Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/LBBCj9eAj0hB_5xRYplilCxcHYY.asa
File:                     LBBCj9eAj0hB_5xRYplilCxcHYY.asa (raw, json)
Hash identifier:          y8LwQ/UWNPdNPNCfTbSgNO4/xdvkyncyP+YFWUryREs=
Subject key identifier:   2C:10:42:8F:D7:80:8F:48:41:FF:9C:51:62:99:62:94:2C:5C:1D:86
Certificate issuer:       /CN=ead21f7b5b78abe8dbe782bb750ffaf0d6ca6eaf
Certificate serial:       019F0823423BB006D9C78E702A3087F637A2
Authority key identifier: EA:D2:1F:7B:5B:78:AB:E8:DB:E7:82:BB:75:0F:FA:F0:D6:CA:6E:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tIfe1t4q-jb54K7dQ_68NbKbq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/LBBCj9eAj0hB_5xRYplilCxcHYY.asa
Signing time:             Sat 27 Jun 2026 08:12:36 +0000
ASPA not before:          Sat 27 Jun 2026 08:12:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219348
Providers:                AS: 214915
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/6tIfe1t4q-jb54K7dQ_68NbKbq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/6tIfe1t4q-jb54K7dQ_68NbKbq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6tIfe1t4q-jb54K7dQ_68NbKbq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 18:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:08:23:42:3b:b0:06:d9:c7:8e:70:2a:30:87:f6:37:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead21f7b5b78abe8dbe782bb750ffaf0d6ca6eaf
        Validity
            Not Before: Jun 27 08:12:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2c10428fd7808f4841ff9c51629962942c5c1d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:44:4b:f0:2c:73:a0:51:fa:a5:9c:69:3a:
                    13:f7:b8:b7:b2:ea:3b:f2:5e:85:9d:93:4d:36:b4:
                    3d:72:16:88:18:52:17:03:68:b4:b9:5f:e4:46:2b:
                    4c:06:06:0b:aa:ed:9a:09:56:65:cf:a6:96:77:1a:
                    17:58:f0:9b:b3:4d:d3:dc:46:25:d3:86:05:d1:87:
                    ae:7d:ee:04:d6:8b:66:ae:2b:32:1a:b6:54:a5:ea:
                    d4:e8:2e:44:6b:85:e4:0f:a9:8a:83:57:71:56:c0:
                    2d:8e:68:f1:61:43:71:db:40:12:86:09:6a:85:e1:
                    66:20:14:37:79:b7:84:78:64:9b:15:c1:e3:46:dd:
                    15:28:46:fa:9b:0b:53:0f:bf:9b:88:4e:c0:54:51:
                    bb:f0:90:ff:02:07:3e:30:ef:7d:c8:53:b4:74:c0:
                    b3:77:6c:3c:be:a4:3b:1d:46:fb:d6:9b:38:72:8b:
                    82:5a:99:5d:fa:d1:7c:09:f6:e1:db:c5:0b:16:2f:
                    83:66:69:90:e2:f7:3a:09:6c:ce:3f:c1:39:cd:f6:
                    36:21:65:65:0b:ca:4e:fa:71:d5:4d:33:68:81:0a:
                    1c:9a:f6:da:29:33:1a:e7:0b:80:d9:12:fe:4c:48:
                    0f:82:1c:d1:77:a0:8a:c2:22:af:14:08:7c:0f:84:
                    a8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:10:42:8F:D7:80:8F:48:41:FF:9C:51:62:99:62:94:2C:5C:1D:86
            X509v3 Authority Key Identifier:
                keyid:EA:D2:1F:7B:5B:78:AB:E8:DB:E7:82:BB:75:0F:FA:F0:D6:CA:6E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIfe1t4q-jb54K7dQ_68NbKbq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/LBBCj9eAj0hB_5xRYplilCxcHYY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/08f470-8fc2-432f-8ec8-ec1118dfce93/1/6tIfe1t4q-jb54K7dQ_68NbKbq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219348

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:ca:7c:b5:10:88:50:63:01:03:df:53:c2:6f:e6:91:8a:
         c4:1e:de:8c:b5:32:aa:df:6c:30:e8:2e:af:ee:45:fa:77:50:
         b1:d3:ad:9b:17:72:eb:4b:17:52:96:b3:61:b1:43:c2:37:3a:
         8a:5f:43:54:c6:47:2f:e1:24:c6:eb:f1:03:7c:45:72:d7:fa:
         9f:c1:86:64:f5:40:e8:b1:75:d6:4d:f3:36:45:6c:64:77:06:
         59:42:1c:34:79:c1:3a:9b:fa:93:00:60:c6:15:9f:5a:c3:b9:
         49:54:0b:1e:49:32:22:23:92:3c:d8:22:83:f0:95:f0:17:fa:
         ac:47:f5:63:ea:77:c5:33:35:54:6f:a7:a8:01:da:7b:7b:9a:
         fd:22:3f:49:2b:3a:55:97:9a:50:70:a6:a1:08:fc:af:20:8d:
         63:af:c0:e1:07:57:dd:e0:5b:8a:2c:fc:e9:d4:47:00:00:77:
         b4:83:55:bf:5c:92:8b:20:d2:73:e7:76:c9:57:84:34:a7:95:
         92:4b:33:5d:b8:80:db:fc:d4:e7:43:b3:bf:59:ea:30:60:f0:
         5b:5b:84:88:14:d2:3a:f5:1a:96:ff:17:62:1e:b5:0c:06:66:
         4f:39:82:2c:d7:21:b2:ac:3c:71:71:fe:7e:63:8c:76:8a:2f:
         07:83:c7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:58:56 2026 by rpki-client