43:ae:80:ea:b2:e5:23:81:
                    69:4a:c8:9d:c9:d3:9f:bf:5e:6c:35:41:0f:e3:41:
                    31:4f:d9:02:f1:ec:23:be:ff:7e:bb:43:2f:30:dc:
                    fd:a7:35:33:6b:fa:74:77:4a:e1:71:b4:08:52:54:
                    8e:d8:ee:cb:1c:5a:c8:03:e6:45:19:10:77:8f:23:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7D:D5:48:2C:30:99:FC:E0:1C:E3:7D:DE:8D:F1:50:65:74:44:64
            X509v3 Authority Key Identifier:
                keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/bX3VSCwwmfzgHON93o3xUGV0RGQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57692

    Signature Algorithm: sha256WithRSAEncryption
         29:ab:06:a8:b7:ef:ae:ce:6c:70:33:c5:26:a5:55:25:54:ea:
         cc:1f:e1:fc:05:6a:0c:e5:01:cf:76:04:3c:cd:3f:aa:b4:c1:
         a6:88:d8:12:2d:2c:bb:8d:90:07:44:88:de:07:05:59:6e:06:
         01:83:c2:4b:5c:04:a6:5c:9c:09:9f:c7:66:63:0d:79:c9:5d:
         74:5b:84:5e:75:36:d5:e3:4c:ca:5e:2e:8e:bd:23:42:8e:30:
         ee:22:17:ce:23:0c:31:77:b2:6b:03:c1:03:d1:ab:d2:69:4f:
         fe:34:c0:3c:98:ea:33:bd:4c:c1:f7:bc:48:59:9b:7f:60:fd:
         97:75:b2:66:05:0f:01:77:9e:28:e2:4f:9b:3c:42:21:a8:9d:
         f5:4f:38:02:3e:97:d9:ce:36:21:b8:fb:90:96:0a:b4:cd:5f:
         02:aa:6f:09:3b:49:7f:be:51:15:3e:c0:98:39:f1:d9:6a:3c:
         06:b1:67:b9:8c:3d:39:d9:24:94:db:74:cd:86:56:9b:d6:75:
         c2:43:b8:b4:11:89:36:8b:67:cb:ae:33:6c:16:84:0a:e0:d0:
         1b:35:91:6a:df:2e:c1:d4:b7:4b:e2:9d:95:20:b6:d4:75:cd:
         29:c4:67:c6:84:c4:04:8a:36:55:2d:de:07:d2:4d:4a:13:0d:
         39:f4:52:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:30 2026 by rpki-client