Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/5FzvwUIf_jEUll3PKrQMP5_suiU.asa
File:                     5FzvwUIf_jEUll3PKrQMP5_suiU.asa (raw, json)
Hash identifier:          MNHOEt9JisPhIb3wm1XE5W+hLf6wZBICFb3kH8XoROg=
Subject key identifier:   E4:5C:EF:C1:42:1F:FE:31:14:96:5D:CF:2A:B4:0C:3F:9F:EC:BA:25
Certificate issuer:       /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial:       019D530B59E3EEFB1AC8C78FA2FE29CE2D70
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/5FzvwUIf_jEUll3PKrQMP5_suiU.asa
Signing time:             Fri 03 Apr 2026 11:12:25 +0000
ASPA not before:          Fri 03 Apr 2026 11:12:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60171
Providers:                AS: 174
                          AS: 3356
                          AS: 3491
                          AS: 5405
                          AS: 6762
                          AS: 6939
                          AS: 9002
                          AS: 12956
                          AS: 37100
                          AS: 328316
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:53:0b:59:e3:ee:fb:1a:c8:c7:8f:a2:fe:29:ce:2d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
        Validity
            Not Before: Apr  3 11:12:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e45cefc1421ffe3114965dcf2ab40c3f9fecba25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:58:58:8a:9c:e3:b2:d7:88:38:3e:1d:e1:
                    33:62:b2:f9:68:22:d1:43:7c:ab:05:2c:cf:37:e3:
                    7c:45:12:84:02:bd:2a:1f:0c:16:9e:26:03:4f:74:
                    d5:36:fe:55:91:ce:62:e0:18:fb:2c:a2:91:d2:29:
                    b6:58:ec:3a:c6:5f:fb:01:92:6e:cf:f2:28:10:54:
                    0c:50:9e:e9:79:73:af:1a:63:48:bc:c0:65:cc:53:
                    5b:3c:68:fb:e8:1d:33:68:9a:e2:9f:82:47:68:6d:
                    72:6c:76:2a:f6:fc:55:91:e5:9f:c8:0b:ad:60:67:
                    3a:61:b4:a0:fd:51:a4:de:4d:c5:7d:64:9a:2a:36:
                    df:4d:df:f7:bb:1b:c6:89:5c:c1:48:86:55:04:50:
                    df:94:ee:25:4b:e3:ac:2c:04:a2:c1:2e:00:aa:f9:
                    58:f0:fb:03:97:4d:91:05:ed:62:90:02:42:05:fb:
                    76:c9:6e:c8:64:ba:3c:90:15:dc:6d:57:a6:bd:47:
                    6c:d2:8d:f2:f9:d8:4b:d8:cb:9e:c9:d3:47:fb:17:
                    9e:a5:ce:71:04:5a:11:42:cb:44:9e:45:08:71:68:
                    b0:74:7a:25:bf:08:bb:05:02:f0:6c:80:7e:29:f2:
                    6b:58:58:42:6b:9c:1b:ee:43:cd:5b:8b:d8:7b:3f:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5C:EF:C1:42:1F:FE:31:14:96:5D:CF:2A:B4:0C:3F:9F:EC:BA:25
            X509v3 Authority Key Identifier:
                keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/5FzvwUIf_jEUll3PKrQMP5_suiU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60171

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:81:c4:a2:3d:95:8e:65:05:89:d7:91:f4:14:ff:0a:af:
         53:e4:5f:ce:47:fa:11:6a:7c:06:7f:0d:65:ac:15:53:be:d2:
         af:97:e8:eb:1f:fd:ad:3f:2b:0e:b4:0c:64:a9:fe:e3:d5:dc:
         6c:60:9b:3c:76:f9:c6:d7:18:04:bc:85:d4:2a:6b:1f:70:d3:
         bc:5b:e2:ff:ed:be:d2:0e:7d:15:1c:7a:a7:cd:49:0c:8c:57:
         cb:70:35:ea:26:9d:b1:7b:72:f0:cd:72:53:cc:21:25:6b:1a:
         f2:d6:12:98:07:16:02:9b:f1:7d:1b:2e:17:4c:f1:38:1b:00:
         7d:67:43:ef:39:7d:82:b0:6a:1b:c6:40:62:d9:85:3c:ec:36:
         83:b4:4d:5e:2f:cd:3a:a5:c7:59:80:f6:c4:7a:71:62:5f:cb:
         e2:fc:a7:fd:f5:cc:c1:c0:94:56:3d:25:09:03:98:81:bf:45:
         f7:91:9e:27:f6:32:2c:e8:32:83:1a:a8:4f:95:8e:97:a0:0e:
         d1:56:40:4b:37:f3:10:6b:fe:ad:89:4a:b3:b3:1a:b1:b1:51:
         44:da:55:84:61:61:f5:17:27:eb:f9:95:f4:84:b1:1b:98:16:
         4d:36:50:6c:cf:ee:f8:cc:4f:fe:10:c4:50:20:0a:4a:0c:32:
         ef:e4:9e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:27 2026 by rpki-client