Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/SDpQVLxIqGRbMlfT39OKkP1mF-o.asa
File:                     SDpQVLxIqGRbMlfT39OKkP1mF-o.asa (raw, json)
Hash identifier:          XIF+ZTFsKODGQx3mj+VZqNyb64ld+5zEG7Huo/CDaxk=
Subject key identifier:   48:3A:50:54:BC:48:A8:64:5B:32:57:D3:DF:D3:8A:90:FD:66:17:EA
Certificate issuer:       /CN=45ed597b063a5da7658b488cb1b6c3f9b21094f3
Certificate serial:       019DC138025AFFDF5108AA06E51D00ECE77B
Authority key identifier: 45:ED:59:7B:06:3A:5D:A7:65:8B:48:8C:B1:B6:C3:F9:B2:10:94:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re1ZewY6Xadli0iMsbbD-bIQlPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/SDpQVLxIqGRbMlfT39OKkP1mF-o.asa
Signing time:             Fri 24 Apr 2026 20:39:26 +0000
ASPA not before:          Fri 24 Apr 2026 20:39:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            200027
Providers:                AS: 212396
                          AS: 214480
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re1ZewY6Xadli0iMsbbD-bIQlPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c1:38:02:5a:ff:df:51:08:aa:06:e5:1d:00:ec:e7:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45ed597b063a5da7658b488cb1b6c3f9b21094f3
        Validity
            Not Before: Apr 24 20:39:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=483a5054bc48a8645b3257d3dfd38a90fd6617ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:c8:0d:6a:9b:e6:9c:fb:f0:78:b1:18:02:
                    81:c7:00:f0:3e:39:9b:5f:6a:ca:95:73:5d:b9:96:
                    21:d5:ab:3b:81:a1:9f:e5:84:0d:0a:79:b3:e7:5c:
                    1a:6a:7c:64:9d:30:cf:45:20:52:25:0c:a6:43:38:
                    5b:c1:29:ff:bd:72:f2:69:0c:61:a0:ed:01:48:e9:
                    b7:9d:12:f3:cf:8d:40:ac:2e:b4:65:19:4c:af:92:
                    be:32:3a:28:d4:6c:4f:cf:b0:06:a5:5e:1a:db:a3:
                    b5:2d:44:57:30:47:2d:0a:1d:06:bb:a2:e3:61:22:
                    cb:e1:71:d6:37:e5:f4:1e:0a:f7:6e:13:b6:6d:40:
                    d2:4b:6a:f2:1a:8c:3c:94:f9:2b:70:d0:db:4d:b3:
                    23:b4:bb:5a:f5:9b:01:d9:32:92:b2:8b:af:bf:7f:
                    61:9d:7b:ef:8d:70:6d:de:ff:b7:11:32:67:28:16:
                    70:a2:a9:28:97:6b:ac:49:5a:71:08:8b:19:7e:f3:
                    98:2e:4a:8e:5d:30:cf:a0:58:73:eb:d0:45:12:a4:
                    95:52:f6:0c:9c:89:cc:a4:54:b8:11:ec:f0:a7:37:
                    27:c4:93:c2:5e:a1:b2:3c:6c:41:a8:45:cf:cd:6c:
                    cc:86:b5:1f:c7:5c:70:b9:c9:83:40:09:09:1b:bc:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3A:50:54:BC:48:A8:64:5B:32:57:D3:DF:D3:8A:90:FD:66:17:EA
            X509v3 Authority Key Identifier:
                keyid:45:ED:59:7B:06:3A:5D:A7:65:8B:48:8C:B1:B6:C3:F9:B2:10:94:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re1ZewY6Xadli0iMsbbD-bIQlPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/SDpQVLxIqGRbMlfT39OKkP1mF-o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/Re1ZewY6Xadli0iMsbbD-bIQlPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200027

    Signature Algorithm: sha256WithRSAEncryption
         72:f2:aa:52:dc:8d:86:e5:9f:4c:42:a0:3a:10:84:ae:27:bb:
         e4:c4:9f:f7:40:a8:a3:ca:0b:4c:92:c2:53:19:d2:44:17:a8:
         ef:e7:77:59:72:ad:82:a0:61:15:b7:32:19:63:c9:03:be:86:
         a5:63:91:3a:11:e4:28:96:ff:15:da:2f:d5:44:c8:eb:d0:39:
         66:35:c0:0f:8a:78:4a:5b:fb:a4:d8:29:95:60:2b:32:fb:b7:
         3e:c7:0f:3c:3f:82:77:dc:76:87:73:35:47:0d:74:00:48:6d:
         9b:60:c5:64:c0:ae:3c:1b:85:bb:27:9b:81:6d:7d:a0:bd:95:
         7c:b7:3d:a5:4b:df:2b:f5:f6:ff:13:e3:d7:ef:99:13:42:6f:
         0c:f2:97:84:83:d7:a9:17:ad:ae:8e:06:91:25:13:51:5a:09:
         e1:81:ce:68:ff:c0:7a:e3:a0:b1:44:a8:d9:75:b4:5a:e7:42:
         fc:12:9c:f0:0b:b4:26:3c:75:d1:9c:74:0f:1e:1d:4b:40:f6:
         2a:b2:bf:4a:84:94:1e:df:6b:e7:7d:e9:c1:e2:61:44:b3:8c:
         c4:83:ce:4d:28:63:5a:5b:5d:3d:27:1b:d7:40:dc:ef:bc:95:
         31:27:9c:f8:1b:60:b9:e5:de:39:ae:5b:c8:8e:73:fb:58:60:
         10:f0:fb:fc
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ3BOAJa/99RCKoG5R0A7Od7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZWQ1OTdiMDYzYTVkYTc2NThiNDg4Y2IxYjZjM2Y5YjIx
MDk0ZjMwHhcNMjYwNDI0MjAzOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODNhNTA1NGJjNDhhODY0NWIzMjU3ZDNkZmQzOGE5MGZkNjYxN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxarIDWqb5pz78HixGAKBxwDwPjmb
X2rKlXNduZYh1as7gaGf5YQNCnmz51waanxknTDPRSBSJQymQzhbwSn/vXLyaQxh
oO0BSOm3nRLzz41ArC60ZRlMr5K+Mjoo1GxPz7AGpV4a26O1LURXMEctCh0Gu6Lj
YSLL4XHWN+X0Hgr3bhO2bUDSS2ryGow8lPkrcNDbTbMjtLta9ZsB2TKSsouvv39h
nXvvjXBt3v+3ETJnKBZwoqkol2usSVpxCIsZfvOYLkqOXTDPoFhz69BFEqSVUvYM
nInMpFS4EezwpzcnxJPCXqGyPGxBqEXPzWzMhrUfx1xwucmDQAkJG7w9TwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFEg6UFS8SKhkWzJX09/TipD9ZhfqMB8GA1UdIwQY
MBaAFEXtWXsGOl2nZYtIjLG2w/myEJTzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmUxWmV3WTZYYWRsaTBpTXNiYkQtYklRbFBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYTU2Y2UtZmZlZi00OWU0LWFlZmMt
NjU5M2M2NDFhMzIwLzEvU0RwUVZMeElxR1JiTWxmVDM5T0trUDFtRi1vLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYTU2Y2UtZmZlZi00OWU0LWFlZmMtNjU5M2M2NDFhMzIw
LzEvUmUxWmV3WTZYYWRsaTBpTXNiYkQtYklRbFBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMNWzANBgkqhkiG
9w0BAQsFAAOCAQEAcvKqUtyNhuWfTEKgOhCErie75MSf90Coo8oLTJLCUxnSRBeo
7+d3WXKtgqBhFbcyGWPJA76GpWOROhHkKJb/Fdov1UTI69A5ZjXAD4p4Slv7pNgp
lWArMvu3PscPPD+Cd9x2h3M1Rw10AEhtm2DFZMCuPBuFuyebgW19oL2VfLc9pUvf
K/X2/xPj1++ZE0JvDPKXhIPXqRetro4GkSUTUVoJ4YHOaP/AeuOgsUSo2XW0WudC
/BKc8Au0Jjx10Zx0Dx4dS0D2KrK/SoSUHt9r533pweJhRLOMxIPOTShjWltdPScb
10Dc77yVMSec+BtgueXeOa5byI5z+1hgEPD7/A==
-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:51 2026 by rpki-client