Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/uzurr2xmZJqK_nXHAqCc38VmZP4.asa
File:                     uzurr2xmZJqK_nXHAqCc38VmZP4.asa (raw, json)
Hash identifier:          CQMd8ydPQYMvDSq1KX9EIOXQQgehhV3R64gz2tI74b8=
Subject key identifier:   BB:3B:AB:AF:6C:66:64:9A:8A:FE:75:C7:02:A0:9C:DF:C5:66:64:FE
Certificate issuer:       /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial:       019D47CBF8A7F31FF69A4D1260CB0DEE7C1B
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/uzurr2xmZJqK_nXHAqCc38VmZP4.asa
Signing time:             Wed 01 Apr 2026 06:47:22 +0000
ASPA not before:          Wed 01 Apr 2026 06:47:22 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48040
Providers:                AS: 42708
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:47:cb:f8:a7:f3:1f:f6:9a:4d:12:60:cb:0d:ee:7c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
        Validity
            Not Before: Apr  1 06:47:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb3babaf6c66649a8afe75c702a09cdfc56664fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:33:7d:c8:5c:d2:f9:40:7b:5e:79:29:b8:
                    97:3b:c0:90:76:a4:ff:4b:e2:0a:c1:39:f8:b4:61:
                    55:2e:fd:d5:6f:2e:5b:08:9c:6a:8c:d6:94:91:d5:
                    87:f1:34:f1:81:fa:08:94:d7:4a:5e:a9:c0:b4:eb:
                    97:6c:69:43:ca:ba:d4:60:b2:f5:07:33:fd:d4:61:
                    79:53:28:3d:64:1a:d7:26:20:0d:fd:3b:56:bb:77:
                    d1:20:68:db:5e:f3:e3:c9:e3:c2:ca:3d:8c:b8:30:
                    66:f2:4a:28:64:66:59:b9:50:6a:e4:1d:f5:69:83:
                    be:11:3e:62:c1:2d:af:b7:80:3a:93:df:be:26:cb:
                    9b:d3:d7:b1:4f:a2:7a:d2:cd:fb:d3:2f:81:ab:bc:
                    50:2c:9a:e1:67:fc:af:b5:29:49:c2:cf:87:2a:58:
                    28:ee:82:8d:92:83:53:1b:ac:bb:71:30:3c:0d:f7:
                    17:59:c4:d3:5e:ed:51:b9:ff:01:98:00:6a:2a:71:
                    36:b9:4c:9b:30:3f:00:24:31:db:84:e3:1b:6f:cc:
                    93:86:41:95:b8:09:ad:62:cc:ed:63:96:3e:7b:41:
                    f3:f9:c7:6d:28:bb:9c:6b:0e:6f:cd:17:e4:29:85:
                    b0:b8:18:c6:c2:1b:5b:42:7c:df:c9:62:4b:54:c5:
                    b3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3B:AB:AF:6C:66:64:9A:8A:FE:75:C7:02:A0:9C:DF:C5:66:64:FE
            X509v3 Authority Key Identifier:
                keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/uzurr2xmZJqK_nXHAqCc38VmZP4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48040

    Signature Algorithm: sha256WithRSAEncryption
         2b:18:c8:5b:65:85:03:61:d9:62:01:58:d1:ca:9a:e5:90:b9:
         fb:d6:0b:d9:b9:09:af:23:96:22:07:b4:74:00:77:ac:22:79:
         a0:7b:15:14:6b:86:66:a2:7e:85:a3:3c:d7:db:f1:21:26:fa:
         07:02:ee:41:2d:18:2d:d5:45:d5:0f:f7:ec:bf:0d:32:aa:e6:
         f3:e9:b0:74:31:72:15:24:ce:99:83:80:15:1e:df:1a:c7:23:
         bf:cc:e5:00:71:78:cd:00:3b:a9:bf:8e:ce:a3:6c:56:66:45:
         43:5e:67:db:3c:60:df:9e:88:4b:a8:09:a0:cd:6d:ce:11:47:
         f9:45:78:f6:ab:e8:58:b5:b8:60:94:01:37:42:01:ca:bb:0f:
         af:cf:d2:87:22:78:3f:d1:df:9d:f6:f1:37:06:8a:2f:96:19:
         62:1b:16:c4:01:83:80:0b:1d:80:28:ff:e2:7e:b1:cf:50:81:
         80:69:34:30:af:64:23:56:04:92:cf:e9:99:49:c9:1b:46:33:
         6c:17:d6:d1:62:91:6c:88:cd:85:55:30:55:e7:73:7f:5c:ce:
         2e:d1:64:74:39:42:d1:40:6a:39:0a:72:02:7b:30:f2:91:72:
         bd:5c:90:9c:4a:f5:25:52:83:f1:72:ab:80:b5:c4:4e:e0:52:
         6a:b0:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:36 2026 by rpki-client