Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/U4bNdKhTLh8siEHweWkdXnpGwFQ.asa
File:                     U4bNdKhTLh8siEHweWkdXnpGwFQ.asa (raw, json)
Hash identifier:          SrfthbOaamoHYmnCmIs+W5bYlOH2WJD8qTtF/8BtYXM=
Subject key identifier:   53:86:CD:74:A8:53:2E:1F:2C:88:41:F0:79:69:1D:5E:7A:46:C0:54
Certificate issuer:       /CN=028b020773713b2c53d068e342e93fc7aadfaee2
Certificate serial:       019FF6B6506166FF36BC86AC9321E4FF1E4E
Authority key identifier: 02:8B:02:07:73:71:3B:2C:53:D0:68:E3:42:E9:3F:C7:AA:DF:AE:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/U4bNdKhTLh8siEHweWkdXnpGwFQ.asa
Signing time:             Wed 12 Aug 2026 16:02:51 +0000
ASPA not before:          Wed 12 Aug 2026 16:02:51 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208051
Providers:                AS: 34872
                          AS: 59436
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:b6:50:61:66:ff:36:bc:86:ac:93:21:e4:ff:1e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028b020773713b2c53d068e342e93fc7aadfaee2
        Validity
            Not Before: Aug 12 16:02:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5386cd74a8532e1f2c8841f079691d5e7a46c054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:36:55:78:b0:c4:ac:0d:a5:45:2c:86:79:ca:
                    7d:30:7b:40:6b:4d:24:db:2c:d1:47:2a:a1:85:e6:
                    63:56:6f:2a:29:ad:1b:c9:29:59:40:6d:7a:b9:18:
                    0d:ac:7e:e9:4f:7d:59:9e:b7:ae:f8:f2:f0:fc:87:
                    fc:c4:f1:ae:1d:49:bc:39:51:06:97:e1:d3:ba:fc:
                    d7:3e:cd:9c:de:7a:54:86:ce:46:10:6a:1f:be:23:
                    49:36:3a:fc:8b:ae:ca:44:0b:98:2e:68:2f:80:da:
                    a1:06:8c:2b:64:4c:c0:8f:d8:aa:33:80:95:b2:ea:
                    67:6b:75:2e:62:cd:25:4a:36:22:04:68:db:71:e8:
                    5a:6a:17:52:8e:27:4c:00:71:63:1c:4b:0e:26:3a:
                    a4:8a:d1:c3:fd:ba:8d:b6:f4:57:b4:6e:78:f2:40:
                    eb:16:3e:2f:f3:7d:2f:26:7a:85:3b:cd:48:a2:f8:
                    a4:08:47:26:e1:89:9d:04:af:c6:2d:07:f2:8a:87:
                    54:89:0d:23:ac:d6:0e:13:92:a2:48:ff:e5:c4:c0:
                    6d:85:5a:2c:51:fd:e6:ec:ad:b5:b9:2f:f1:83:65:
                    14:a2:67:49:06:80:60:2b:fa:ef:3f:6b:a4:01:21:
                    d7:15:6c:4b:7d:76:c8:1f:40:13:dd:15:2e:7f:df:
                    75:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:86:CD:74:A8:53:2E:1F:2C:88:41:F0:79:69:1D:5E:7A:46:C0:54
            X509v3 Authority Key Identifier:
                keyid:02:8B:02:07:73:71:3B:2C:53:D0:68:E3:42:E9:3F:C7:AA:DF:AE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AosCB3NxOyxT0GjjQuk_x6rfruI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/U4bNdKhTLh8siEHweWkdXnpGwFQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b370c2-d46b-47b5-af28-645680e92fd4/1/AosCB3NxOyxT0GjjQuk_x6rfruI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208051

    Signature Algorithm: sha256WithRSAEncryption
         72:98:48:50:da:86:ed:90:09:9f:fd:8d:78:79:d9:95:e5:7b:
         27:52:0f:27:e4:ac:ff:99:7f:52:51:02:27:51:36:39:a7:4c:
         bb:c4:cd:a3:25:3c:dc:e8:91:49:20:ab:c4:f2:32:bc:c5:56:
         7b:43:fb:c8:c4:9c:59:06:48:db:86:25:4e:14:be:34:f9:d3:
         f6:f8:95:cd:1d:e0:ab:37:ce:63:de:9f:f6:b2:19:89:98:10:
         e4:0e:01:6d:eb:9f:b1:ee:cf:18:4d:b6:e8:7d:17:26:9e:f1:
         02:c7:3c:a6:08:e6:74:b9:ea:ef:1b:ed:74:d3:c0:95:25:4b:
         70:ac:93:81:2e:31:2b:74:d5:05:fc:a6:be:b5:5a:f1:f8:ff:
         ca:a9:f4:38:73:ce:b2:63:a2:38:57:42:e8:0b:cf:04:38:17:
         0f:86:1e:bb:0b:17:49:9b:04:b9:e2:16:c1:84:d7:e2:c2:84:
         cd:08:9b:50:59:00:4b:be:bb:a6:23:88:25:b8:9d:ab:3b:98:
         fa:51:f2:1b:14:ba:29:63:cf:95:eb:30:1b:e5:81:a5:07:b2:
         08:ae:67:e3:6a:ae:f8:16:13:20:19:8f:c1:b1:4d:a8:24:07:
         b8:92:85:61:b9:23:5c:f3:cb:32:00:09:0e:68:9f:1d:f8:ac:
         90:74:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:03 2026 by rpki-client