Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/iYvuIq8ZKE6IPDv4GBtfch8s7S4.asa
File:                     iYvuIq8ZKE6IPDv4GBtfch8s7S4.asa (raw, json)
Hash identifier:          CoFBVX/R0Ekp3rqLqqIt63HCR6x0nL/mxcevmbkjRKM=
Subject key identifier:   89:8B:EE:22:AF:19:28:4E:88:3C:3B:F8:18:1B:5F:72:1F:2C:ED:2E
Certificate issuer:       /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial:       019D8AB572F008357CA3720227CC367CA061
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/iYvuIq8ZKE6IPDv4GBtfch8s7S4.asa
Signing time:             Tue 14 Apr 2026 06:37:20 +0000
ASPA not before:          Tue 14 Apr 2026 06:37:20 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            44051
Providers:                AS: 174
                          AS: 6939
                          AS: 44066
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:8a:b5:72:f0:08:35:7c:a3:72:02:27:cc:36:7c:a0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
        Validity
            Not Before: Apr 14 06:37:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=898bee22af19284e883c3bf8181b5f721f2ced2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:2b:7b:e1:7c:cc:20:a1:68:f8:fe:5c:ea:
                    53:06:28:7d:d4:85:16:a8:e6:2f:b5:1f:37:c2:9f:
                    83:bc:67:44:d3:cb:da:2b:74:45:5c:d1:65:55:19:
                    7d:da:56:a5:0e:48:d6:89:78:56:a2:db:03:b8:0e:
                    ac:57:ef:43:14:68:bb:c5:b2:cd:e1:de:9b:dd:a4:
                    64:77:d7:e5:f4:73:c4:25:be:9e:20:c5:af:5e:64:
                    e9:91:6d:5d:59:d8:c0:c3:ee:e7:ed:f0:ae:dd:0a:
                    1f:74:27:49:fe:6d:2a:41:c0:13:7e:48:df:95:d8:
                    46:76:3e:44:f8:65:c9:a1:f8:c2:10:10:da:d6:46:
                    14:90:f9:01:09:fe:25:e7:bc:01:2a:d6:d7:22:23:
                    64:f3:6c:f5:2d:7b:98:2a:3b:1a:1b:dc:32:69:73:
                    a9:b5:0f:4d:20:67:26:34:dd:de:89:8e:a5:ed:9f:
                    e7:56:35:a5:8e:d3:35:88:3f:9e:f6:17:32:a8:eb:
                    4f:11:08:5c:33:a2:59:cd:10:9e:35:1f:8f:49:c0:
                    fa:3b:3c:6d:f9:03:ed:50:67:b2:cf:7a:27:82:64:
                    13:7c:a6:35:ce:0d:e8:d7:18:ea:9d:4e:7f:2f:a3:
                    02:b6:d3:5d:68:36:45:bb:3a:91:ed:81:c5:b3:59:
                    f3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8B:EE:22:AF:19:28:4E:88:3C:3B:F8:18:1B:5F:72:1F:2C:ED:2E
            X509v3 Authority Key Identifier:
                keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/iYvuIq8ZKE6IPDv4GBtfch8s7S4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44051

    Signature Algorithm: sha256WithRSAEncryption
         45:47:dc:4e:0e:24:92:cf:96:ff:9a:3b:67:3d:49:b2:1e:10:
         1e:f9:f2:6b:f5:c2:37:f3:8b:c3:45:6f:41:97:6d:11:c0:16:
         46:b0:57:ac:e6:74:8d:f4:2c:2c:c8:d8:b7:f7:20:a8:0e:eb:
         74:40:fc:1b:6a:d0:ef:8b:2b:71:99:31:47:aa:ef:50:2f:a1:
         d1:a5:8c:a6:0c:a2:92:cd:3c:7a:7c:cc:fe:a5:9b:11:5a:aa:
         10:8c:07:14:74:eb:d4:74:2e:07:55:87:e2:0e:96:cc:ee:f6:
         da:c5:45:60:8f:1b:7c:53:c8:78:53:ac:e1:12:fb:79:6a:1d:
         f6:55:c0:4c:b5:b4:29:ad:cb:a2:54:cc:21:68:c9:84:53:3b:
         a3:70:0f:fc:49:8f:8d:aa:f6:f5:aa:e5:5c:59:43:d9:78:09:
         fc:f0:c6:b4:fd:98:6a:3a:a7:f8:11:4b:43:77:03:3f:a9:1f:
         9a:8f:f0:56:47:e5:ca:66:03:a5:c3:55:4b:10:1d:17:64:bb:
         9f:6d:17:39:8f:a2:6b:f7:3f:8a:4d:4c:5f:c5:62:83:09:5c:
         82:f1:11:ff:0b:3d:bf:92:5e:0a:b1:b1:d5:39:a9:80:5f:3c:
         6c:f4:50:4f:36:91:70:2e:97:cf:00:26:5e:82:f1:0c:91:de:
         99:10:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:20:33 2026 by rpki-client