Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/z7cbEawlDv0zcZyeiG5p_VHVB6A.asa
File:                     z7cbEawlDv0zcZyeiG5p_VHVB6A.asa (raw, json)
Hash identifier:          lrRjHGHyhB72UMQCjWD7tzPkttHjg9P2scgwJgfe2hM=
Subject key identifier:   CF:B7:1B:11:AC:25:0E:FD:33:71:9C:9E:88:6E:69:FD:51:D5:07:A0
Certificate issuer:       /CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
Certificate serial:       019CC478F3B1C18FBF10844BFC887E2B9459
Authority key identifier: 62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/z7cbEawlDv0zcZyeiG5p_VHVB6A.asa
Signing time:             Fri 06 Mar 2026 18:46:26 +0000
ASPA not before:          Fri 06 Mar 2026 18:46:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            205345
Providers:                AS: 207187
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c4:78:f3:b1:c1:8f:bf:10:84:4b:fc:88:7e:2b:94:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62dfe53884b95a09f66a416e14f56c6b0f789afc
        Validity
            Not Before: Mar  6 18:46:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=cfb71b11ac250efd33719c9e886e69fd51d507a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:de:27:b2:4a:d2:91:89:cd:90:47:36:80:64:
                    36:b2:2e:2d:e9:aa:dc:80:66:e5:f3:d8:f6:f4:ea:
                    5c:5c:47:e3:d5:58:60:9a:79:55:bc:d9:b1:38:37:
                    cf:8e:11:ef:ff:c2:f1:cb:7b:b7:6e:dc:da:0d:c1:
                    76:bb:20:24:95:e1:05:ca:bb:4b:67:ff:1c:c3:35:
                    1d:37:0c:25:18:f4:98:2f:d7:07:f6:4a:11:de:d8:
                    88:84:04:73:d6:3e:a1:50:87:3f:1b:d3:1b:ca:23:
                    f2:dc:81:11:33:2f:51:94:12:77:14:49:3d:29:d2:
                    19:60:c3:87:23:95:3a:ff:03:cf:69:c0:14:2e:95:
                    82:44:a8:e5:0c:25:33:82:bc:bf:e5:5e:b8:43:17:
                    1e:fb:6e:68:a5:36:60:a8:f5:ba:e2:7f:50:fe:78:
                    b8:b7:ef:db:19:55:d6:7e:2e:db:f4:3d:ff:33:75:
                    99:f0:07:04:c0:f3:62:13:4c:aa:f7:fd:bf:1d:b4:
                    64:88:9e:ce:e3:cd:de:ca:98:09:97:fb:c3:dc:9d:
                    32:8f:f0:9a:01:a9:2f:24:64:a3:30:30:c5:25:3d:
                    46:10:1e:1e:c1:4f:0c:3d:0e:5e:f4:40:7b:f5:35:
                    75:f5:31:66:78:61:d8:31:86:ea:5f:55:8d:e6:23:
                    be:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B7:1B:11:AC:25:0E:FD:33:71:9C:9E:88:6E:69:FD:51:D5:07:A0
            X509v3 Authority Key Identifier:
                keyid:62:DF:E5:38:84:B9:5A:09:F6:6A:41:6E:14:F5:6C:6B:0F:78:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt_lOIS5Wgn2akFuFPVsaw94mvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/z7cbEawlDv0zcZyeiG5p_VHVB6A.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fb0032-bc45-458f-ab2b-2936aa227765/1/Yt_lOIS5Wgn2akFuFPVsaw94mvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205345

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:67:a3:3a:44:40:da:71:4e:34:ef:7b:b5:ba:cd:9a:66:
         e6:e4:79:8f:8a:d6:e1:1d:ef:23:67:7c:4a:d0:7f:e4:37:31:
         bc:0b:28:2f:f0:52:0a:83:b9:d0:91:cf:25:a4:73:e5:8a:be:
         ec:fd:71:ab:9e:25:da:72:c4:08:a0:bb:15:c1:7d:10:4b:7e:
         88:b7:c2:49:4b:d0:b3:2c:9d:f5:e6:18:5f:b5:fe:9d:7b:ee:
         4c:26:ca:91:3c:f4:8d:4a:55:a3:6b:61:82:d4:0a:35:88:59:
         8e:b3:f4:86:1f:1e:48:ce:cf:e2:f2:ba:fb:5f:a4:e9:e4:b6:
         62:24:a5:98:9a:31:12:73:26:9e:6f:54:16:18:bb:c6:50:fa:
         62:db:45:d6:4c:f1:61:c0:38:d8:a0:61:54:dc:5e:17:22:d3:
         04:92:eb:bb:50:f5:d7:d4:5d:9c:76:94:0d:c0:1c:8a:66:90:
         e6:c6:4d:d6:24:80:76:38:c3:ff:d6:80:92:47:ad:4c:a9:79:
         45:a2:58:0e:3e:27:d7:b8:4b:c4:1f:ac:74:0f:f0:74:02:64:
         ef:e6:40:40:f9:0e:3b:84:d1:b9:4f:a0:16:b2:37:79:4a:2a:
         2f:04:21:b0:a4:5a:ac:e6:5d:26:19:27:c1:28:67:25:e3:5d:
         ea:62:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:55:05 2026 by rpki-client