Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/OIgIi-U_xIeptQTGxuDwpFFyZdw.asa
File:                     OIgIi-U_xIeptQTGxuDwpFFyZdw.asa (raw, json)
Hash identifier:          Xj0wQ0ZCPeJQc6NTbJQHD9KBRyvX3ANB2nHMaSO0P6k=
Subject key identifier:   38:88:08:8B:E5:3F:C4:87:A9:B5:04:C6:C6:E0:F0:A4:51:72:65:DC
Certificate issuer:       /CN=1721b760b60f722951b92527a82ffd3a5ea38459
Certificate serial:       019E4B49EEAEEF9234237DF2F6D2BFB1BA99
Authority key identifier: 17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/OIgIi-U_xIeptQTGxuDwpFFyZdw.asa
Signing time:             Thu 21 May 2026 16:06:36 +0000
ASPA not before:          Thu 21 May 2026 16:06:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202831
Providers:                AS: 6939
                          AS: 31500
                          AS: 35598
                          AS: 49612
                          AS: 62255
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4b:49:ee:ae:ef:92:34:23:7d:f2:f6:d2:bf:b1:ba:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1721b760b60f722951b92527a82ffd3a5ea38459
        Validity
            Not Before: May 21 16:06:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3888088be53fc487a9b504c6c6e0f0a4517265dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:fc:3d:fc:cb:46:1a:a0:9c:a9:1f:82:e1:
                    e8:f7:78:be:ab:0d:18:a2:23:69:1b:38:01:49:b0:
                    c3:83:79:44:dd:6a:d9:67:37:ba:f7:9b:5f:32:85:
                    c7:c2:ea:a6:49:1d:e1:13:bf:c8:85:78:d3:04:5f:
                    16:c6:51:f5:c8:e6:33:b8:52:46:c8:59:43:5b:b0:
                    b9:ea:57:db:3b:c2:14:d0:f5:12:0c:a6:2a:84:ef:
                    aa:cb:5d:0e:19:93:c9:d1:ef:13:08:33:1b:95:b8:
                    cc:bb:73:56:36:a3:e8:71:6d:c4:be:ff:92:ec:07:
                    a5:d2:25:54:55:81:1f:9c:46:e3:9c:f3:be:73:3d:
                    f7:75:34:6f:df:bc:3e:f4:a8:6b:7b:50:1c:a5:6d:
                    32:78:e4:27:7c:0e:f8:9a:cc:a3:cc:01:95:47:d4:
                    94:b8:83:23:92:bd:cd:4a:8f:0e:e6:d4:54:d0:dc:
                    37:72:46:82:55:7d:b2:49:c0:2b:12:ab:a2:da:3d:
                    5f:68:1a:cc:7a:8a:64:8f:ac:9a:6a:98:c0:b9:29:
                    c8:3e:c6:c5:d0:be:73:aa:d5:3c:79:f4:11:e7:c7:
                    24:e6:b9:b1:99:a0:2a:a6:d2:6d:c5:b2:6a:6f:e4:
                    5a:84:56:6b:e0:63:cd:8b:6b:9b:fa:7b:60:63:08:
                    10:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:88:08:8B:E5:3F:C4:87:A9:B5:04:C6:C6:E0:F0:A4:51:72:65:DC
            X509v3 Authority Key Identifier:
                keyid:17:21:B7:60:B6:0F:72:29:51:B9:25:27:A8:2F:FD:3A:5E:A3:84:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyG3YLYPcilRuSUnqC_9Ol6jhFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/OIgIi-U_xIeptQTGxuDwpFFyZdw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/44f4b6-99a5-4aad-9715-a65a67207a54/1/FyG3YLYPcilRuSUnqC_9Ol6jhFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202831

    Signature Algorithm: sha256WithRSAEncryption
         58:c8:94:ea:33:1a:16:70:2b:d9:0d:18:0a:cf:3f:f6:98:ae:
         79:aa:fa:21:3e:e4:f4:8d:a1:5a:7e:de:2d:45:e8:83:89:6b:
         79:4c:5d:6a:87:92:40:c0:54:da:df:cc:f5:5e:26:d0:4c:a0:
         2c:4b:6e:ce:56:eb:62:5f:6b:c8:af:66:16:49:1b:3a:7c:d5:
         e6:0b:68:b9:6e:ea:49:d4:2a:42:d2:1c:c3:ef:93:0a:71:51:
         05:1d:bc:b0:a1:bf:e8:0c:44:3e:15:fe:9f:39:c3:00:bd:7a:
         de:60:bd:cb:1b:04:3e:a0:34:aa:64:c8:69:f2:57:ea:f7:b1:
         6f:cb:04:21:f8:f8:8d:b4:32:56:a2:c7:61:e6:f6:83:ed:67:
         fa:44:47:58:28:f6:0b:b4:2b:fe:6f:df:72:d0:dc:42:d0:7d:
         90:b6:5d:fa:94:a6:73:0e:4c:37:d2:1d:dc:03:0b:17:b7:4b:
         b3:7a:f6:9b:0d:a4:13:9c:45:ab:f8:cd:26:43:97:d9:52:ff:
         f4:8d:dd:95:cd:21:2b:45:c3:ee:b5:dc:9e:ad:f9:19:81:59:
         c9:a3:b0:2d:7c:67:30:fd:63:58:59:ea:0d:61:67:76:8d:d8:
         34:e1:30:d5:4f:43:30:1e:b9:88:cd:f0:0c:85:a8:59:8e:ed:
         77:78:30:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:20:03 2026 by rpki-client