Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/FCljHGHovqzN4BKCv8IM4kFItQI.asa
File:                     FCljHGHovqzN4BKCv8IM4kFItQI.asa (raw, json)
Hash identifier:          NVB42NAGkeXqyUHIUWyyW/hOv6nAj+V3g5qKcFOSaJk=
Subject key identifier:   14:29:63:1C:61:E8:BE:AC:CD:E0:12:82:BF:C2:0C:E2:41:48:B5:02
Certificate issuer:       /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial:       019F190110443BC8DCFA8D2F85D7CFDD7621
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/FCljHGHovqzN4BKCv8IM4kFItQI.asa
Signing time:             Tue 30 Jun 2026 14:48:47 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:47 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208505
Providers:                AS: 6939
                          AS: 20473
                          AS: 34927
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:10:44:3b:c8:dc:fa:8d:2f:85:d7:cf:dd:76:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
        Validity
            Not Before: Jun 30 14:48:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1429631c61e8beaccde01282bfc20ce24148b502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:e9:1a:63:65:4d:d8:56:45:01:b1:5e:df:
                    62:e4:d5:31:92:2c:88:31:75:34:e1:bf:64:67:45:
                    23:15:21:b8:7b:21:32:77:c7:a8:f1:e1:09:78:23:
                    a1:65:8c:8f:3b:88:89:fe:56:5d:3e:46:7c:78:16:
                    c9:27:71:ab:6e:55:56:00:10:2b:bb:b1:98:d4:95:
                    84:06:9c:d2:97:33:31:6f:5f:47:80:fe:d4:5b:60:
                    09:63:b1:6e:a8:0d:04:f3:3c:ce:db:ad:d6:40:ef:
                    81:73:b9:fe:1b:fc:30:ca:13:98:ee:a5:aa:05:49:
                    20:7f:3f:33:96:b2:50:a3:84:10:13:b4:49:e4:89:
                    63:93:0d:0f:48:ca:cc:e6:01:c5:26:02:59:74:bd:
                    72:8c:15:fc:7f:54:84:a7:e3:88:2d:30:c0:bc:ca:
                    9c:91:5b:2e:10:9f:8b:36:38:03:b5:86:a3:cb:9a:
                    b9:bc:e0:46:2e:80:69:3d:fa:51:dc:91:a9:56:65:
                    32:76:ca:52:44:8d:ef:56:fb:6b:6e:89:6e:c9:0a:
                    90:c5:a0:fa:ff:a1:46:40:b7:2f:07:55:2d:74:44:
                    cb:2d:30:db:6e:08:a4:1b:e7:72:93:fa:37:b3:63:
                    5a:b8:73:d1:fa:01:a9:af:60:ed:c0:34:42:d3:a9:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:29:63:1C:61:E8:BE:AC:CD:E0:12:82:BF:C2:0C:E2:41:48:B5:02
            X509v3 Authority Key Identifier:
                keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/FCljHGHovqzN4BKCv8IM4kFItQI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208505

    Signature Algorithm: sha256WithRSAEncryption
         3c:2c:90:a6:76:b5:e1:13:3d:48:39:53:29:c3:b3:11:a2:c9:
         c7:ec:c7:39:eb:93:9b:58:b5:19:1e:ed:dd:78:73:e7:5e:53:
         64:d8:4e:45:24:d7:e3:78:14:0f:74:06:58:e7:d2:c2:d5:3f:
         a7:83:a5:2e:6f:7a:8a:d9:bd:c5:74:96:ce:ea:4a:40:a8:e8:
         84:6f:06:15:7c:c5:99:cf:2d:20:f2:d7:ef:8d:d7:65:a0:67:
         99:10:36:ee:db:00:12:c1:3f:e2:7a:a5:54:3f:60:0c:a8:4b:
         70:cc:86:0a:ae:d3:6d:ce:1c:d4:34:12:05:65:84:20:22:29:
         65:f8:23:88:b4:6f:8c:43:d6:d7:58:fa:5b:c6:b5:40:d0:4a:
         b4:42:ca:cb:2d:fe:fb:87:cc:16:bd:98:b3:b8:f2:e9:8f:ba:
         e2:d8:b4:e8:19:86:30:52:97:f1:d5:1d:94:f5:83:32:10:f2:
         da:43:87:7f:71:ad:10:d7:65:70:fe:50:8d:66:76:f9:da:63:
         7d:01:11:80:1e:5e:4a:02:31:7c:09:aa:61:23:d2:ad:8f:ba:
         c9:9c:be:b5:a1:8d:b4:31:54:87:8a:bd:94:27:2f:34:46:a0:
         1a:12:eb:29:fe:8f:e3:03:90:bf:89:af:9b:8c:e1:c8:d1:dc:
         2b:7c:35:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:00:15 2026 by rpki-client