Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/K9HtslD4-Q5JyEO9pkEOkyw-K68.asa
File:                     K9HtslD4-Q5JyEO9pkEOkyw-K68.asa (raw, json)
Hash identifier:          70vFW2SLztWksf2rAu29AxeBUhLXrUJ+HImScROyRBU=
Subject key identifier:   2B:D1:ED:B2:50:F8:F9:0E:49:C8:43:BD:A6:41:0E:93:2C:3E:2B:AF
Certificate issuer:       /CN=304e59a223f4bcb823492fb1096c3a82310c03da
Certificate serial:       019DD3FEE078154664CB654949BD3B14D477
Authority key identifier: 30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/K9HtslD4-Q5JyEO9pkEOkyw-K68.asa
Signing time:             Tue 28 Apr 2026 12:09:49 +0000
ASPA not before:          Tue 28 Apr 2026 12:09:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            59808
Providers:                AS: 12307
                          AS: 57118
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d3:fe:e0:78:15:46:64:cb:65:49:49:bd:3b:14:d4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304e59a223f4bcb823492fb1096c3a82310c03da
        Validity
            Not Before: Apr 28 12:09:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2bd1edb250f8f90e49c843bda6410e932c3e2baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:a7:9a:1d:7e:03:a2:40:14:37:77:09:80:
                    f8:1c:20:0a:ae:b5:be:30:b1:6a:0a:60:2f:58:91:
                    e5:e8:f8:aa:e2:09:e8:79:78:2d:c3:59:6e:8d:fc:
                    70:06:46:5a:98:9d:53:4e:2e:14:4f:19:20:e5:a3:
                    ea:06:e6:de:69:f3:2c:82:ed:04:e6:8f:7e:be:18:
                    e5:96:b7:07:c8:d7:e5:e6:1e:81:7a:c4:ed:d8:12:
                    c8:a0:f8:43:4a:70:a9:0e:01:71:85:06:85:ae:9f:
                    b7:2c:6e:41:3a:20:a7:84:97:06:09:9a:b8:bd:ee:
                    dc:e6:47:5c:a5:f7:82:de:9b:b5:f7:20:03:41:be:
                    cc:30:a4:3f:d3:e2:83:48:2f:24:bd:2b:bb:65:e9:
                    56:f6:46:c9:56:f4:63:eb:c5:f4:e1:d4:f9:48:68:
                    0a:47:2b:fe:f8:67:d2:57:43:86:99:c4:44:b2:1d:
                    35:6e:79:8d:ca:17:08:9e:7e:0b:4b:b7:8c:1a:32:
                    b6:d9:ad:cd:89:d9:c4:f7:05:07:43:c2:21:a2:fc:
                    72:c3:55:36:ce:b1:4f:5e:14:d4:3e:85:c6:88:87:
                    39:c8:3e:43:3d:b4:24:2e:45:6a:fb:6f:2c:93:69:
                    40:40:e1:66:e8:ae:87:5a:f5:69:c6:db:0c:99:1a:
                    0f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D1:ED:B2:50:F8:F9:0E:49:C8:43:BD:A6:41:0E:93:2C:3E:2B:AF
            X509v3 Authority Key Identifier:
                keyid:30:4E:59:A2:23:F4:BC:B8:23:49:2F:B1:09:6C:3A:82:31:0C:03:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/K9HtslD4-Q5JyEO9pkEOkyw-K68.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f536cd-943f-4554-9f17-344cc502f1bd/1/ME5ZoiP0vLgjSS-xCWw6gjEMA9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59808

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:f7:00:d4:b7:87:31:fc:5a:9f:59:fc:4e:6b:57:84:a7:
         98:d2:cd:2d:e1:00:e8:d0:c0:e0:05:27:0b:29:54:d8:5a:16:
         80:18:12:96:77:70:31:32:63:d4:9b:23:a8:5e:a1:75:b1:0b:
         22:ea:56:bd:00:07:12:f1:4c:00:39:d2:bb:a8:86:51:e4:81:
         dc:39:c4:fe:e0:38:c1:8c:82:65:8a:de:db:f4:30:da:52:6b:
         3f:82:b8:70:61:70:a6:4b:9c:cd:4a:fa:8a:59:9f:bd:26:33:
         87:a0:22:70:ea:57:6e:80:0a:22:c5:2c:52:85:d8:b4:2a:1f:
         d7:39:fb:be:a7:3f:59:ab:1e:dc:7c:b7:80:52:19:46:05:66:
         51:04:95:6e:6d:d2:e2:3d:f4:21:41:d1:95:79:24:fd:f2:d4:
         ba:e2:02:44:b1:77:55:a6:94:dd:85:f8:96:fd:76:1f:82:f9:
         2e:14:48:f9:16:d6:03:4f:61:ed:e3:e2:9c:9e:e7:65:74:db:
         08:d0:ed:cd:52:4e:4f:9d:ec:05:ab:78:6c:fa:9a:7a:77:4d:
         70:35:ce:a9:a7:68:72:76:3a:79:ff:ce:19:4f:75:b3:35:45:
         15:58:22:64:c9:4b:de:54:79:44:e4:54:48:6b:cc:a3:60:fc:
         df:73:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:39 2026 by rpki-client