Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/y7z3JDp69YYx5JL47nmjISe99Yw.asa
File:                     y7z3JDp69YYx5JL47nmjISe99Yw.asa (raw, json)
Hash identifier:          Xq8Qgjr5o/Mtr7TlvW3e5utgwenVWXRd6vx6+ISmhK8=
Subject key identifier:   CB:BC:F7:24:3A:7A:F5:86:31:E4:92:F8:EE:79:A3:21:27:BD:F5:8C
Certificate issuer:       /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial:       019EAC43E6F6689503763922ADB149E7BB57
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/y7z3JDp69YYx5JL47nmjISe99Yw.asa
Signing time:             Tue 09 Jun 2026 12:03:11 +0000
ASPA not before:          Tue 09 Jun 2026 12:03:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216318
Providers:                AS: 200233
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ac:43:e6:f6:68:95:03:76:39:22:ad:b1:49:e7:bb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
        Validity
            Not Before: Jun  9 12:03:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cbbcf7243a7af58631e492f8ee79a32127bdf58c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:92:38:58:b5:30:62:62:4b:ec:0e:5d:5f:40:
                    14:c8:16:38:6b:28:d8:33:09:11:11:8a:21:95:72:
                    f9:24:80:10:89:ca:12:9b:13:49:34:44:e0:84:00:
                    33:f9:2d:d9:6d:85:ef:2b:92:3a:7a:71:b3:8c:df:
                    d0:80:a1:6c:bc:f8:1e:20:a3:c7:2c:b1:8e:09:0f:
                    a9:07:a0:94:00:a3:70:72:e5:c3:83:02:c4:89:32:
                    0f:90:dc:e8:53:ba:d5:b0:14:db:7f:ac:3e:5a:a6:
                    d4:cc:dc:4a:4e:2e:dc:d3:c5:21:91:3c:b2:c5:1d:
                    14:c4:c4:e1:28:13:54:62:b1:e9:91:18:ed:10:61:
                    2c:4c:72:f2:a2:80:c5:8c:d8:d9:b4:c4:a0:36:f9:
                    2e:28:57:17:8e:71:b1:cd:ac:0d:ac:8f:67:b3:e9:
                    7d:5f:2b:a5:27:9b:22:a2:e0:55:6e:28:e5:9f:5e:
                    93:79:58:25:ea:e5:36:ef:aa:33:2a:7e:e8:cf:7d:
                    6d:c2:0b:c7:a5:e4:e9:5b:60:24:36:6a:85:b8:ed:
                    f4:24:6e:6f:70:0a:80:2b:06:5b:0f:16:07:54:a8:
                    fa:04:c3:33:3a:a2:3f:86:da:73:4f:64:78:d0:17:
                    10:88:fe:c6:f1:a3:4a:fc:42:fe:42:88:52:2d:6b:
                    3c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BC:F7:24:3A:7A:F5:86:31:E4:92:F8:EE:79:A3:21:27:BD:F5:8C
            X509v3 Authority Key Identifier:
                keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/y7z3JDp69YYx5JL47nmjISe99Yw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216318

    Signature Algorithm: sha256WithRSAEncryption
         44:b6:47:9e:e9:d8:58:3c:ba:1a:59:30:5b:fc:b0:b9:ee:3f:
         4f:bd:49:18:31:57:62:ad:e3:df:39:31:b3:d4:22:2b:97:f7:
         4b:61:b7:d7:06:93:1e:30:aa:49:ad:79:36:ac:08:21:13:15:
         0a:99:c9:33:48:e3:6d:48:20:53:77:c1:21:74:d1:7d:fa:d7:
         82:cd:eb:5a:38:47:56:4d:38:7e:f5:c8:59:ac:70:0e:b5:18:
         b1:6b:f4:86:df:89:8a:0d:94:00:64:aa:0d:9e:b2:2d:28:1c:
         ca:e0:d4:c0:67:42:ea:1d:d5:e2:25:a1:a9:5e:cc:a9:b6:ba:
         3b:39:68:18:a2:63:d8:a9:ae:7d:42:56:88:28:52:38:bf:08:
         ea:6f:67:61:42:67:36:1e:c4:4b:75:4f:f7:cb:a4:7d:63:6a:
         e2:01:ee:89:f3:47:99:e7:18:7c:a5:79:70:53:d4:c3:e3:5b:
         93:eb:d7:80:68:71:fc:be:98:ef:54:54:d8:b3:ae:f1:e1:ff:
         d3:86:00:ae:07:9b:1b:45:1c:10:2e:10:85:3c:9a:99:e5:b4:
         aa:9a:bb:3a:8b:3f:af:02:62:84:41:f5:96:20:75:01:9b:5a:
         e1:00:eb:68:8a:a4:4b:49:d4:15:25:74:79:0d:94:f8:80:ce:
         86:a6:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:43 2026 by rpki-client