Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/LLDfBKtlCeW3eI7057StcwRGUvc.asa
File:                     LLDfBKtlCeW3eI7057StcwRGUvc.asa (raw, json)
Hash identifier:          FU+roj6w95slO9NnUEl8Tx6t8gdfs68bD1W8S1h/R64=
Subject key identifier:   2C:B0:DF:04:AB:65:09:E5:B7:78:8E:F4:E7:B4:AD:73:04:46:52:F7
Certificate issuer:       /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial:       019E263EE56B149950B22E979C58B75777DF
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/LLDfBKtlCeW3eI7057StcwRGUvc.asa
Signing time:             Thu 14 May 2026 11:28:36 +0000
ASPA not before:          Thu 14 May 2026 11:28:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214408
Providers:                AS: 41051
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 20:15:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:26:3e:e5:6b:14:99:50:b2:2e:97:9c:58:b7:57:77:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
        Validity
            Not Before: May 14 11:28:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2cb0df04ab6509e5b7788ef4e7b4ad73044652f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:fa:0c:0c:d4:35:19:bb:27:65:6d:fc:b1:
                    21:1b:df:59:6b:4a:88:f9:f7:41:e5:6c:2b:6c:ad:
                    51:7b:b2:02:e2:e1:df:dc:16:bc:69:8b:52:3e:8f:
                    e2:cd:16:63:47:d6:71:8c:d1:0c:d5:a4:b3:8c:e5:
                    d4:50:e9:cf:ba:aa:85:1e:67:b4:07:d2:4e:bf:5a:
                    40:ed:d1:14:51:49:fe:da:07:d7:3c:c7:9d:57:af:
                    4b:a9:8c:e3:d1:c8:9e:49:d9:23:4e:bf:b8:a9:14:
                    97:f6:35:a4:d7:08:eb:36:c2:d7:34:69:64:48:df:
                    f1:86:31:84:f5:80:71:ca:f0:e1:b9:e0:0a:a4:d1:
                    83:7a:80:8c:ab:68:c8:a3:d1:42:0d:fe:36:9d:5a:
                    87:ca:14:ff:88:94:0c:61:56:34:4e:6b:bc:23:8c:
                    01:33:52:00:bd:59:d3:5f:0d:cf:a3:16:d9:81:81:
                    81:ca:81:70:8f:9a:31:ed:ac:8c:ca:c3:b9:31:91:
                    b7:ad:ad:78:82:bf:6f:2f:68:59:e9:0d:22:4f:4c:
                    82:5a:6f:61:a9:0c:fe:cc:6a:3e:d8:ca:8f:af:7a:
                    37:59:e0:a3:70:1e:ec:5d:44:4c:fc:b2:31:4f:42:
                    f6:b0:76:bf:f0:c9:dd:50:f7:8d:75:48:f5:d2:63:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B0:DF:04:AB:65:09:E5:B7:78:8E:F4:E7:B4:AD:73:04:46:52:F7
            X509v3 Authority Key Identifier:
                keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/LLDfBKtlCeW3eI7057StcwRGUvc.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214408

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:9c:eb:ab:45:c2:18:f5:0d:8e:2f:c6:7b:ef:73:3e:4e:
         87:9a:20:99:11:61:1a:46:79:c9:92:63:f7:66:f1:72:04:c8:
         84:b0:5a:75:9a:82:db:9a:66:fc:dd:01:2c:ba:bd:e7:1f:20:
         f9:b1:eb:84:c7:a6:4e:16:9b:7f:fd:a3:d6:ce:3f:9d:43:70:
         da:ff:77:3e:ed:4e:e8:b6:f4:80:0b:5b:b4:7a:8f:e5:f6:76:
         3f:ff:d1:f1:a3:a6:23:34:1b:00:3c:f6:8a:79:86:4d:0c:23:
         fb:98:e2:a7:40:e4:26:6f:85:95:f1:41:dc:4d:fc:1f:4e:2d:
         e7:04:5a:8a:e2:b8:cd:e3:c2:76:95:d9:20:f7:a9:98:c5:e6:
         6e:43:3c:9a:92:09:fa:e9:28:b9:9d:19:24:77:1d:09:99:a4:
         4a:17:36:47:cf:5b:6d:d2:6e:34:80:9e:0a:31:51:1f:b7:d7:
         4e:04:45:a5:02:bb:09:a6:1c:6e:55:b0:80:c7:31:5b:e3:6b:
         fc:23:3a:24:f3:af:19:27:91:b5:9b:4b:8f:7a:a5:80:15:e5:
         8c:d6:7f:d4:b6:78:c0:1d:5e:3c:a9:d4:f2:b4:db:af:3c:91:
         b9:06:e4:c8:a1:c3:bf:0e:79:0d:80:1f:be:4f:52:84:6a:51:
         81:cd:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:35:47 2026 by rpki-client