Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/lEhWylH1YKAYUCm59eep9JzSWXo.asa
File:                     lEhWylH1YKAYUCm59eep9JzSWXo.asa (raw, json)
Hash identifier:          0zTezeZHGflgHky0IiBFGpbUyPZWdBESepTcNK8TCs0=
Subject key identifier:   94:48:56:CA:51:F5:60:A0:18:50:29:B9:F5:E7:A9:F4:9C:D2:59:7A
Certificate issuer:       /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial:       019EFA5EEABD6F437068B80B3A512F1D8370
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/lEhWylH1YKAYUCm59eep9JzSWXo.asa
Signing time:             Wed 24 Jun 2026 16:03:04 +0000
ASPA not before:          Wed 24 Jun 2026 16:03:04 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            57797
Providers:                AS: 2027
                          AS: 11967
                          AS: 34872
                          AS: 35661
                          AS: 47272
                          AS: 52025
                          AS: 58057
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fa:5e:ea:bd:6f:43:70:68:b8:0b:3a:51:2f:1d:83:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
        Validity
            Not Before: Jun 24 16:03:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=944856ca51f560a0185029b9f5e7a9f49cd2597a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:2e:e0:5e:c5:62:eb:34:40:99:ba:e5:09:
                    f0:88:89:18:b9:43:d1:de:ba:e5:f3:86:e1:76:95:
                    78:65:da:ed:1f:15:88:20:d8:ab:27:89:11:f7:34:
                    59:cb:66:02:f6:6b:7b:76:cd:06:95:d1:d9:fa:f8:
                    a8:7f:7f:7f:94:2a:b3:56:9f:1f:67:57:3b:88:c9:
                    89:04:82:72:03:65:fe:ca:5c:60:74:fb:36:b1:88:
                    bf:2d:53:eb:3d:ae:64:0d:e5:b5:93:d8:c9:01:4d:
                    80:da:bc:63:d9:a0:28:4f:14:fb:4f:65:7b:85:1f:
                    bd:fb:ed:e3:f5:d6:35:96:05:81:f9:b1:eb:7a:a6:
                    92:ef:54:03:21:b5:8b:08:34:aa:89:2c:60:36:e9:
                    e1:19:bb:ce:67:41:5c:95:66:46:84:8e:e9:40:a2:
                    68:bd:14:1d:b6:25:b2:12:b6:a1:3b:d7:6e:b5:d3:
                    38:70:20:84:e9:90:85:2e:3d:63:0b:f2:eb:a8:24:
                    e5:88:89:48:e2:5a:8f:e1:13:af:4f:93:52:08:0f:
                    99:bb:7e:82:f8:c5:7b:73:ce:4f:6a:ab:14:69:b3:
                    98:43:7e:69:5e:26:92:fb:e9:af:c7:d5:db:cf:36:
                    68:be:83:76:95:28:d1:ee:a1:a9:b3:34:98:bb:69:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:48:56:CA:51:F5:60:A0:18:50:29:B9:F5:E7:A9:F4:9C:D2:59:7A
            X509v3 Authority Key Identifier:
                keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/lEhWylH1YKAYUCm59eep9JzSWXo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  57797

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:4c:26:43:ea:c9:97:3a:f3:8e:e7:7d:df:05:ad:9f:11:
         0a:e1:ad:67:58:72:67:a1:9d:2d:42:d5:a7:90:5e:26:ee:4f:
         96:4c:cf:0b:bb:d1:c5:65:65:e5:03:08:5d:fb:fc:65:5c:7d:
         4f:2c:c6:a3:33:71:40:75:bb:11:81:0a:4a:5c:ed:40:a0:73:
         a8:b4:b7:bf:3b:b7:52:cc:4c:42:c8:b5:13:1c:16:e5:e7:37:
         b3:09:e5:f3:9d:48:a5:0c:4a:c9:71:f1:b4:a5:35:6f:f3:8a:
         59:4f:08:99:61:66:24:f3:a4:7b:85:9b:e1:53:ee:e5:4f:0d:
         65:d1:a8:b7:39:4d:bd:ec:f8:47:d8:cd:f8:e1:99:f7:81:c4:
         e4:28:a5:0a:fc:c1:ad:c4:32:71:f7:95:1d:ff:fb:20:92:00:
         ed:bb:2e:0e:63:95:90:b8:16:97:0c:b2:8c:4a:48:58:91:70:
         bd:d9:2e:93:50:49:41:c9:b0:6d:13:74:5e:21:b5:b5:69:a2:
         f2:7c:bc:0a:fd:f2:21:28:1b:a0:70:79:c3:b8:a0:72:4b:f2:
         3a:24:97:6a:71:b8:4b:d2:a9:db:b9:97:bc:2f:fa:93:77:93:
         0e:4e:95:da:48:6a:bc:fa:f9:28:71:02:94:88:64:e4:b9:8e:
         54:99:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:25:57 2026 by rpki-client