Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/w8zh1viLCameZBKyxiERXyJUv6g.asa
File:                     w8zh1viLCameZBKyxiERXyJUv6g.asa (raw, json)
Hash identifier:          +trZ6/UyyOJ0HhjRujxJ5kbX2C1OMx0w/MD/s7o7PO4=
Subject key identifier:   C3:CC:E1:D6:F8:8B:09:A9:9E:64:12:B2:C6:21:11:5F:22:54:BF:A8
Certificate issuer:       /CN=67d6cd6477f846bf170508ff1ac38994877d3064
Certificate serial:       019EC5829C3A6A742CDAB999AFED1BF1683D
Authority key identifier: 67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/w8zh1viLCameZBKyxiERXyJUv6g.asa
Signing time:             Sun 14 Jun 2026 09:42:11 +0000
ASPA not before:          Sun 14 Jun 2026 09:42:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49008
Providers:                AS: 24592
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c5:82:9c:3a:6a:74:2c:da:b9:99:af:ed:1b:f1:68:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d6cd6477f846bf170508ff1ac38994877d3064
        Validity
            Not Before: Jun 14 09:42:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3cce1d6f88b09a99e6412b2c621115f2254bfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a3:b9:af:99:b0:00:de:db:3e:0f:48:ec:04:
                    1e:4f:47:f0:d0:a0:07:c8:24:18:a6:23:df:64:7d:
                    d1:f9:7e:25:66:88:90:75:92:fc:03:db:2a:4f:57:
                    69:0e:7c:0f:af:f2:ac:a2:a8:63:70:5f:98:32:6d:
                    6d:ac:b1:ec:8a:4a:69:ce:ef:82:5a:7b:90:47:c0:
                    4b:3a:71:e5:ac:1e:5b:cf:fd:cc:06:ef:b3:77:49:
                    ba:79:71:ae:75:13:3d:f8:66:e7:81:aa:20:7f:2c:
                    52:ca:39:39:51:cd:3e:60:4a:9b:0a:dc:ed:82:dd:
                    da:38:8f:2c:8f:09:ab:3e:c2:85:79:b0:06:e0:73:
                    85:e7:de:77:b7:0a:af:37:09:a5:a8:f0:c8:fd:fd:
                    59:f6:6c:75:54:89:09:d8:bc:1f:c9:fa:74:67:c9:
                    76:8c:f2:98:94:7c:df:ba:5f:74:50:96:9d:b8:12:
                    e5:3f:6b:d0:7e:12:b2:cb:93:96:50:87:0e:a5:40:
                    4f:4e:f8:4b:06:c3:52:56:0d:98:30:bb:02:f2:d0:
                    ea:5a:2e:a0:99:58:38:82:66:ea:0d:aa:18:3a:0b:
                    fb:49:40:2d:5d:1c:3d:ea:4e:40:7a:87:78:00:ad:
                    67:67:dc:bd:05:e7:ae:68:7b:b1:eb:3b:da:b4:3c:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CC:E1:D6:F8:8B:09:A9:9E:64:12:B2:C6:21:11:5F:22:54:BF:A8
            X509v3 Authority Key Identifier:
                keyid:67:D6:CD:64:77:F8:46:BF:17:05:08:FF:1A:C3:89:94:87:7D:30:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/w8zh1viLCameZBKyxiERXyJUv6g.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d25885-a96b-4725-9236-db259f50d604/1/Z9bNZHf4Rr8XBQj_GsOJlId9MGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49008

    Signature Algorithm: sha256WithRSAEncryption
         96:41:d7:0a:65:b1:89:b7:4e:fe:e9:54:d4:20:0f:a0:e9:a0:
         88:0b:9d:a0:4f:7f:b6:06:26:fa:ee:fc:fe:79:bf:3b:e6:fb:
         52:69:02:42:1a:0d:6d:10:be:8b:73:43:a9:43:7e:48:a8:c3:
         43:9a:f4:42:83:db:6b:10:c6:8a:08:c1:42:bd:5b:1d:2a:10:
         7d:9e:d6:af:3d:96:3e:3d:28:7c:05:a0:ff:a6:0e:d4:7e:8d:
         91:3c:cb:47:ee:a8:18:a5:15:98:4b:a2:4c:11:32:29:e7:66:
         8f:ed:21:0d:ce:be:f9:68:e4:f9:49:aa:4c:d1:eb:c9:24:aa:
         57:b3:c0:95:31:7e:88:ab:73:3e:e3:50:2c:57:f7:45:31:22:
         5e:3a:e2:b9:8f:95:e1:b4:2a:96:ce:58:56:13:5a:2f:07:dd:
         bb:8c:ff:a6:da:9d:88:7f:1a:54:64:08:53:ad:38:ec:51:ff:
         a3:f4:5b:18:1e:7a:ca:f8:1c:eb:3d:3b:6d:0a:25:e0:7f:53:
         78:9c:aa:bb:8b:34:37:93:e6:8f:58:f6:d2:71:f6:6d:79:8d:
         3e:a2:6c:86:9f:67:0b:99:45:51:d8:81:fd:f8:ce:7c:d8:d6:
         94:03:09:ba:f7:03:4d:14:10:ec:fd:61:ae:01:26:d2:ab:0f:
         73:71:58:35
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ7Fgpw6anQs2rmZr+0b8Wg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDZjZDY0NzdmODQ2YmYxNzA1MDhmZjFhYzM4OTk0ODc3
ZDMwNjQwHhcNMjYwNjE0MDk0MjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2NjZTFkNmY4OGIwOWE5OWU2NDEyYjJjNjIxMTE1ZjIyNTRiZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aO5r5mwAN7bPg9I7AQeT0fw0KAH
yCQYpiPfZH3R+X4lZoiQdZL8A9sqT1dpDnwPr/KsoqhjcF+YMm1trLHsikppzu+C
WnuQR8BLOnHlrB5bz/3MBu+zd0m6eXGudRM9+GbngaogfyxSyjk5Uc0+YEqbCtzt
gt3aOI8sjwmrPsKFebAG4HOF5953twqvNwmlqPDI/f1Z9mx1VIkJ2Lwfyfp0Z8l2
jPKYlHzful90UJaduBLlP2vQfhKyy5OWUIcOpUBPTvhLBsNSVg2YMLsC8tDqWi6g
mVg4gmbqDaoYOgv7SUAtXRw96k5Aeod4AK1nZ9y9BeeuaHux6zvatDzZGQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFMPM4db4iwmpnmQSssYhEV8iVL+oMB8GA1UdIwQY
MBaAFGfWzWR3+Ea/FwUI/xrDiZSHfTBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjliTlpIZjRScjhYQlFqX0dzT0psSWQ5TUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kMjU4ODUtYTk2Yi00NzI1LTkyMzYt
ZGIyNTlmNTBkNjA0LzEvdzh6aDF2aUxDYW1lWkJLeXhpRVJYeUpVdjZnLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kMjU4ODUtYTk2Yi00NzI1LTkyMzYtZGIyNTlmNTBkNjA0
LzEvWjliTlpIZjRScjhYQlFqX0dzT0psSWQ5TUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC/cDANBgkqhkiG
9w0BAQsFAAOCAQEAlkHXCmWxibdO/ulU1CAPoOmgiAudoE9/tgYm+u78/nm/O+b7
UmkCQhoNbRC+i3NDqUN+SKjDQ5r0QoPbaxDGigjBQr1bHSoQfZ7Wrz2WPj0ofAWg
/6YO1H6NkTzLR+6oGKUVmEuiTBEyKedmj+0hDc6++Wjk+UmqTNHrySSqV7PAlTF+
iKtzPuNQLFf3RTEiXjriuY+V4bQqls5YVhNaLwfdu4z/ptqdiH8aVGQIU6047FH/
o/RbGB56yvgc6z07bQol4H9TeJyqu4s0N5Pmj1j20nH2bXmNPqJshp9nC5lFUdiB
/fjOfNjWlAMJuvcDTRQQ7P1hrgEm0qsPc3FYNQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:34:28 2026 by rpki-client