Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/90xEgVZejrYurMIAxT-ide4W5w8.asa
File:                     90xEgVZejrYurMIAxT-ide4W5w8.asa (raw, json)
Hash identifier:          NBidMC6eVV6gEylJ444MZYBsssGoS33egENq9NcJl4M=
Subject key identifier:   F7:4C:44:81:56:5E:8E:B6:2E:AC:C2:00:C5:3F:A2:75:EE:16:E7:0F
Certificate issuer:       /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial:       019CC7E43214C953F74CF47F02F6B819FB07
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/90xEgVZejrYurMIAxT-ide4W5w8.asa
Signing time:             Sat 07 Mar 2026 10:42:26 +0000
ASPA not before:          Sat 07 Mar 2026 10:42:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214891
Providers:                AS: 49418
                          AS: 207567
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:e4:32:14:c9:53:f7:4c:f4:7f:02:f6:b8:19:fb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
        Validity
            Not Before: Mar  7 10:42:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f74c4481565e8eb62eacc200c53fa275ee16e70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:ca:ea:d0:02:d6:7a:41:76:78:c7:c4:3c:
                    fb:f0:3f:ad:87:8d:c4:25:7f:21:80:80:f6:56:49:
                    60:aa:a0:e4:3d:db:6e:84:46:a1:d1:09:7e:22:37:
                    35:96:88:17:46:23:27:d1:a3:2f:18:e4:92:f8:17:
                    d9:76:d7:83:36:cc:7a:46:09:61:b6:c6:96:a3:88:
                    75:34:ca:25:2c:c2:d3:87:34:29:37:cb:cd:c5:7a:
                    73:ef:26:e9:be:c6:a1:37:16:ea:fb:3f:0f:1d:05:
                    02:fb:f0:84:12:5c:ec:dc:82:3e:b4:4a:c1:8e:66:
                    1a:72:55:1d:e5:8d:60:c5:6d:6e:b3:d2:3e:ae:1d:
                    6e:73:a5:e8:a8:1a:9b:ea:01:ef:b5:cb:3d:05:aa:
                    63:b3:f2:64:18:e2:45:e4:a2:fa:fb:12:27:3c:e0:
                    bb:2e:d4:6f:b3:9b:05:4f:96:94:d6:a0:1c:45:1f:
                    d4:f0:05:ae:9d:2f:0e:dc:73:12:e7:26:be:c9:f7:
                    c9:d7:40:f8:9c:12:2d:30:84:f9:54:c4:e8:6b:44:
                    c3:d9:25:5e:4a:20:21:97:19:33:82:24:01:3b:4e:
                    6a:16:5f:92:0a:e1:49:78:64:b8:1d:a8:57:47:f5:
                    c2:c6:55:63:90:04:80:63:65:06:8f:ef:9b:d2:54:
                    33:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4C:44:81:56:5E:8E:B6:2E:AC:C2:00:C5:3F:A2:75:EE:16:E7:0F
            X509v3 Authority Key Identifier:
                keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/90xEgVZejrYurMIAxT-ide4W5w8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214891

    Signature Algorithm: sha256WithRSAEncryption
         3f:e3:dd:4d:41:d2:4d:5b:28:f9:15:86:a2:e1:44:bc:14:46:
         32:ac:52:59:c1:15:d1:8f:b0:80:ad:fd:7f:11:4b:e3:df:cf:
         38:4e:00:22:ae:92:b4:d6:31:b4:b8:30:0c:21:ce:f0:73:ec:
         34:ac:dd:c2:32:6a:a8:a5:58:70:94:b3:e6:d4:45:d9:22:90:
         b3:9f:93:77:0f:5a:6f:56:a1:98:ce:6a:c0:2b:74:57:0e:69:
         2d:ad:5a:ee:96:b8:10:64:e4:6a:f8:d2:da:20:c4:1d:a9:71:
         fd:b0:bb:bc:3c:ca:34:c7:32:bf:71:63:7c:03:06:8d:af:b3:
         dc:80:52:3e:82:0f:cf:96:9a:a6:f6:c2:d0:bf:d9:cd:39:92:
         60:6b:b0:f3:5e:ca:7c:6f:31:a5:de:95:be:30:13:92:b1:2b:
         68:18:b3:e0:64:91:e6:8b:85:52:f0:77:ac:68:fa:d1:ba:1d:
         98:30:fb:ae:f2:ec:cc:b8:19:e5:02:17:2f:86:90:32:c8:be:
         8f:ac:fc:07:ea:9b:7b:65:bc:a1:93:78:b6:2c:c5:d7:d7:ec:
         f1:75:f5:19:f3:0a:d6:e6:91:14:6d:70:1b:13:4b:14:c6:4c:
         85:2a:ab:4f:70:2e:fd:6a:cc:4f:c9:3d:97:c7:d1:9b:fe:da:
         ca:6f:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:02 2026 by rpki-client