Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/UznnCCmWb2U_DwOypllLo7Xxwe8.asa
File:                     UznnCCmWb2U_DwOypllLo7Xxwe8.asa (raw, json)
Hash identifier:          bm5GW+O8Moz8CwmexqQ5gD2dh8tQCMzUBqUj6Yad+rU=
Subject key identifier:   53:39:E7:08:29:96:6F:65:3F:0F:03:B2:A6:59:4B:A3:B5:F1:C1:EF
Certificate issuer:       /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial:       019CB90918581B9536EFFEF8A6300541BFB1
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/UznnCCmWb2U_DwOypllLo7Xxwe8.asa
Signing time:             Wed 04 Mar 2026 13:28:26 +0000
ASPA not before:          Wed 04 Mar 2026 13:28:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200949
Providers:                AS: 1273
                          AS: 56665
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b9:09:18:58:1b:95:36:ef:fe:f8:a6:30:05:41:bf:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
        Validity
            Not Before: Mar  4 13:28:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5339e70829966f653f0f03b2a6594ba3b5f1c1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:27:77:0c:95:96:1c:dd:84:8a:33:52:86:
                    89:97:80:51:23:ea:88:b0:de:5b:61:2a:16:85:03:
                    a1:00:b2:81:0b:57:0a:06:9c:f6:b0:7c:f3:55:c2:
                    62:4d:8a:5a:85:9d:55:2f:95:3e:99:47:37:e4:6f:
                    39:50:fd:0b:38:db:4b:eb:7e:4e:00:75:72:be:57:
                    a8:48:18:1c:98:f7:14:db:d1:7e:e6:98:35:a3:fc:
                    7c:6e:7a:a1:2c:63:84:5e:94:39:90:bf:d7:e5:00:
                    01:1d:31:0e:db:fb:d3:b4:1e:2b:c5:54:0c:b0:b7:
                    4b:d0:c1:24:6d:f7:09:16:10:8f:a4:65:a7:2d:c1:
                    46:ad:d2:e9:c1:58:e8:bb:a1:a9:e1:50:02:79:e8:
                    8c:d7:45:f4:56:33:2b:15:31:5f:55:c6:e8:fb:e4:
                    be:22:b2:94:bb:58:bc:a1:c4:82:ff:08:42:1b:cc:
                    63:f7:a2:ae:46:f9:5f:86:a0:8c:ad:d5:7d:a2:89:
                    a7:a3:5f:ad:1a:0a:b8:84:1d:db:5c:8b:91:ab:7b:
                    37:1f:84:f8:4e:3e:65:31:68:cb:30:ad:a1:43:0d:
                    f3:2b:f6:12:19:19:1d:07:e4:ab:44:52:50:25:af:
                    df:b1:21:b0:57:3d:35:b4:48:81:2c:64:a0:e2:de:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:39:E7:08:29:96:6F:65:3F:0F:03:B2:A6:59:4B:A3:B5:F1:C1:EF
            X509v3 Authority Key Identifier:
                keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/UznnCCmWb2U_DwOypllLo7Xxwe8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200949

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:97:be:da:bc:a3:e1:96:18:a3:b5:06:b4:e3:73:02:6c:
         fd:df:90:c2:e1:cb:21:e5:7b:6e:53:86:ca:a8:86:1f:f5:1b:
         b9:4d:b5:0f:34:ad:86:8a:26:18:78:c7:9a:18:1d:f0:49:ed:
         ea:3e:6c:53:6c:a3:86:83:d0:e4:b7:2c:86:dd:fa:2d:a7:ba:
         a3:20:1d:23:66:d5:d5:4f:83:b3:cf:fa:85:20:50:ce:6b:1a:
         a9:67:98:b3:53:15:12:3b:98:f7:4c:2f:19:14:b3:19:8b:40:
         0f:e5:f0:22:16:6c:d9:f0:1d:b4:62:b5:89:c1:74:49:12:90:
         03:a5:32:0b:4f:e5:98:53:c7:13:6a:69:b2:91:84:29:ca:11:
         e3:e2:67:48:77:35:16:a2:20:5b:42:4f:4c:b1:0d:3e:1a:b1:
         7a:89:cf:e6:34:e8:9b:93:d5:57:a8:b4:66:15:e9:da:76:e2:
         cf:e8:fc:5e:ee:03:d6:f8:cf:6b:3f:52:04:c0:ba:ad:bc:55:
         f7:3b:36:37:12:3a:75:c6:d9:f6:99:2f:5e:c7:85:37:97:f8:
         a5:3c:ff:eb:ad:f2:c5:b6:c0:83:31:bb:19:ae:76:d9:24:59:
         bd:80:ba:bf:ef:4b:27:8d:49:58:c3:25:93:cb:60:ca:e0:23:
         16:cc:69:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:59 2026 by rpki-client