Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/F354eI049VK49q6Qgm7U8i60b2s.asa
File:                     F354eI049VK49q6Qgm7U8i60b2s.asa (raw, json)
Hash identifier:          pA+2lvFRT5MH4svMFLwsCGwy8FSdH8pLNuayp6USO0E=
Subject key identifier:   17:7E:78:78:8D:38:F5:52:B8:F6:AE:90:82:6E:D4:F2:2E:B4:6F:6B
Certificate issuer:       /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial:       019F190123C447BF52DD794CB8A24D83B895
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/F354eI049VK49q6Qgm7U8i60b2s.asa
Signing time:             Tue 30 Jun 2026 14:48:52 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:52 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202361
Providers:                AS: 197301
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:23:c4:47:bf:52:dd:79:4c:b8:a2:4d:83:b8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1a323546484220cb402063380f4016369262acf
        Validity
            Not Before: Jun 30 14:48:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=177e78788d38f552b8f6ae90826ed4f22eb46f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:62:6b:46:f5:68:5c:18:c7:7b:3b:c4:af:
                    06:c2:53:73:6a:d3:80:82:87:16:bd:0f:27:da:57:
                    f4:b8:e0:85:ff:b4:ad:96:ee:bc:7d:59:4c:1d:86:
                    96:03:3f:82:28:3e:1c:57:81:81:a7:fc:a8:1a:3b:
                    8b:65:70:f1:ab:e7:7b:80:6b:c1:c3:69:97:32:49:
                    af:c6:16:12:08:61:e5:97:cd:66:a7:bf:00:9c:35:
                    3a:24:6d:d4:7f:e3:46:67:b7:ce:40:b8:ed:de:cf:
                    c9:b5:2a:62:e8:cf:1b:bc:1b:cd:10:09:b9:e9:40:
                    0d:ef:b6:30:65:ce:95:4f:7a:fe:bd:62:c2:08:7b:
                    1f:be:f7:19:8e:99:56:ab:26:14:9a:e6:dc:7a:18:
                    02:b4:ea:3e:08:59:39:35:a5:51:ce:11:e7:4e:0e:
                    97:28:a2:48:0b:e7:bd:41:e0:99:32:8e:04:f6:f8:
                    8d:b3:93:9a:10:3e:32:05:cd:60:92:b6:6c:5d:b9:
                    8a:d9:b6:47:ed:60:53:c4:ee:88:13:3f:ba:44:f7:
                    79:45:65:6a:2e:62:1f:39:16:c2:a5:3b:78:ba:e2:
                    d6:dd:b9:60:7b:7a:a1:89:3d:e7:9c:0d:e8:e1:10:
                    c6:ee:6d:1e:4a:dc:3c:0f:e1:4b:9c:0d:67:9e:68:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7E:78:78:8D:38:F5:52:B8:F6:AE:90:82:6E:D4:F2:2E:B4:6F:6B
            X509v3 Authority Key Identifier:
                keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/F354eI049VK49q6Qgm7U8i60b2s.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202361

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:cc:78:d9:e2:9c:8a:16:84:5f:a5:e3:0d:e6:7a:66:52:
         c3:ab:d2:3b:27:e7:1c:2b:c5:9b:3e:07:c0:bd:41:b5:35:95:
         66:06:a4:15:6b:eb:de:aa:bd:f0:c3:f0:cf:89:75:0f:79:db:
         6a:da:32:25:c1:95:9f:ca:7f:ad:08:33:d2:63:85:61:ad:dc:
         1e:64:b9:68:13:33:66:b2:d5:93:0a:b0:13:b1:66:4a:d2:b7:
         e2:e1:10:29:cf:44:88:a6:f6:6d:17:e4:3d:54:cb:0e:3d:46:
         98:ea:52:9b:f0:69:bd:8d:99:b4:01:c0:a5:b9:06:02:8a:b0:
         b6:3a:01:8d:4a:25:19:8d:de:5b:7e:52:30:2b:d9:9c:82:57:
         1d:ff:2e:b4:87:63:56:7a:cd:0f:5b:91:d7:c1:a2:00:31:55:
         63:d5:ef:ea:05:42:a8:49:30:7b:f9:da:75:a2:77:c7:2d:f8:
         32:f8:dd:71:56:13:5d:91:b2:22:b5:01:06:ed:63:0e:be:ea:
         19:45:09:d8:a9:da:69:f4:9c:05:59:88:a4:b6:75:da:c1:03:
         f3:bc:8f:23:21:c9:d0:ec:0c:73:db:27:7e:84:23:b4:8c:71:
         d4:72:7f:b7:f2:b0:28:73:10:6b:10:43:50:54:6b:b8:4c:4a:
         f7:06:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:13:40 2026 by rpki-client