Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/c7fgla_dSX-z5KFPVPyl6usE9oA.asa
File:                     c7fgla_dSX-z5KFPVPyl6usE9oA.asa (raw, json)
Hash identifier:          m9vQeSG4KsIradAMsd9ae2Gv66PLCXXvhHDN7ENT3BQ=
Subject key identifier:   73:B7:E0:95:AF:DD:49:7F:B3:E4:A1:4F:54:FC:A5:EA:EB:04:F6:80
Certificate issuer:       /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial:       019DD8CA97EA95BFA0C7776BD1225CDF6574
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/c7fgla_dSX-z5KFPVPyl6usE9oA.asa
Signing time:             Wed 29 Apr 2026 10:30:49 +0000
ASPA not before:          Wed 29 Apr 2026 10:30:49 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208456
Providers:                AS: 28761
                          AS: 35816
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 04:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d8:ca:97:ea:95:bf:a0:c7:77:6b:d1:22:5c:df:65:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
        Validity
            Not Before: Apr 29 10:30:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=73b7e095afdd497fb3e4a14f54fca5eaeb04f680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:06:df:06:4a:dc:f6:7d:19:21:8e:5f:ad:
                    85:b4:ae:e6:bc:d2:82:ed:c4:cd:d3:2a:80:96:17:
                    43:58:a9:8d:02:5d:d3:9a:88:56:9b:8a:0f:2a:17:
                    88:12:21:d6:36:62:71:a7:a2:dd:38:63:a4:57:04:
                    ab:4e:a1:16:d4:aa:70:4f:bb:f5:d6:a3:8c:87:4f:
                    d2:b3:73:61:bd:52:e5:28:a6:48:e7:17:cd:f3:29:
                    b4:8a:55:78:bc:83:e5:20:bd:2b:93:66:85:87:34:
                    42:1e:01:32:82:33:4e:c6:61:cd:e9:e0:de:f9:92:
                    b8:19:ed:61:4f:9b:66:24:1a:78:ec:7b:f1:59:28:
                    43:80:50:04:b6:aa:43:7e:c3:08:85:08:92:0e:78:
                    59:32:a5:bb:d5:5f:a7:94:db:3e:bf:90:d3:23:5b:
                    01:5d:74:26:c5:1e:ed:6d:00:6b:b4:d1:70:35:87:
                    8a:37:0e:8e:9b:30:b3:52:6a:9a:72:ea:ca:02:1d:
                    fc:01:0d:15:18:72:21:13:d2:9b:ca:16:08:53:1c:
                    a9:7e:28:e7:68:a1:06:e9:41:c1:3e:3a:65:7b:4d:
                    89:4c:50:83:4a:81:5a:11:04:57:ea:ff:fa:69:fb:
                    84:3a:64:0c:b1:1d:b4:cb:8d:2b:7b:b6:1e:a4:e4:
                    60:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B7:E0:95:AF:DD:49:7F:B3:E4:A1:4F:54:FC:A5:EA:EB:04:F6:80
            X509v3 Authority Key Identifier:
                keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/c7fgla_dSX-z5KFPVPyl6usE9oA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208456

    Signature Algorithm: sha256WithRSAEncryption
         50:dd:43:c0:5c:a8:f7:10:5b:a3:69:9c:8c:22:9a:b0:f0:9b:
         78:49:34:96:d6:4c:ac:cf:27:c6:cc:1f:64:59:9c:fa:cc:48:
         03:d5:57:b3:02:12:89:5b:ce:09:e6:a3:9e:a6:74:fe:6b:99:
         79:39:9e:a7:d1:4a:a2:4f:07:d5:54:f1:4d:d3:5e:fe:fe:f2:
         6b:ca:c7:d9:2b:79:3a:ed:7d:ee:9a:7a:c2:11:ba:40:88:e1:
         fa:39:22:52:4b:f7:e2:f5:30:f9:c5:d1:c6:e5:9e:31:3c:f1:
         c9:d5:de:ec:42:54:cf:f2:eb:0c:d8:38:8e:d1:96:32:42:e2:
         b8:7b:bb:4f:ab:4f:35:2a:63:10:e8:6f:4d:70:c4:81:31:84:
         b1:ce:fc:23:d3:76:0a:74:d8:c5:62:c0:06:1d:92:2a:32:42:
         bb:fd:d7:ce:65:b4:cc:56:e9:da:6c:62:55:bd:34:d0:30:38:
         a2:96:1a:63:db:b3:fb:69:8e:48:de:12:6f:3b:66:01:02:d6:
         90:da:19:e3:53:bf:b7:4a:ea:c0:9d:69:c7:bb:c3:9e:74:8b:
         e0:53:31:dd:62:57:21:42:77:e5:4c:bd:6e:22:93:30:f3:57:
         5e:41:6b:02:6a:6f:f3:a7:f6:37:64:23:12:12:dd:3a:fd:86:
         cc:06:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:16 2026 by rpki-client