Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/Stua-bI85s_Qjcis9xg3M4eoMT0.asa
File:                     Stua-bI85s_Qjcis9xg3M4eoMT0.asa (raw, json)
Hash identifier:          P9r1AQ6O3K6feHqh5gbLCxcbf2Aonowkyk/Ljn2V6bU=
Subject key identifier:   4A:DB:9A:F9:B2:3C:E6:CF:D0:8D:C8:AC:F7:18:37:33:87:A8:31:3D
Certificate issuer:       /CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
Certificate serial:       019D5DEF2060BF2C59F4912EC384816294C7
Authority key identifier: 65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/Stua-bI85s_Qjcis9xg3M4eoMT0.asa
Signing time:             Sun 05 Apr 2026 13:57:25 +0000
ASPA not before:          Sun 05 Apr 2026 13:57:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213471
Providers:                AS: 945
                          AS: 7257
                          AS: 7719
                          AS: 9663
                          AS: 11967
                          AS: 34927
                          AS: 41051
                          AS: 63798
                          AS: 209533
                          AS: 211358
                          AS: 212895
                          AS: 214481
                          AS: 214677
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:5d:ef:20:60:bf:2c:59:f4:91:2e:c3:84:81:62:94:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65048850e612cd23d6f0f4e4a4123c984aa9f6ea
        Validity
            Not Before: Apr  5 13:57:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4adb9af9b23ce6cfd08dc8acf718373387a8313d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:b1:c5:26:c5:3a:bf:40:63:c2:3a:85:28:
                    f9:92:17:82:1c:d0:2c:7d:ed:2c:f2:36:d3:5f:64:
                    ec:54:8b:64:9f:30:1d:69:62:00:d0:5d:69:22:24:
                    0e:bb:6e:a7:02:47:c3:1e:a6:ac:e8:e5:b1:98:6c:
                    06:a1:ac:1e:bf:44:05:74:58:a7:db:3b:59:ec:f5:
                    de:99:c6:06:d4:0b:a4:98:eb:d7:bf:6f:ed:29:35:
                    5c:f1:4f:db:d1:ac:6e:a4:86:43:30:68:31:d8:fd:
                    5e:3a:76:6e:9d:8a:1a:84:25:ad:76:92:c2:e5:38:
                    17:52:e2:84:ad:1b:02:0f:1a:5a:34:45:d9:96:9d:
                    22:8f:b8:88:6e:9e:8f:91:99:7f:1a:8f:76:2d:3f:
                    28:82:03:6f:25:38:84:45:ef:2c:5a:34:54:87:0b:
                    5b:93:2f:93:8b:c3:95:1a:c3:0e:5a:d2:b3:63:3f:
                    f2:bd:af:36:b2:b8:85:85:1e:6e:27:f9:3d:91:d2:
                    ba:6a:63:e4:3b:17:f7:da:87:14:b2:3d:28:c0:1d:
                    b8:f6:00:50:07:58:da:dd:07:8b:38:3f:8e:f1:04:
                    5c:21:1e:28:95:d0:59:4f:7c:12:49:d6:d8:ba:78:
                    b8:52:74:f2:05:a7:ea:11:32:30:f1:1e:fb:35:e7:
                    80:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DB:9A:F9:B2:3C:E6:CF:D0:8D:C8:AC:F7:18:37:33:87:A8:31:3D
            X509v3 Authority Key Identifier:
                keyid:65:04:88:50:E6:12:CD:23:D6:F0:F4:E4:A4:12:3C:98:4A:A9:F6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/Stua-bI85s_Qjcis9xg3M4eoMT0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/141f02-3249-4bdb-9e5f-55cc8765e840/1/ZQSIUOYSzSPW8PTkpBI8mEqp9uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213471

    Signature Algorithm: sha256WithRSAEncryption
         a0:a3:bd:7f:67:f5:86:b6:ab:ba:39:4c:73:67:15:97:e5:ab:
         f5:dc:ad:e9:eb:bd:a0:b7:00:e4:81:7f:87:ce:ba:3f:df:82:
         43:27:fd:2b:1e:d4:bc:ca:99:23:28:8e:0e:2c:4f:17:46:27:
         1d:8d:7c:65:45:b4:25:d0:19:5a:3d:64:fe:e0:dd:a3:e6:ec:
         06:81:25:21:7d:ff:b7:a2:1c:5b:2e:29:8a:06:9b:39:07:65:
         d5:ed:63:76:bf:f9:09:24:6b:9a:2b:98:1c:ac:f2:51:dc:1f:
         da:f9:f5:76:bb:d1:f0:d8:0a:30:83:4d:7c:9d:d3:e2:5c:4c:
         96:4c:e7:73:96:e4:01:31:bb:a9:b8:17:3a:f6:ca:c2:c0:f4:
         79:3c:0b:2c:44:9f:f3:50:6b:14:eb:aa:a5:99:cd:f7:70:9b:
         53:19:f9:5f:d6:02:c9:7d:8a:75:c4:ba:3a:0a:0b:91:4c:ee:
         76:5d:2a:43:07:8e:0d:99:1e:04:01:e0:a6:9d:23:44:78:d0:
         b4:e0:a0:14:02:43:9f:3a:87:65:78:14:82:bf:a1:80:d2:48:
         49:7d:7b:19:31:bf:9d:23:21:fa:20:f5:cb:75:aa:24:2c:6c:
         ca:e9:bf:99:57:32:66:f5:07:c1:55:ae:ec:f0:01:b1:f7:82:
         25:1d:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:06:03 2026 by rpki-client