Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/V5JJ4RiqOPReWHb_eastqKlSys0.asa
File:                     V5JJ4RiqOPReWHb_eastqKlSys0.asa (raw, json)
Hash identifier:          8oe50I5opY7IEDVyw0umJ4cDotKgODumEz51B2tGhjk=
Subject key identifier:   57:92:49:E1:18:AA:38:F4:5E:58:76:FF:79:AB:2D:A8:A9:52:CA:CD
Certificate issuer:       /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial:       019DC5E92E9EBD5BAACE9D2F3E94B01CB0FE
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/V5JJ4RiqOPReWHb_eastqKlSys0.asa
Signing time:             Sat 25 Apr 2026 18:31:26 +0000
ASPA not before:          Sat 25 Apr 2026 18:31:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            210773
Providers:                AS: 44324
                          AS: 214933
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 06:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c5:e9:2e:9e:bd:5b:aa:ce:9d:2f:3e:94:b0:1c:b0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
        Validity
            Not Before: Apr 25 18:31:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=579249e118aa38f45e5876ff79ab2da8a952cacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:27:ec:a3:1e:64:43:4f:a7:d1:ae:11:5c:
                    98:17:24:d5:15:29:b9:b8:fe:f7:c1:f2:57:a9:24:
                    b8:14:88:c8:7c:e5:99:90:98:3b:13:f4:8b:66:38:
                    af:ac:72:a6:f9:3f:73:10:75:24:4a:39:68:0a:67:
                    db:97:ad:d5:ea:ae:3d:61:b9:a1:28:e1:ba:9b:33:
                    54:21:27:da:5e:4f:06:cf:64:33:66:ff:1c:c3:40:
                    39:d1:ba:d7:64:ec:ab:e6:fa:14:07:fd:61:58:b4:
                    a7:0d:1e:e0:f5:64:ff:62:1f:bc:f0:0a:a8:d6:59:
                    c5:16:fd:91:e4:df:fa:85:9a:a4:d5:45:1e:fb:2f:
                    0e:b3:75:4a:52:e1:56:cc:bb:11:5c:16:7f:8f:9b:
                    2b:05:e0:80:d5:e5:dd:1e:58:83:b3:32:56:c3:a4:
                    23:da:3e:e9:cd:b9:6c:55:65:ab:5c:10:1f:d6:af:
                    82:19:a6:2f:4c:b7:4d:0f:15:e7:22:f4:94:0d:1d:
                    3f:31:2a:a0:da:89:c5:b0:84:e8:44:fd:31:d3:91:
                    fd:a5:db:e8:42:ff:98:46:c5:8e:0b:af:1a:d2:cd:
                    75:66:6f:fb:7d:8f:96:40:98:5d:79:44:19:aa:df:
                    75:36:d4:47:44:be:6b:c4:15:1f:72:b1:1a:c7:ed:
                    f0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:92:49:E1:18:AA:38:F4:5E:58:76:FF:79:AB:2D:A8:A9:52:CA:CD
            X509v3 Authority Key Identifier:
                keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/V5JJ4RiqOPReWHb_eastqKlSys0.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210773

    Signature Algorithm: sha256WithRSAEncryption
         01:80:35:d8:da:f2:39:ff:25:bc:de:57:9e:fb:05:78:d2:c3:
         54:e0:24:2b:c8:23:fd:7c:ce:ad:03:63:f8:14:9d:37:6e:30:
         4f:9c:11:00:4a:ab:3b:67:d4:d1:80:e0:28:33:1d:5e:cf:f2:
         5d:9a:a6:f3:e9:d0:8b:98:6f:e3:88:ef:15:f3:3f:e0:a9:25:
         b4:25:9f:48:05:6d:19:fc:44:69:c6:b5:48:85:13:1c:15:00:
         f3:56:a9:dc:01:4b:a7:85:0f:ba:7f:b3:d3:c6:95:07:72:29:
         59:48:80:36:68:77:38:77:33:7a:ee:09:08:d8:43:6e:6c:a7:
         83:ad:13:e6:63:2d:bc:36:2c:df:96:7b:aa:35:e9:a5:84:ed:
         0e:b6:7f:87:7f:e9:f6:5f:85:9a:d2:f4:5f:5a:84:55:0f:61:
         4d:c9:c7:d6:3a:76:65:8f:43:c6:4b:38:91:31:af:f9:55:ec:
         db:cd:2d:de:f0:3c:e7:f9:47:57:e7:e8:c4:0f:e6:1a:0a:56:
         2f:9b:e1:61:27:fd:3d:1f:f6:00:5d:ad:c2:cb:67:f7:aa:84:
         83:e0:d2:fd:6a:37:23:2d:89:70:ad:4c:a1:0a:91:35:36:56:
         c4:74:f4:ce:18:65:d2:cf:36:ec:e7:86:d3:9b:ec:2d:26:48:
         45:e0:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:11 2026 by rpki-client