Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/Yo-fullWGeKl8XOqwwQWGl8ohSo.asa
File:                     Yo-fullWGeKl8XOqwwQWGl8ohSo.asa (raw, json)
Hash identifier:          0VBufQNMO7/4QkFPpkFZhTVHEaQ91TkdNNCouWLIjsE=
Subject key identifier:   62:8F:9F:BA:59:56:19:E2:A5:F1:73:AA:C3:04:16:1A:5F:28:85:2A
Certificate issuer:       /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial:       019CF323B6A3AE94FCDDA626B6C523316403
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/Yo-fullWGeKl8XOqwwQWGl8ohSo.asa
Signing time:             Sun 15 Mar 2026 20:15:29 +0000
ASPA not before:          Sun 15 Mar 2026 20:15:29 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216357
Providers:                AS: 58057
                          AS: 61218
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 20:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f3:23:b6:a3:ae:94:fc:dd:a6:26:b6:c5:23:31:64:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
        Validity
            Not Before: Mar 15 20:15:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=628f9fba595619e2a5f173aac304161a5f28852a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:21:bf:1d:b4:30:1a:da:3d:99:af:c5:1a:
                    97:d3:fb:67:00:75:71:25:9f:cc:a0:0e:c9:95:f8:
                    77:7c:1c:f4:56:6e:15:71:4f:c9:b8:00:f6:e2:b5:
                    c3:08:2d:cd:0c:16:1b:ad:f9:db:9b:af:e6:8e:58:
                    2e:bf:e0:88:82:4d:ae:c0:ef:5f:e4:bd:40:21:10:
                    aa:a6:86:da:f4:67:77:1e:ad:ae:e9:de:62:a7:ca:
                    8c:85:3d:22:53:6f:ed:f1:98:26:74:c9:ae:88:cd:
                    ec:20:3c:34:45:52:0c:ee:95:2a:93:b0:f9:66:e7:
                    66:9d:67:3d:9c:b8:78:7c:e8:7c:97:20:79:5a:59:
                    c3:82:18:69:05:bf:66:57:6e:eb:5b:df:c9:da:9a:
                    11:95:6a:4d:30:2c:ff:88:cb:17:4f:14:42:3b:5f:
                    6a:d1:6c:62:73:7c:71:15:07:d6:db:b1:33:31:6e:
                    d6:5f:60:9f:ec:57:ac:cf:23:30:b0:53:62:8f:9a:
                    9e:3a:12:e4:c5:ab:0e:e8:c7:a3:85:1e:08:e8:a6:
                    d0:36:3a:cc:f6:f7:ca:2c:35:31:ab:ad:2e:41:2c:
                    80:4e:30:67:09:02:a7:fe:04:5b:0c:ec:eb:93:28:
                    78:36:ac:67:40:0f:49:de:7c:dd:8e:02:3d:49:01:
                    59:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8F:9F:BA:59:56:19:E2:A5:F1:73:AA:C3:04:16:1A:5F:28:85:2A
            X509v3 Authority Key Identifier:
                keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/Yo-fullWGeKl8XOqwwQWGl8ohSo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216357

    Signature Algorithm: sha256WithRSAEncryption
         55:b7:40:dd:93:75:f6:7a:a8:5b:1f:3d:f8:ee:6e:79:47:9e:
         53:f4:41:cc:45:bc:e9:fa:b0:c7:10:ad:75:b4:67:e9:fc:8f:
         68:28:c1:02:2c:bf:6c:cf:64:39:60:fe:04:a3:8a:d3:ad:9b:
         82:94:5b:87:0b:e2:ec:b7:5c:9c:85:22:b9:95:67:85:97:40:
         e7:75:6f:7d:b0:b4:d9:92:64:ef:05:77:4c:61:7d:e7:3b:79:
         a7:a9:f4:a3:22:aa:b6:c7:df:2e:ba:69:5e:c4:b9:a1:52:b3:
         5e:ec:65:e6:58:a4:13:83:ec:c2:4b:43:ba:68:6b:89:6d:8d:
         0e:01:ae:2b:63:d2:18:14:79:6e:f2:5a:db:0e:1e:b3:21:19:
         6a:ff:c5:bc:63:81:6e:aa:f9:3f:1d:46:dc:da:a0:93:c1:35:
         55:9e:3f:f5:e2:28:0d:ed:f5:0d:e9:49:34:32:ac:0f:b5:2f:
         9b:f0:73:66:36:af:29:a7:af:11:1d:9f:c8:c1:ff:85:06:7b:
         b3:75:52:9d:d3:bd:6d:76:e9:44:b6:f9:8b:be:35:7f:28:b3:
         7d:04:c4:e3:ac:2f:27:84:a7:e5:e1:37:b9:93:7c:1e:23:02:
         4c:db:2d:2e:e6:0d:e5:b5:46:5e:47:cf:89:85:0a:45:cb:1b:
         2f:ad:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:37 2026 by rpki-client