Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa
File:                     iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa (raw, json)
Hash identifier:          v6oTaVMB32ysT0WuXZ0EG1XMy1UYjDtrDIPZoAi/1TQ=
Subject key identifier:   88:1E:3E:2E:FE:18:E6:97:DE:BF:4E:B0:81:45:13:7F:73:24:BA:A1
Certificate issuer:       /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial:       019D6B8F7A407693DD72696B959603D24591
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa
Signing time:             Wed 08 Apr 2026 05:27:37 +0000
ASPA not before:          Wed 08 Apr 2026 05:27:37 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198473
Providers:                AS: 3292
                          AS: 6939
                          AS: 31027
                          AS: 39642
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:6b:8f:7a:40:76:93:dd:72:69:6b:95:96:03:d2:45:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
        Validity
            Not Before: Apr  8 05:27:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=881e3e2efe18e697debf4eb08145137f7324baa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:f1:c6:dd:17:52:72:33:85:04:d5:e0:1e:
                    6b:70:f6:90:56:6f:df:e1:45:00:9d:14:e4:1c:0f:
                    50:73:c8:21:5f:9c:77:41:4d:44:ef:73:49:cd:8b:
                    c7:af:31:ef:ea:82:00:bf:23:e8:29:1f:5a:50:b7:
                    c0:de:12:b4:42:0a:3c:3e:64:1a:e6:ae:cc:04:10:
                    6f:9f:a5:e9:33:59:2f:6f:d8:7a:1c:34:3a:43:9d:
                    7d:b7:76:7d:c9:39:0d:05:eb:77:54:57:b6:a0:4f:
                    4d:e3:02:aa:4f:ba:c6:ac:c4:23:16:45:20:a2:bd:
                    30:80:dd:7e:c3:7c:b3:92:b2:e0:4b:74:d7:5b:58:
                    55:c5:88:1b:fa:b8:7c:9c:19:0f:2e:85:30:2a:ea:
                    10:8e:25:a8:b8:24:7e:a1:31:7c:f2:a7:c9:23:ca:
                    cc:1b:8b:a4:94:f1:a2:5e:13:70:ce:5a:9c:09:62:
                    c6:4f:ca:fd:c7:06:79:6f:11:7b:3d:1b:c3:7a:d0:
                    19:6e:c3:82:bc:6a:99:59:1f:2f:2c:a9:12:d7:9e:
                    e1:ac:ad:2c:8c:0d:8e:db:49:66:33:37:11:53:42:
                    9b:79:8f:77:c6:82:6b:38:d8:72:f1:8d:61:aa:f7:
                    12:ad:85:4a:9d:3a:1d:85:25:3b:da:7e:2c:66:f6:
                    f6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1E:3E:2E:FE:18:E6:97:DE:BF:4E:B0:81:45:13:7F:73:24:BA:A1
            X509v3 Authority Key Identifier:
                keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198473

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:c1:c2:5f:10:0c:ba:c5:fd:b0:fd:25:28:6a:a1:9d:c6:
         e4:b5:de:4c:14:c9:c5:c0:c3:e4:ac:26:35:f6:a7:0c:2f:74:
         1f:1b:4e:52:ab:55:9d:0f:af:e3:64:1d:9d:01:b5:de:85:71:
         31:57:8e:6e:fc:bf:9a:3a:a7:4c:34:8d:2b:09:62:32:7d:8b:
         c7:3f:e3:55:b8:af:34:97:62:49:b9:ca:1e:98:1b:41:90:5c:
         3f:44:39:14:d0:4b:4a:f3:ae:ef:17:2e:e9:e5:5b:37:c4:98:
         0d:7c:2a:e4:33:4e:d2:90:ac:cc:e4:bd:10:8d:01:db:96:02:
         51:34:c0:19:47:f3:77:0a:65:e7:e9:a9:be:8e:fd:69:d3:6b:
         a6:00:ac:01:c9:c6:e2:75:32:14:a4:34:7f:de:54:41:3a:c2:
         89:02:d6:c9:88:3f:94:8a:85:1a:07:03:91:4e:5a:ce:97:43:
         7f:01:e2:8f:17:5e:07:e5:85:86:50:cf:de:bb:0f:39:c5:65:
         dd:d2:3a:5b:5c:f2:9d:b4:8b:1b:ad:db:ce:26:98:c3:38:9b:
         60:f2:3f:35:fc:73:09:af:51:dc:13:b2:12:85:9f:4f:05:8a:
         6e:73:af:c5:32:4e:60:63:34:3c:b6:29:f3:bb:e2:8c:c4:84:
         3f:0e:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:24 2026 by rpki-client