Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AheurXSAwG3K8xjvCSAB_OgXDkE.asa
File:                     AheurXSAwG3K8xjvCSAB_OgXDkE.asa (raw, json)
Hash identifier:          37Fmeaq+GhOVQi6i9jELNgyV9qWcf6gQUQ1iLmTpfG4=
Subject key identifier:   02:17:AE:AD:74:80:C0:6D:CA:F3:18:EF:09:20:01:FC:E8:17:0E:41
Certificate issuer:       /CN=0205ba1d943794cad9d7be8c6ecfb2bacdc8505b
Certificate serial:       019E429DC68DD47CCF64FEF2A117427E04B8
Authority key identifier: 02:05:BA:1D:94:37:94:CA:D9:D7:BE:8C:6E:CF:B2:BA:CD:C8:50:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AheurXSAwG3K8xjvCSAB_OgXDkE.asa
Signing time:             Tue 19 May 2026 23:41:36 +0000
ASPA not before:          Tue 19 May 2026 23:41:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198860
Providers:                AS: 31898
                          AS: 199656
                          AS: 215467
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:42:9d:c6:8d:d4:7c:cf:64:fe:f2:a1:17:42:7e:04:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0205ba1d943794cad9d7be8c6ecfb2bacdc8505b
        Validity
            Not Before: May 19 23:41:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0217aead7480c06dcaf318ef092001fce8170e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:35:a0:4c:92:fe:83:b1:5f:8a:b5:e3:1b:
                    b8:cb:c0:72:3a:5f:e5:06:9d:c0:a1:40:cd:4e:f3:
                    9e:7e:42:36:cb:88:34:23:1f:81:8f:94:6e:af:e6:
                    34:34:e2:cb:33:d1:7f:5e:2e:7b:e7:be:87:8a:5e:
                    52:21:08:66:b3:6e:cb:c2:79:4f:eb:32:19:7f:8a:
                    e4:a3:f2:04:f2:ca:b0:d5:50:97:c4:80:71:5d:94:
                    46:af:8f:de:53:10:fd:a6:ff:26:92:16:ad:e0:53:
                    87:7d:d8:50:6c:13:be:2f:d9:08:af:c3:ec:02:fd:
                    39:15:b0:1c:66:57:66:f4:16:a9:07:34:88:36:29:
                    2c:77:ed:0c:50:5b:aa:94:2e:f7:3c:cc:02:ba:3e:
                    31:0e:32:93:15:c7:12:f4:f1:1b:2b:ee:5c:97:86:
                    48:51:d7:7e:74:99:e8:fc:13:65:ee:39:cc:1a:f9:
                    30:49:9b:be:85:0b:22:47:1c:31:95:c8:d1:0c:af:
                    56:b2:f6:5f:e9:e0:d7:78:13:57:75:b1:71:22:c8:
                    c6:47:77:b4:8f:31:1b:2f:8d:50:8d:3f:ac:11:02:
                    e4:41:8f:0e:32:24:b3:1f:1d:71:4f:5b:30:0b:84:
                    e9:1c:aa:fa:80:c7:94:72:82:75:a9:5c:c0:45:93:
                    7e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:17:AE:AD:74:80:C0:6D:CA:F3:18:EF:09:20:01:FC:E8:17:0E:41
            X509v3 Authority Key Identifier:
                keyid:02:05:BA:1D:94:37:94:CA:D9:D7:BE:8C:6E:CF:B2:BA:CD:C8:50:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgW6HZQ3lMrZ176Mbs-yus3IUFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AheurXSAwG3K8xjvCSAB_OgXDkE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/15df06-208b-4ed1-812a-d7421c218aa8/1/AgW6HZQ3lMrZ176Mbs-yus3IUFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198860

    Signature Algorithm: sha256WithRSAEncryption
         96:cf:32:af:b4:8b:fd:d1:39:a9:f8:fc:a7:ee:bf:9a:09:53:
         98:ea:62:ae:32:69:90:40:04:10:39:e0:36:c6:fa:28:71:03:
         2d:2f:72:8f:67:fd:53:19:d7:04:18:fe:bf:da:3b:04:6b:4f:
         7a:13:ec:b3:32:91:5a:2c:b5:66:60:91:28:85:b6:f6:dd:e0:
         96:f5:d5:6a:2c:e5:3a:26:09:9d:0b:e2:8a:fb:7b:15:ca:c9:
         bc:b3:8c:45:a8:93:c9:2b:f1:cd:d0:28:c4:77:77:22:50:8c:
         74:22:49:3e:4d:83:9d:ed:0a:19:71:a8:5e:6d:36:4c:80:64:
         7f:cc:d3:48:de:e0:ee:a8:7d:8a:68:0f:f2:1f:1c:37:a6:69:
         d1:d4:b7:5b:cc:30:1a:1a:41:72:0b:ef:ae:79:e8:2e:85:13:
         97:e8:d4:aa:08:7b:16:07:59:de:2a:95:a7:17:46:3a:33:2e:
         fc:35:3c:b4:48:40:6d:90:8a:f5:5c:b6:05:b2:78:8d:a4:b6:
         06:5b:da:78:54:dc:1d:0c:0b:fd:ec:bc:2f:55:5d:35:0e:6e:
         c4:a0:c1:6c:af:e0:49:31:f5:23:5d:5c:6d:7b:c8:47:de:41:
         65:8c:b2:2b:68:60:9f:3b:ff:88:e7:77:58:cd:e2:69:ff:c1:
         09:95:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:59 2026 by rpki-client