Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/TIH4LEzrTP-SXypL_MRRJ_kVwSU.asa
File:                     TIH4LEzrTP-SXypL_MRRJ_kVwSU.asa (raw, json)
Hash identifier:          X3lzSQ239x3e2EByQX8zmgNYg/WpM8/HiXib0v/X+rg=
Subject key identifier:   4C:81:F8:2C:4C:EB:4C:FF:92:5F:2A:4B:FC:C4:51:27:F9:15:C1:25
Certificate issuer:       /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial:       019CB46B26B1FB475199EAF20596F6D1AC98
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/TIH4LEzrTP-SXypL_MRRJ_kVwSU.asa
Signing time:             Tue 03 Mar 2026 15:57:26 +0000
ASPA not before:          Tue 03 Mar 2026 15:57:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            61073
Providers:                AS: 35753
                          AS: 35819
                          AS: 43766
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b4:6b:26:b1:fb:47:51:99:ea:f2:05:96:f6:d1:ac:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
        Validity
            Not Before: Mar  3 15:57:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c81f82c4ceb4cff925f2a4bfcc45127f915c125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:5a:23:8e:74:d3:31:86:2e:be:0b:83:20:
                    f9:28:e7:7f:5d:97:96:4e:5e:7a:57:c3:41:5b:69:
                    71:13:23:ee:f3:65:53:04:48:8a:d3:08:75:67:95:
                    f7:47:74:62:ed:e2:1b:6a:00:77:71:de:4a:38:0d:
                    24:ac:03:15:60:59:79:0a:ca:2e:e8:f0:6a:3b:cc:
                    00:03:17:60:78:2e:96:1c:58:c6:2a:f1:c4:f2:ad:
                    ed:fc:48:76:de:69:29:15:f3:ac:5a:ab:e9:57:29:
                    5a:c9:7c:bf:24:d2:39:87:84:8e:85:28:f2:17:62:
                    b2:41:90:ba:d6:23:b1:af:ba:b7:97:56:0d:b1:af:
                    2d:a3:fe:50:14:e2:b9:50:5a:1c:03:15:1c:5f:94:
                    17:0f:49:39:9f:6b:d5:e5:47:8b:1f:59:02:3f:34:
                    e9:cf:69:52:6f:09:c1:18:2f:94:2b:8a:51:85:50:
                    ff:af:da:9b:66:5b:32:9e:e5:b0:02:d9:25:29:f7:
                    b4:75:98:40:a6:c5:4a:e0:1e:ec:72:10:ce:39:99:
                    62:e3:f9:08:a4:61:c4:fd:dd:dd:a4:da:86:26:61:
                    43:55:15:fc:29:c0:06:7c:ac:f9:6c:f3:60:1a:4c:
                    2a:fd:3f:62:ae:50:1d:22:9f:b6:7d:92:45:c5:aa:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:81:F8:2C:4C:EB:4C:FF:92:5F:2A:4B:FC:C4:51:27:F9:15:C1:25
            X509v3 Authority Key Identifier:
                keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/TIH4LEzrTP-SXypL_MRRJ_kVwSU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61073

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:7f:83:53:f2:e2:ab:e3:ce:47:b3:0a:b1:db:ce:a6:14:
         d7:91:d4:ba:2e:37:9a:f2:46:04:c2:50:e9:53:24:7e:d4:fe:
         71:f5:01:59:7f:e6:c6:d6:46:9e:99:a1:a7:00:13:9e:21:cf:
         0e:30:46:03:61:e3:34:05:23:90:1b:91:4c:54:75:08:60:77:
         38:44:99:dc:74:6c:c5:2a:c9:02:ac:67:22:59:48:f1:94:23:
         5c:c0:91:a1:61:b1:5c:ce:c3:d9:55:77:f8:e4:08:31:73:58:
         b1:e9:6a:0c:68:8c:6c:dc:6e:b7:81:4f:39:5b:57:5f:ea:4e:
         46:82:05:15:eb:14:5c:8d:57:49:55:df:a4:a6:67:74:19:2e:
         59:cb:c1:98:7b:ab:ac:fc:76:3a:91:d5:9e:a9:3d:16:1e:61:
         aa:b8:91:e2:bb:14:1a:cf:0d:4e:88:8a:8c:41:e5:af:cf:ab:
         56:38:4f:61:52:f1:3e:ae:d0:fd:0b:5c:e6:d4:00:b8:e2:d5:
         74:ed:93:33:f7:8a:b4:1e:69:f4:31:bd:87:15:20:b6:04:c4:
         28:e3:ba:b2:fa:01:6c:20:d5:c5:ad:7a:f9:41:b3:11:fd:ea:
         cd:39:73:8f:d8:e8:b7:16:81:48:51:9c:30:3c:8c:79:97:3b:
         ba:2a:9a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:50:01 2026 by rpki-client