Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/AO8goRbzV7PBCtbzwtt1-y0Y_cE.asa
File:                     AO8goRbzV7PBCtbzwtt1-y0Y_cE.asa (raw, json)
Hash identifier:          dom8RHI6jzPo201yvdJYcI+G83hClL+fbPQN0nSSOgU=
Subject key identifier:   00:EF:20:A1:16:F3:57:B3:C1:0A:D6:F3:C2:DB:75:FB:2D:18:FD:C1
Certificate issuer:       /CN=e0188244cbdbf4847f411deffa409ca1db1841b9
Certificate serial:       01A049CEEA6A553804E4BCDE6DDB8E55B5E7
Authority key identifier: E0:18:82:44:CB:DB:F4:84:7F:41:1D:EF:FA:40:9C:A1:DB:18:41:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/AO8goRbzV7PBCtbzwtt1-y0Y_cE.asa
Signing time:             Fri 28 Aug 2026 19:18:12 +0000
ASPA not before:          Fri 28 Aug 2026 19:18:12 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218888
Providers:                AS: 211615
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:49:ce:ea:6a:55:38:04:e4:bc:de:6d:db:8e:55:b5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0188244cbdbf4847f411deffa409ca1db1841b9
        Validity
            Not Before: Aug 28 19:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=00ef20a116f357b3c10ad6f3c2db75fb2d18fdc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d9:76:3b:88:31:c1:cb:3f:31:ec:32:76:16:
                    8c:97:51:02:c0:38:b1:86:af:79:42:a2:08:05:50:
                    98:70:18:f7:5c:7a:c4:13:83:49:d2:0f:5e:54:e6:
                    0d:6e:55:82:ad:ae:0d:8b:32:aa:54:d2:71:ea:76:
                    40:70:03:23:3d:58:33:bd:b5:2a:23:5d:d2:71:d4:
                    65:8f:a7:16:ff:72:a5:ff:a4:fb:70:49:89:b5:15:
                    69:7a:3c:00:15:d5:57:19:5a:57:25:7a:e2:63:55:
                    14:17:a7:34:cf:ec:d8:03:06:b6:b4:61:4f:d6:55:
                    fc:69:a2:95:ee:d0:64:b7:50:2e:3a:e9:1f:4e:e8:
                    67:86:d5:04:25:0d:af:46:0c:24:b7:ce:5a:75:90:
                    bb:6c:17:ad:cd:13:4b:ab:73:16:0f:23:81:ae:60:
                    bc:35:0d:bd:c0:24:6c:16:12:ca:a3:7a:ca:86:f9:
                    97:60:62:79:b9:2f:76:3d:77:b7:ca:f5:d6:d9:05:
                    74:74:93:2f:6d:da:e7:be:0c:b0:c5:42:c9:0a:54:
                    c0:18:78:a6:cd:3e:4f:8a:28:67:03:4e:4d:e2:0b:
                    05:78:cc:d4:fb:b7:ef:99:2a:ab:ec:d7:36:10:5d:
                    00:4c:d7:00:89:10:20:c8:fb:af:d8:b7:f9:f9:4d:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EF:20:A1:16:F3:57:B3:C1:0A:D6:F3:C2:DB:75:FB:2D:18:FD:C1
            X509v3 Authority Key Identifier:
                keyid:E0:18:82:44:CB:DB:F4:84:7F:41:1D:EF:FA:40:9C:A1:DB:18:41:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/AO8goRbzV7PBCtbzwtt1-y0Y_cE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218888

    Signature Algorithm: sha256WithRSAEncryption
         7f:3a:db:2f:8a:fd:4c:a3:c3:ee:65:90:c7:70:96:29:b0:30:
         ea:1c:d6:f4:24:07:fe:31:e4:fc:cd:10:7d:27:58:3a:00:59:
         ef:0a:0e:fc:78:34:07:f1:b8:c9:3e:43:a9:c3:62:54:66:26:
         09:cc:19:68:fb:e6:08:ff:41:82:ca:b7:d9:62:58:c1:8a:fd:
         51:6f:cb:1c:dd:63:3d:9b:22:d7:17:17:9b:dc:b3:3a:91:72:
         31:89:70:e6:03:d1:63:66:06:bd:e6:f2:fc:7e:c4:7d:c0:ee:
         91:74:87:83:82:46:d3:af:76:c1:29:18:92:bc:a3:86:4e:b5:
         a6:91:f4:be:8a:3b:02:af:cb:ac:92:b7:da:63:9c:c6:01:2e:
         d6:fb:13:df:74:63:6d:ec:f3:73:65:54:bf:d4:98:ae:18:43:
         d4:b3:d1:0a:bf:ba:f2:4b:ca:58:69:c6:33:93:1d:07:d0:f8:
         36:1e:0b:58:1f:ca:7c:09:20:18:d6:de:51:b7:77:39:32:bf:
         11:a6:1b:6e:75:46:a6:1a:0c:07:59:5e:bf:40:16:cd:06:4e:
         20:f1:1a:3b:d6:50:1b:0a:7c:4a:78:1c:00:6d:fe:3e:88:fd:
         25:5c:c1:ea:6f:cc:14:12:ef:6d:d8:03:0c:a9:a9:93:02:89:
         2e:68:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:06:04 2026 by rpki-client