Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/UUUtC1whdRI5STIYvfXkmK_HTMo.asa
File:                     UUUtC1whdRI5STIYvfXkmK_HTMo.asa (raw, json)
Hash identifier:          jDtYB8uJSjGru6/3szQlk7np7+InlpiKhhz20cT/5xk=
Subject key identifier:   51:45:2D:0B:5C:21:75:12:39:49:32:18:BD:F5:E4:98:AF:C7:4C:CA
Certificate issuer:       /CN=df46d49cc34767f8d024aff295ad6a932e7915e0
Certificate serial:       019E27887C654DEE284053B316D3521DC97C
Authority key identifier: DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/UUUtC1whdRI5STIYvfXkmK_HTMo.asa
Signing time:             Thu 14 May 2026 17:28:36 +0000
ASPA not before:          Thu 14 May 2026 17:28:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            60557
Providers:                AS: 6939
                          AS: 57866
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:27:88:7c:65:4d:ee:28:40:53:b3:16:d3:52:1d:c9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df46d49cc34767f8d024aff295ad6a932e7915e0
        Validity
            Not Before: May 14 17:28:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=51452d0b5c21751239493218bdf5e498afc74cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:65:4c:e9:d3:19:4c:b8:98:05:2e:85:66:a0:
                    59:ec:0d:cc:0b:17:72:7a:51:09:73:5a:13:fa:0c:
                    f7:19:ad:74:e1:7a:0e:ee:02:d3:4c:9a:5a:62:5f:
                    61:03:98:0e:29:5e:c7:c1:f6:30:de:56:a1:87:d1:
                    95:50:2d:89:2b:05:05:76:5c:06:e6:6e:ec:a3:a2:
                    62:a3:34:c5:41:73:f8:bc:7e:6a:a4:0c:c4:65:11:
                    3f:7c:12:59:ad:79:76:38:5f:5a:66:29:fe:b8:8f:
                    c4:e2:7c:2f:4b:b5:a4:c0:53:d3:b1:c1:38:44:be:
                    82:02:be:af:03:ac:52:e1:a5:cf:e5:39:c2:51:61:
                    ec:e9:b7:a6:82:1a:38:05:3f:8c:02:0c:11:85:1f:
                    43:90:43:84:b1:6f:ab:06:45:bb:5f:d6:eb:71:e8:
                    ec:0d:1f:cb:b4:ae:3d:8e:1a:de:05:5c:f6:99:3e:
                    24:30:22:c1:2e:b1:35:dc:8b:03:67:21:31:28:ca:
                    30:c9:d6:b8:15:05:ae:5e:75:2d:62:2d:23:b6:0a:
                    b1:b7:1a:f0:f2:05:ee:84:db:83:77:5e:a9:a6:be:
                    c6:d3:e5:8c:68:5f:c2:12:43:e8:4c:42:61:68:66:
                    0f:d1:88:84:90:cf:05:5a:3e:82:5b:4a:46:dc:d3:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:45:2D:0B:5C:21:75:12:39:49:32:18:BD:F5:E4:98:AF:C7:4C:CA
            X509v3 Authority Key Identifier:
                keyid:DF:46:D4:9C:C3:47:67:F8:D0:24:AF:F2:95:AD:6A:93:2E:79:15:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30bUnMNHZ_jQJK_yla1qky55FeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/UUUtC1whdRI5STIYvfXkmK_HTMo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9b973d-1f2f-4c77-9dd0-1f732046b74c/1/30bUnMNHZ_jQJK_yla1qky55FeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60557

    Signature Algorithm: sha256WithRSAEncryption
         43:a9:c3:a2:0f:f4:99:49:af:35:c1:d9:7f:35:dd:f5:ef:f7:
         e3:99:5f:48:56:af:9d:e4:ea:f0:3c:75:3c:ff:47:96:24:16:
         b8:91:b4:ed:c3:a1:09:b4:d9:a3:a4:5c:89:4e:6a:5a:76:0e:
         3e:54:14:68:2b:1c:9d:d8:27:e5:73:11:c5:58:c1:df:de:2e:
         ea:9a:b0:28:94:d7:14:d9:3a:09:73:54:66:47:d5:2b:47:0d:
         32:01:ff:1f:b9:3d:a9:17:9c:d3:04:2a:92:a6:c2:87:e5:f2:
         83:4d:ca:06:14:d6:03:a2:f6:38:4e:c1:40:71:e2:3a:bb:a7:
         5a:52:99:61:70:18:d0:96:7d:a2:41:a0:f4:cf:fd:e0:93:bc:
         de:56:c1:20:f1:6b:51:b4:73:c0:7d:85:1a:8b:6d:c5:b6:2a:
         6b:8a:10:18:23:a7:ff:ae:33:1d:07:ee:09:2b:6b:4e:91:2f:
         97:95:db:33:ab:4f:d9:ca:0c:b9:fa:84:d7:a7:39:c1:e4:06:
         77:51:fe:b8:a0:7f:f4:96:b0:77:78:46:da:85:cd:f8:a1:67:
         31:fa:88:aa:d9:a9:cb:54:69:8e:7a:76:63:25:85:78:e8:5f:
         60:fc:8e:25:68:df:b3:a8:3b:78:4f:8c:94:a9:9b:3a:ab:57:
         7d:c2:11:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:35:53 2026 by rpki-client