Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/i0sj2OlRMgevoHUz4ryR_Oma4I4.asa
File:                     i0sj2OlRMgevoHUz4ryR_Oma4I4.asa (raw, json)
Hash identifier:          adtzyb9u4Fbn/ZPKqrDMufHnnCkRcWugW8Vy0F2nkqI=
Subject key identifier:   8B:4B:23:D8:E9:51:32:07:AF:A0:75:33:E2:BC:91:FC:E9:9A:E0:8E
Certificate issuer:       /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial:       019DB67F4427771101482A16A7F3E9E59CCB
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/i0sj2OlRMgevoHUz4ryR_Oma4I4.asa
Signing time:             Wed 22 Apr 2026 18:41:26 +0000
ASPA not before:          Wed 22 Apr 2026 18:41:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            213842
Providers:                AS: 20562
                          AS: 24785
                          AS: 35133
                          AS: 57866
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 06:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b6:7f:44:27:77:11:01:48:2a:16:a7:f3:e9:e5:9c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
        Validity
            Not Before: Apr 22 18:41:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b4b23d8e9513207afa07533e2bc91fce99ae08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:47:d9:06:9c:a7:f2:58:72:01:41:fa:6a:a0:
                    61:aa:05:1b:6f:7c:e7:6d:02:34:ac:a4:91:ca:83:
                    fb:03:b0:c5:e3:ef:64:84:a6:ce:c9:1b:07:dd:2e:
                    5e:b4:41:5c:80:23:e6:0f:4b:b0:b1:fa:4b:6d:9f:
                    46:b7:6b:3a:df:33:14:ba:7f:dd:87:02:3b:b8:4c:
                    52:a1:f7:41:1c:4f:b3:44:5f:5c:92:f9:2e:6c:8d:
                    a7:e3:fc:1a:cd:2c:cf:1e:3f:bc:fb:60:52:d0:3b:
                    df:c4:f0:0d:70:1c:38:ca:9d:b2:37:e4:65:51:1f:
                    81:66:0b:07:3a:65:4c:16:a6:8d:73:50:30:a7:12:
                    ba:8c:dd:5a:f8:61:e7:70:28:a4:a4:7c:14:f4:1e:
                    c2:ec:d8:17:06:d0:1d:ec:23:85:16:35:1d:25:4a:
                    3c:3f:01:d2:38:21:6a:17:5e:dc:5f:fd:46:bf:63:
                    44:a1:85:10:2b:fe:be:8c:8a:18:6e:8f:74:44:45:
                    06:cc:d9:6d:e2:4d:e8:37:43:cd:55:45:85:7f:52:
                    77:c7:6f:5d:4d:f9:46:55:3d:68:ae:c9:55:96:70:
                    05:6b:3b:b0:ea:36:60:a8:37:05:32:34:c0:6f:36:
                    4c:13:98:1e:27:9d:1f:3d:35:ff:ea:fb:0e:f9:1a:
                    84:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4B:23:D8:E9:51:32:07:AF:A0:75:33:E2:BC:91:FC:E9:9A:E0:8E
            X509v3 Authority Key Identifier:
                keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/i0sj2OlRMgevoHUz4ryR_Oma4I4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213842

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:21:20:32:8a:5a:76:41:30:30:36:2e:40:ce:ed:8b:38:
         de:a5:72:3f:68:e5:e9:b7:3a:ac:ce:2b:4a:ec:7f:c5:d1:51:
         7d:db:66:a9:e0:7b:37:3a:ce:6c:47:f4:76:fb:e0:65:d4:23:
         c2:88:ec:cf:c3:d7:78:77:f5:3e:17:86:27:43:1b:b1:38:44:
         3c:1d:d7:0a:60:42:a0:fa:aa:3b:16:ea:77:1e:56:5a:af:c9:
         2c:4a:fd:89:6f:96:89:0c:de:b5:65:84:ba:06:e5:d8:3b:37:
         f9:ea:70:8d:f8:00:2a:11:f4:aa:46:b5:39:02:00:c8:81:29:
         1f:ca:50:24:73:df:64:09:20:42:17:60:2d:be:bd:57:13:36:
         53:30:15:5e:f2:b4:2f:66:c4:24:2a:bd:5b:c6:4a:ac:f2:f6:
         46:e8:23:5b:d2:e5:bc:33:7c:7e:56:2f:c6:46:44:80:ed:2b:
         1c:cc:aa:22:f5:76:c9:12:85:3e:e4:28:9f:61:2e:63:80:1e:
         b0:7c:d9:98:8c:fd:a4:11:c1:41:80:44:40:b0:2d:33:50:c4:
         61:5f:62:01:ef:da:59:b9:35:64:d2:e5:4a:a8:3b:e0:fc:ae:
         1e:dc:35:a2:ca:d9:f5:50:1a:44:e4:42:55:34:9a:fd:a7:7f:
         11:99:04:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:41 2026 by rpki-client