Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/RZ3tel9syTFm_FDnewv1LtVhGaE.asa
File:                     RZ3tel9syTFm_FDnewv1LtVhGaE.asa (raw, json)
Hash identifier:          ZEPAWlh3qs8XE61M2XfXTiI9UFnTCQ0FVnCjRwgvbfQ=
Subject key identifier:   45:9D:ED:7A:5F:6C:C9:31:66:FC:50:E7:7B:0B:F5:2E:D5:61:19:A1
Certificate issuer:       /CN=48009b462f468c7d010dd6418abcf31712be4327
Certificate serial:       019FDE078C7CDA6EB436DA6A15DC16EF9F07
Authority key identifier: 48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/RZ3tel9syTFm_FDnewv1LtVhGaE.asa
Signing time:             Fri 07 Aug 2026 21:01:04 +0000
ASPA not before:          Fri 07 Aug 2026 21:01:04 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60841
Providers:                AS: 13335
                          AS: 16276
                          AS: 30456
                          AS: 62553
                          AS: 394177
                          AS: 396993
                          AS: 400304
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:de:07:8c:7c:da:6e:b4:36:da:6a:15:dc:16:ef:9f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48009b462f468c7d010dd6418abcf31712be4327
        Validity
            Not Before: Aug  7 21:01:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=459ded7a5f6cc93166fc50e77b0bf52ed56119a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:20:45:51:c2:44:0c:e7:72:9e:dc:0d:e1:d1:
                    ae:af:57:12:a2:57:e7:65:8c:5c:27:b5:1e:9a:62:
                    53:63:6b:b9:b9:4e:05:9c:bf:95:43:e7:e3:b9:b7:
                    df:2a:7f:bf:c0:a2:d3:9a:5b:96:f2:d3:cc:84:96:
                    73:72:13:30:ac:c1:6e:a1:d2:e4:cf:da:9e:2f:29:
                    b3:2f:dc:69:2c:de:a4:66:88:71:9d:07:88:4d:17:
                    3f:16:3f:55:40:37:60:cd:6b:87:b9:1a:39:3b:cb:
                    79:e4:75:15:6f:7c:53:82:fd:a2:d7:c7:67:d8:eb:
                    eb:eb:8a:27:a4:28:ce:d4:1e:a6:c7:0c:9b:24:51:
                    b6:69:02:a9:ba:b6:1e:73:93:cd:b5:84:71:6b:cc:
                    f0:b8:d7:4c:e4:6a:1c:d9:e4:2a:a0:97:4c:23:fd:
                    22:c3:d0:eb:13:68:cb:32:de:22:3b:0f:d4:01:39:
                    58:d8:ae:08:50:bf:7a:b9:a2:9a:65:3d:90:e7:a8:
                    00:e4:b7:d2:4d:53:cf:d8:a7:57:aa:73:d7:17:09:
                    e6:4f:22:8b:a7:cd:b6:20:24:9a:ca:0f:4d:7c:12:
                    fd:7e:47:20:b0:c8:0f:03:9b:52:4c:af:fc:d3:25:
                    22:7d:9d:b3:99:82:1b:60:62:a2:eb:e2:9a:06:3a:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9D:ED:7A:5F:6C:C9:31:66:FC:50:E7:7B:0B:F5:2E:D5:61:19:A1
            X509v3 Authority Key Identifier:
                keyid:48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/RZ3tel9syTFm_FDnewv1LtVhGaE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60841

    Signature Algorithm: sha256WithRSAEncryption
         b9:0e:bd:79:29:01:d2:dd:81:c8:cf:47:98:68:9e:4e:2e:20:
         57:79:d3:e4:fd:50:d6:04:38:27:9c:0f:9a:37:89:55:6f:db:
         84:e3:0f:f4:18:7f:70:2b:6e:69:b6:57:1a:ce:27:b4:7e:5e:
         f8:a2:4e:da:8a:ae:0e:9f:29:0d:68:68:08:b7:4b:20:bd:f7:
         77:77:dc:c7:ae:6f:c5:e3:46:f7:3d:5e:fd:4e:3e:9b:ea:0f:
         25:95:8b:c3:16:01:0f:16:5d:7e:4e:5c:78:21:ce:fd:19:7a:
         f6:3d:16:c9:68:4c:15:8c:52:cf:2a:2e:d8:c2:29:89:13:4d:
         47:e5:ae:c0:2e:67:88:07:01:5e:a3:bb:35:4a:fb:04:14:30:
         1e:82:31:55:2a:ef:2b:9b:69:89:1f:43:9d:2c:32:a7:09:41:
         e9:04:eb:cb:28:97:43:be:ce:f4:c6:05:f0:5f:f9:95:4a:61:
         ae:50:ea:bf:06:df:48:5e:19:be:18:0c:88:52:7c:66:7b:14:
         aa:77:db:42:08:41:28:6d:dc:a9:68:85:b4:cd:26:b1:6f:e1:
         72:70:8a:8b:64:07:07:a7:e7:25:ad:12:c8:c7:34:ff:62:eb:
         50:55:f8:00:c8:53:7d:f1:e7:48:e7:2e:e5:f1:a7:1c:94:ca:
         35:84:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:51:28 2026 by rpki-client