Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/JGYsNj9H1c_XLokkyRvioL1Icvs.asa
File:                     JGYsNj9H1c_XLokkyRvioL1Icvs.asa (raw, json)
Hash identifier:          FsSg7M51c+/dkmTYhVW+tHhpAYi4anL4jcOUSvzQsF0=
Subject key identifier:   24:66:2C:36:3F:47:D5:CF:D7:2E:89:24:C9:1B:E2:A0:BD:48:72:FB
Certificate issuer:       /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial:       019CDD5CC73F213B2C35C47BD10F3B11E063
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/JGYsNj9H1c_XLokkyRvioL1Icvs.asa
Signing time:             Wed 11 Mar 2026 14:46:10 +0000
ASPA not before:          Wed 11 Mar 2026 14:46:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            49028
Providers:                AS: 1299
                          AS: 35280
                          AS: 44530
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:dd:5c:c7:3f:21:3b:2c:35:c4:7b:d1:0f:3b:11:e0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
        Validity
            Not Before: Mar 11 14:46:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=24662c363f47d5cfd72e8924c91be2a0bd4872fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:0b:f5:69:6c:72:27:10:3f:2b:47:30:00:
                    af:05:75:0b:ca:91:33:5e:9e:20:cb:8c:fc:ea:34:
                    a5:19:a3:26:d8:8c:95:4c:65:ff:8c:29:01:a1:4f:
                    ff:66:19:a2:e4:b3:69:07:df:eb:49:0f:6a:36:dc:
                    83:cc:62:b6:a1:57:5a:94:1f:9d:fe:7d:2c:7b:fd:
                    f4:21:47:23:1d:9e:ba:ae:1f:0b:47:e1:08:04:ab:
                    f8:50:45:d8:f5:e5:76:e3:7e:07:85:64:4d:ae:1a:
                    97:49:85:c3:f8:7f:17:16:6b:9d:73:e9:f3:2c:b5:
                    fa:aa:cd:8e:aa:21:fa:15:f0:4d:ff:f6:a6:b2:f1:
                    c5:99:5d:7c:d0:a2:57:50:f3:75:cc:91:2e:bf:fe:
                    c0:0d:14:d6:5c:f6:47:3f:82:fd:93:72:6b:0c:99:
                    ea:58:9a:dd:33:9e:82:56:7f:9c:73:76:34:4d:6e:
                    81:25:d1:aa:31:59:fd:3a:50:6b:b5:d9:26:d7:7d:
                    2a:26:d1:2c:10:77:a8:ac:d5:4d:6c:f6:9e:f5:13:
                    d2:e7:95:aa:f8:8d:81:53:a6:17:e1:72:2f:78:22:
                    0a:55:27:58:e3:b5:fc:b3:8a:3c:6b:f8:e6:9a:8c:
                    35:04:8e:a9:1c:a0:2f:08:c1:c6:55:0c:98:c4:6c:
                    af:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:2C:36:3F:47:D5:CF:D7:2E:89:24:C9:1B:E2:A0:BD:48:72:FB
            X509v3 Authority Key Identifier:
                keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/JGYsNj9H1c_XLokkyRvioL1Icvs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49028

    Signature Algorithm: sha256WithRSAEncryption
         75:72:16:7b:81:08:4e:e5:67:a4:81:98:2d:5d:7a:60:f5:a0:
         a2:6b:cb:a8:4c:f6:70:d5:02:4f:db:a2:f4:70:83:c3:dc:21:
         a6:0d:75:62:72:34:ed:4b:04:95:e7:c8:a0:64:cf:b7:41:a3:
         20:c2:18:e5:71:3e:fe:72:df:06:f4:4e:8c:50:00:03:ab:93:
         98:6f:59:55:7f:70:11:16:a8:a3:d6:30:37:09:55:dd:c7:1f:
         c9:8b:7e:94:b2:9b:62:f1:78:56:5b:5c:16:85:ab:a5:ee:94:
         5f:03:e9:11:84:6d:5f:52:6f:66:db:84:88:57:63:46:65:6a:
         7f:7f:87:2c:6c:0a:96:a9:c3:a6:17:4b:de:1c:65:32:ce:f1:
         4b:3b:1c:9e:be:fa:20:51:4a:d8:d9:87:cd:81:52:16:79:5f:
         f4:7c:05:7a:18:9f:88:0b:26:a7:12:23:1b:6e:53:81:68:6d:
         ec:fb:ea:ba:8e:cd:7e:10:f0:63:f3:67:07:8a:e7:68:8f:90:
         f0:d2:e2:62:29:27:1d:1d:d0:4f:00:18:59:f5:24:c2:17:f4:
         87:4e:ca:54:18:19:a2:06:57:aa:03:b2:b4:7f:b2:38:32:27:
         5d:85:56:61:9a:5a:7a:50:86:3c:2c:77:4e:d7:a1:d3:0b:64:
         d8:38:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:49 2026 by rpki-client