Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/b8i9m0axPxDDGMlomU5lSF5dPuA.asa
File:                     b8i9m0axPxDDGMlomU5lSF5dPuA.asa (raw, json)
Hash identifier:          KBEJeBNE2I2oG4USPi911JF+fPhQ4JykHrbwTuwUzCM=
Subject key identifier:   6F:C8:BD:9B:46:B1:3F:10:C3:18:C9:68:99:4E:65:48:5E:5D:3E:E0
Certificate issuer:       /CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
Certificate serial:       01A056F7246A7F0C3299F43C2F93AB586B46
Authority key identifier: 71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/b8i9m0axPxDDGMlomU5lSF5dPuA.asa
Signing time:             Mon 31 Aug 2026 08:37:12 +0000
ASPA not before:          Mon 31 Aug 2026 08:37:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219127
Providers:                AS: 214145
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:56:f7:24:6a:7f:0c:32:99:f4:3c:2f:93:ab:58:6b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718f17e4cfb33821621f1cd1b1007ab52d1372e9
        Validity
            Not Before: Aug 31 08:37:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6fc8bd9b46b13f10c318c968994e65485e5d3ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:c4:81:62:ad:62:55:ee:ab:eb:80:5a:87:
                    1c:1f:c2:25:67:41:1e:9d:01:a2:d9:d2:14:c1:88:
                    24:fd:a8:ff:5d:b3:c6:c7:ea:7c:79:22:8b:79:0b:
                    30:94:61:69:a8:f3:5a:e3:eb:5c:a5:d8:05:a8:3b:
                    67:d8:c0:8d:ff:18:9e:8e:c1:19:4a:83:7d:40:45:
                    69:3b:9e:03:a0:13:31:01:33:9c:9a:e6:c8:7d:aa:
                    cf:8d:45:95:db:26:29:71:f5:17:51:93:9d:c7:8a:
                    03:9e:c6:d2:b2:36:bb:3d:20:ec:e2:fc:05:be:80:
                    d0:60:85:9d:4f:b0:08:8d:ed:38:3a:6a:f7:70:66:
                    3c:d0:5a:5c:ee:2d:5a:c4:38:be:16:5d:f4:5c:d1:
                    fc:e8:d2:c0:7a:72:8c:db:cc:52:1f:40:e5:8d:fa:
                    17:ea:ab:a6:c6:e3:1a:27:e8:8c:86:6b:68:0e:27:
                    31:f0:33:ef:f5:85:0f:02:17:9a:ca:69:7e:39:1d:
                    f3:d2:f7:39:d5:03:3e:42:8d:d1:da:14:73:4e:56:
                    df:4f:c0:b4:0d:1d:9c:16:32:22:ca:58:6e:92:8c:
                    ac:8b:64:fb:bf:7d:7d:0a:56:ed:30:79:8d:ee:50:
                    14:8f:d3:73:c8:7a:6d:6e:ea:1a:87:f3:65:1e:1b:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C8:BD:9B:46:B1:3F:10:C3:18:C9:68:99:4E:65:48:5E:5D:3E:E0
            X509v3 Authority Key Identifier:
                keyid:71:8F:17:E4:CF:B3:38:21:62:1F:1C:D1:B1:00:7A:B5:2D:13:72:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/b8i9m0axPxDDGMlomU5lSF5dPuA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0cdc65-c5ca-4949-aabd-de946541cdcb/1/cY8X5M-zOCFiHxzRsQB6tS0Tcuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219127

    Signature Algorithm: sha256WithRSAEncryption
         b4:c1:7f:c5:49:1a:6f:6e:2b:c6:82:14:d7:9f:03:e0:ba:46:
         24:37:90:45:d2:74:19:e8:8c:f9:3b:b6:49:cc:c8:ba:a6:6d:
         df:1f:ff:75:bf:a0:e6:8e:e6:b6:94:5d:1c:a5:b6:76:da:05:
         04:bb:02:b6:3a:2b:0b:f2:b6:d4:f4:47:71:41:14:83:93:56:
         1f:7c:88:18:c5:40:a8:2f:9f:a2:82:05:46:b1:7b:2f:20:3a:
         d1:e3:c1:3e:be:d2:5c:de:c7:a5:db:39:57:3a:4f:a3:7b:11:
         d5:fc:6b:8c:31:00:10:42:79:24:4a:42:80:fa:3c:73:8c:f2:
         b9:b1:27:a9:3a:d9:57:71:e5:3f:f8:5a:53:68:39:be:0c:95:
         b9:0c:31:b0:b7:26:13:15:2a:14:df:07:14:55:63:07:7a:53:
         22:23:04:78:e5:3c:ca:f6:f3:cc:3c:2a:5e:73:d6:ad:01:ce:
         b7:11:fd:ae:c3:93:28:b6:02:e5:10:11:de:96:67:82:63:ac:
         68:d3:fb:e8:da:30:d0:cb:fd:4d:85:67:c2:db:d5:e0:2a:d5:
         14:f1:df:46:23:13:98:c4:fa:13:f2:60:39:32:74:6e:af:00:
         93:8c:54:71:34:40:50:49:9f:71:27:69:d7:57:38:48:63:17:
         ec:ed:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:13:25 2026 by rpki-client