Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/d8grn2wXk9vmfr4CPR5GIGOguek.asa
File:                     d8grn2wXk9vmfr4CPR5GIGOguek.asa (raw, json)
Hash identifier:          GujxxEhlnqGN/956zXiB0ryPh7UxwhtfLKl2I7TE640=
Subject key identifier:   77:C8:2B:9F:6C:17:93:DB:E6:7E:BE:02:3D:1E:46:20:63:A0:B9:E9
Certificate issuer:       /CN=addd146f6d6ff6740845ebca9cdfe40c7155883d
Certificate serial:       019E8D9850BC94D4E4AE35C3818F68F71998
Authority key identifier: AD:DD:14:6F:6D:6F:F6:74:08:45:EB:CA:9C:DF:E4:0C:71:55:88:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/d8grn2wXk9vmfr4CPR5GIGOguek.asa
Signing time:             Wed 03 Jun 2026 13:07:09 +0000
ASPA not before:          Wed 03 Jun 2026 13:07:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            204614
Providers:                AS: 3269
                          AS: 28716
                          AS: 198102
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8d:98:50:bc:94:d4:e4:ae:35:c3:81:8f:68:f7:19:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=addd146f6d6ff6740845ebca9cdfe40c7155883d
        Validity
            Not Before: Jun  3 13:07:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=77c82b9f6c1793dbe67ebe023d1e462063a0b9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:6f:01:d0:85:7b:53:a6:fd:97:bd:7d:69:
                    e5:14:aa:b1:74:63:96:03:09:d2:7e:8f:0b:83:5c:
                    fb:62:64:35:34:6d:c4:93:9f:83:3c:bd:8a:bd:3b:
                    c7:51:71:b2:b8:a7:40:a4:a2:48:5c:24:38:75:98:
                    d5:87:fa:d6:a7:61:ba:8b:a9:99:0c:5f:96:c1:b3:
                    ed:89:ba:73:03:98:2b:d5:59:28:28:71:26:cd:9b:
                    77:5a:0c:19:a5:ca:d6:5d:88:6b:19:ad:d6:54:03:
                    38:ac:e6:4f:9d:a4:88:12:30:21:7a:af:07:9c:72:
                    b0:41:40:59:d7:53:da:84:c4:f0:04:9a:ff:72:e5:
                    eb:6b:49:a2:3c:ca:99:c8:ff:72:84:f8:ee:46:f3:
                    41:7f:9e:87:54:d1:60:d1:45:9b:73:4b:7b:b2:24:
                    51:ec:56:72:69:49:d9:7c:b2:42:37:0a:69:d1:dc:
                    01:32:f8:ff:5d:a6:e0:6d:ab:cd:bf:d4:19:99:1f:
                    e5:88:94:a4:d1:80:bb:b8:65:d5:21:78:e3:6e:bb:
                    24:c7:83:f6:7c:d8:50:0a:5a:c7:20:83:ad:57:51:
                    cb:ca:d3:bf:ee:c4:43:61:ac:45:2c:81:f9:58:66:
                    77:64:da:4d:77:4b:34:04:b8:d5:36:6f:5d:ef:cd:
                    9f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C8:2B:9F:6C:17:93:DB:E6:7E:BE:02:3D:1E:46:20:63:A0:B9:E9
            X509v3 Authority Key Identifier:
                keyid:AD:DD:14:6F:6D:6F:F6:74:08:45:EB:CA:9C:DF:E4:0C:71:55:88:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0Ub21v9nQIRevKnN_kDHFViD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/d8grn2wXk9vmfr4CPR5GIGOguek.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/de7655-867f-403e-b75e-13e86113d75d/1/rd0Ub21v9nQIRevKnN_kDHFViD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204614

    Signature Algorithm: sha256WithRSAEncryption
         2a:94:40:fb:76:4c:c2:54:ea:a5:ca:14:36:05:0f:1f:c1:0d:
         42:e9:da:9c:08:5b:19:ef:d6:c2:f8:23:99:5c:fa:2a:17:fa:
         1c:1c:17:50:dc:02:47:b5:5a:c1:fd:32:33:44:8f:f8:76:e8:
         d5:39:ea:35:0a:46:59:b6:ea:f2:42:aa:5e:21:50:3b:bf:f2:
         c3:b8:51:17:90:22:14:e6:a1:5d:fa:04:4b:ab:49:93:4a:f2:
         46:70:2e:5c:73:81:85:3f:57:d2:02:96:3d:40:85:e1:38:8c:
         be:e1:9f:a9:2b:db:ed:d0:6b:c6:a8:85:ce:43:e9:21:1c:85:
         6f:bd:84:aa:28:ba:0f:67:3d:a1:33:b4:d7:b5:02:48:b2:cb:
         1f:62:71:04:d0:01:16:42:69:64:1c:a4:9f:76:38:df:f8:64:
         4f:60:d5:a5:68:25:79:3a:58:41:97:ce:ff:e6:4c:e6:37:9a:
         4a:32:8b:37:94:fe:46:48:6f:be:61:66:4d:b2:eb:53:f1:d9:
         dc:5c:35:1a:cb:e8:b0:3b:db:de:8b:06:b8:2e:01:ef:ec:8e:
         08:e0:31:4b:6a:f5:e0:ba:8c:a3:54:c6:54:b8:58:98:18:a4:
         86:7d:40:8c:41:be:5f:d6:4c:16:cb:3b:21:e6:9d:bb:2e:ac:
         4a:c3:91:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:08 2026 by rpki-client