Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa
File:                     sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa (raw, json)
Hash identifier:          vSd/IIQwZif93HYdwUlXhWDqa5hZsFOQGXaTzyxogbM=
Subject key identifier:   B3:11:BE:3A:17:30:BD:BF:1A:64:CD:93:A5:87:75:34:1E:6F:3A:06
Certificate issuer:       /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial:       019EB787CF82EB3A203F72242F65942DF0C8
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa
Signing time:             Thu 11 Jun 2026 16:33:11 +0000
ASPA not before:          Thu 11 Jun 2026 16:33:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205901
Providers:                AS: 58212
                          AS: 213520
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:87:cf:82:eb:3a:20:3f:72:24:2f:65:94:2d:f0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
        Validity
            Not Before: Jun 11 16:33:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b311be3a1730bdbf1a64cd93a58775341e6f3a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:92:83:5c:e9:5a:98:7b:b7:17:78:9b:bd:
                    2f:96:cc:f8:7a:cc:2f:84:16:73:15:f8:59:ef:5b:
                    43:1f:57:d4:92:5f:73:36:64:d6:c4:b7:d9:05:41:
                    d4:35:71:c2:1a:00:0f:89:61:12:a6:2e:72:8b:2d:
                    7b:c2:52:35:03:48:eb:35:86:75:e3:cd:fe:a5:b0:
                    87:96:2d:44:ac:a6:b3:34:91:62:c5:e1:86:90:b8:
                    5d:13:e9:32:85:5e:71:2f:37:57:4c:c0:e1:51:c7:
                    a8:3d:f1:a3:e4:64:2d:c1:60:91:ed:3d:c4:74:32:
                    c9:87:6a:c5:87:9e:5b:68:a2:9a:9e:32:c9:58:95:
                    bc:23:dc:30:0f:89:cb:a6:f9:5f:c8:90:b0:85:8f:
                    76:fa:b2:07:76:8a:49:58:91:7c:69:8a:71:8d:fb:
                    5f:5c:75:b5:41:25:39:eb:e5:f8:a8:db:d9:0a:f0:
                    3f:0c:a8:41:62:5f:ba:7b:21:9c:42:7f:c7:37:e6:
                    6a:c3:79:64:e9:4a:cb:5d:95:5b:9e:34:20:09:76:
                    be:8e:d9:83:e8:0a:42:89:40:ef:4b:a4:e8:56:c5:
                    4a:d3:be:8f:83:c8:ac:0a:95:0e:58:88:0f:22:18:
                    e6:0f:2b:76:39:d6:16:12:68:95:f3:5b:2e:d0:08:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:BE:3A:17:30:BD:BF:1A:64:CD:93:A5:87:75:34:1E:6F:3A:06
            X509v3 Authority Key Identifier:
                keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205901

    Signature Algorithm: sha256WithRSAEncryption
         11:71:63:4f:ee:c9:81:4a:3f:ca:c5:64:3c:f3:c8:11:eb:a4:
         5d:53:36:93:06:f9:c9:c5:6b:30:4d:c3:e0:d0:bb:22:38:0d:
         f6:f4:36:d3:71:9c:2a:7f:82:84:b5:da:58:6c:38:0e:0d:e8:
         55:1b:1a:67:bf:56:8c:f0:f3:bf:8c:c4:68:34:14:a7:ec:1e:
         eb:a7:ef:4a:ba:7c:a2:7a:ec:6a:1a:5e:22:28:cf:43:24:ba:
         80:be:e7:c1:1d:63:ae:92:31:f0:92:9b:a2:ef:72:0b:3e:a9:
         d1:5f:e9:79:21:6c:a7:08:ef:49:ab:d6:f5:e1:b7:47:f1:df:
         40:4f:06:fc:c8:ee:24:ac:9a:4b:4f:7c:9a:ea:42:c8:72:11:
         4e:3e:23:21:60:a7:fc:c1:ad:bf:62:b7:f4:05:4a:3f:39:03:
         66:3d:d3:80:c4:22:5f:34:f1:bf:5a:90:a4:71:7b:37:3f:f3:
         f0:2d:8d:80:25:a1:b8:3a:70:0c:14:39:c5:c5:f3:ea:a5:62:
         50:98:cf:f9:3a:83:d2:e5:91:bd:1a:4e:b7:5b:13:b2:0b:c6:
         43:a8:5c:f4:c8:3e:2e:b9:07:9f:78:30:b9:e2:b1:de:35:8c:
         a4:97:99:10:57:85:9c:d4:03:b9:fd:c9:48:03:fb:33:6f:38:
         a8:0a:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:23 2026 by rpki-client