Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/7W9BcgnnRatme6L6_U0HezZdQWs.asa
File:                     7W9BcgnnRatme6L6_U0HezZdQWs.asa (raw, json)
Hash identifier:          UPJkIO5CpHlOYi7OXRALJbxPkRF0yZ7EucNiwwilDKw=
Subject key identifier:   ED:6F:41:72:09:E7:45:AB:66:7B:A2:FA:FD:4D:07:7B:36:5D:41:6B
Certificate issuer:       /CN=87e1b29c4779edddbc0fa2a588107b894ebaf6dd
Certificate serial:       019E633C4C9F8382C67FAE0088E8332BEA6F
Authority key identifier: 87:E1:B2:9C:47:79:ED:DD:BC:0F:A2:A5:88:10:7B:89:4E:BA:F6:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h-GynEd57d28D6KliBB7iU669t0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/7W9BcgnnRatme6L6_U0HezZdQWs.asa
Signing time:             Tue 26 May 2026 07:42:36 +0000
ASPA not before:          Tue 26 May 2026 07:42:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            212207
Providers:                AS: 50446
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h-GynEd57d28D6KliBB7iU669t0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:63:3c:4c:9f:83:82:c6:7f:ae:00:88:e8:33:2b:ea:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87e1b29c4779edddbc0fa2a588107b894ebaf6dd
        Validity
            Not Before: May 26 07:42:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed6f417209e745ab667ba2fafd4d077b365d416b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:89:36:69:11:7a:17:29:5e:69:a7:90:4f:
                    31:fe:69:65:de:59:db:74:b7:35:27:72:79:c3:41:
                    7d:18:9c:64:07:e9:e0:05:48:75:d9:40:67:b2:11:
                    1c:8c:b9:be:9a:05:43:3d:0e:e3:c2:a6:e4:19:79:
                    51:5e:10:9e:0e:71:6f:ce:d3:76:d5:f7:3d:1c:43:
                    44:99:4d:c2:27:2c:0e:ad:0b:40:fe:3e:71:e9:b9:
                    02:5b:78:7e:5e:f5:fb:cd:be:4c:11:39:a7:cb:34:
                    cf:95:ce:9e:e2:e7:e0:0d:14:4c:e7:02:42:e3:ff:
                    0c:c9:2f:6b:91:6b:dd:f8:05:4f:87:22:f3:31:55:
                    79:45:47:2a:a4:5f:5f:45:92:72:c8:4f:c6:50:ff:
                    a5:1b:fc:ba:ed:db:ab:3d:10:db:53:1e:36:ed:16:
                    51:a3:ac:88:42:56:37:e4:38:6a:25:68:3e:87:40:
                    04:55:af:ec:52:3b:db:33:a2:82:ce:31:8d:b7:c3:
                    10:11:ad:b8:e8:27:e9:4e:ae:2c:45:6a:3c:b8:6b:
                    5c:41:50:a6:97:1a:98:d9:94:66:b0:d9:25:39:2c:
                    ba:15:c4:fb:07:0a:6c:60:c2:6f:16:32:96:0b:fa:
                    f5:b9:f1:6e:19:76:e1:a3:36:a4:6f:09:31:7c:18:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6F:41:72:09:E7:45:AB:66:7B:A2:FA:FD:4D:07:7B:36:5D:41:6B
            X509v3 Authority Key Identifier:
                keyid:87:E1:B2:9C:47:79:ED:DD:BC:0F:A2:A5:88:10:7B:89:4E:BA:F6:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-GynEd57d28D6KliBB7iU669t0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/7W9BcgnnRatme6L6_U0HezZdQWs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/212a65-0b8a-4061-aa8b-31b7da66c4bd/1/h-GynEd57d28D6KliBB7iU669t0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212207

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:72:4f:92:34:fb:b4:8e:40:79:45:68:e6:f2:d5:58:ed:
         5d:a2:f5:14:af:f3:69:75:3a:54:2e:02:9d:81:31:f1:50:7d:
         f7:d6:56:6b:63:c2:e2:ec:b3:37:3b:7e:12:a2:74:89:87:a5:
         d8:11:1d:70:fb:4b:f0:67:f5:cc:36:57:3b:5a:df:cc:51:ba:
         88:0d:f5:ea:2e:d4:2d:24:eb:bb:35:b3:d0:2d:e9:e8:f8:cc:
         a2:ca:eb:80:1a:b9:07:a7:c3:e4:3a:e3:81:56:13:9b:ae:01:
         8a:d9:f3:48:5b:8b:4a:25:39:d7:dd:4b:b7:ee:02:92:a8:19:
         d1:2a:96:7a:32:8d:2e:41:c2:87:24:f8:f7:37:07:91:02:76:
         68:e8:c9:f3:fa:b2:eb:6f:0c:30:ad:1d:fa:81:b3:9c:6b:83:
         d4:3b:df:70:f6:83:91:1f:50:4d:c0:b2:c1:e3:d2:51:c5:bd:
         d1:40:97:e2:82:57:2d:c7:03:b1:f8:d2:09:ca:eb:9b:7a:08:
         cf:78:e3:c1:26:9a:77:32:36:aa:8f:00:e3:48:50:6d:21:9d:
         b1:01:ee:77:58:2d:e8:5f:b1:3f:de:55:85:ad:ba:73:78:41:
         03:44:0a:36:fd:7e:03:b4:59:9b:9b:d9:a0:48:f3:ce:32:fc:
         74:75:0e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:23 2026 by rpki-client