Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/pXIatNin6QHJLrQnhlcYZmsht6o.asa
File:                     pXIatNin6QHJLrQnhlcYZmsht6o.asa (raw, json)
Hash identifier:          zdaO2sxgEtx1cd4FeDZbb6TAjyKTv4YPtPHIQtcDI0M=
Subject key identifier:   A5:72:1A:B4:D8:A7:E9:01:C9:2E:B4:27:86:57:18:66:6B:21:B7:AA
Certificate issuer:       /CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
Certificate serial:       019CCA46DA355FEFE8260654940C5C51830D
Authority key identifier: 8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/pXIatNin6QHJLrQnhlcYZmsht6o.asa
Signing time:             Sat 07 Mar 2026 21:49:26 +0000
ASPA not before:          Sat 07 Mar 2026 21:49:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60079
Providers:                AS: 3170
                          AS: 44684
                          AS: 49544
                          AS: 137409
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ca:46:da:35:5f:ef:e8:26:06:54:94:0c:5c:51:83:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b158127e987fe03711b7a97d4ca9dfa0006528c
        Validity
            Not Before: Mar  7 21:49:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a5721ab4d8a7e901c92eb427865718666b21b7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:15:df:3b:e2:23:b5:8d:48:3c:f0:5b:e8:
                    bc:01:40:76:b0:88:92:57:31:b1:af:c3:88:1b:f7:
                    91:3e:35:1e:74:29:a4:f2:35:98:fb:73:d3:ad:2a:
                    e6:00:b7:3d:a6:af:2c:24:30:25:02:5e:e9:20:02:
                    7c:04:55:9f:8d:ab:02:51:69:58:ce:df:c1:79:0d:
                    96:47:f7:91:db:5c:28:ec:8d:52:47:fe:b3:ad:1c:
                    00:cd:bc:70:e9:79:a6:50:2e:b6:f7:7d:7b:98:b7:
                    d6:b4:6b:78:f5:05:57:6f:5b:b8:66:1a:b3:be:b2:
                    b3:a6:50:75:ad:76:2f:5d:6f:75:f1:d5:0a:e7:13:
                    3e:60:ec:06:ed:5e:5d:41:9a:9e:65:8a:c1:a6:fa:
                    9e:4c:71:0d:2b:b4:84:eb:df:ce:b2:25:7d:c8:01:
                    40:7c:ae:d6:3a:0b:0d:5a:5d:ba:2b:c6:4f:69:c6:
                    2a:f3:62:b0:7a:23:a7:66:0b:7b:03:16:a0:a1:cc:
                    17:5b:c9:a6:99:c5:1d:78:fa:33:ec:58:45:91:dd:
                    69:e1:c3:67:87:d5:2b:3a:69:c6:04:c0:6f:c8:68:
                    8e:a4:b3:2e:74:8d:14:ee:f8:99:6f:06:09:ee:3b:
                    0b:76:4b:55:a7:6e:07:ba:19:6e:e7:20:71:c4:84:
                    e3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:72:1A:B4:D8:A7:E9:01:C9:2E:B4:27:86:57:18:66:6B:21:B7:AA
            X509v3 Authority Key Identifier:
                keyid:8B:15:81:27:E9:87:FE:03:71:1B:7A:97:D4:CA:9D:FA:00:06:52:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/pXIatNin6QHJLrQnhlcYZmsht6o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b46f93-b86f-462c-8d44-8b5ef68b41bd/1/ixWBJ-mH_gNxG3qX1Mqd-gAGUow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60079

    Signature Algorithm: sha256WithRSAEncryption
         7a:1d:2b:11:d6:82:cd:99:64:66:0b:bd:76:41:32:fc:a0:0a:
         c6:80:75:9b:fb:39:1d:de:4c:73:d1:98:fa:ca:75:9a:14:19:
         bb:d4:a1:90:57:04:6f:04:c3:ae:20:36:e2:7c:67:33:99:85:
         65:df:14:3e:ef:b5:3b:11:ed:0b:d4:e9:40:a1:b0:aa:82:b8:
         ad:2a:50:2e:08:1e:c3:c3:1e:69:9c:05:24:82:2f:1c:75:31:
         e3:24:68:c9:9c:ea:4c:0e:51:d5:ba:9b:31:98:0a:c2:d7:74:
         3f:7e:3b:84:4a:80:84:a9:7e:b9:8c:15:4f:8c:03:55:fe:bb:
         25:36:30:24:36:c5:f4:37:af:12:0c:5a:39:2c:dc:12:34:38:
         78:7c:7f:62:22:1b:9a:ae:4c:18:98:a0:b8:15:da:6e:bd:ad:
         08:c6:98:d7:56:e2:e5:b0:6b:77:e0:d9:e6:6c:8c:cb:ea:1e:
         61:ae:33:e4:70:03:f0:25:13:f7:a2:1e:cd:86:8b:fe:28:b3:
         55:ff:2f:8d:20:0f:57:b8:0e:9b:9e:b9:cb:41:46:cb:62:49:
         24:e2:5c:38:f9:73:3d:26:81:79:d3:16:ce:a2:53:a0:78:5f:
         7d:e7:f6:ce:d7:53:7b:7a:67:dd:ad:05:82:6e:ee:d6:72:de:
         c6:d7:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:44 2026 by rpki-client