Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/IajiWY47KC-xdpE9hl7yXBD40Wg.asa
File:                     IajiWY47KC-xdpE9hl7yXBD40Wg.asa (raw, json)
Hash identifier:          IS6lAdyQVb+yyai130Xpo7eEvQJV9ci/S8WJsFcymho=
Subject key identifier:   21:A8:E2:59:8E:3B:28:2F:B1:76:91:3D:86:5E:F2:5C:10:F8:D1:68
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       019E88D08363B7274ADC7B36F29F0430F262
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/IajiWY47KC-xdpE9hl7yXBD40Wg.asa
Signing time:             Tue 02 Jun 2026 14:50:26 +0000
ASPA not before:          Tue 02 Jun 2026 14:50:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            214205
Providers:                AS: 6939
                          AS: 11967
                          AS: 197324
                          AS: 205941
                          AS: 210464
                          AS: 212895
                          AS: 213413
                          AS: 214757
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:d0:83:63:b7:27:4a:dc:7b:36:f2:9f:04:30:f2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Jun  2 14:50:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=21a8e2598e3b282fb176913d865ef25c10f8d168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:0b:d8:72:e3:f0:11:56:20:0c:4d:18:98:
                    2a:4d:74:e0:4d:56:40:c8:18:9d:f4:51:12:e7:5d:
                    7e:4f:c8:da:ec:97:c9:46:c0:92:cd:0d:ee:4a:c7:
                    9c:36:f0:2b:f9:bb:db:04:2f:7c:56:44:13:d3:cb:
                    91:d6:5e:ee:99:d6:12:99:9a:1f:92:a4:41:33:ec:
                    33:05:60:a0:4a:a1:d8:68:a4:81:5a:4e:b5:9d:58:
                    75:2b:af:91:99:37:7c:27:62:07:ef:9f:de:18:ef:
                    d5:9c:6e:f3:75:06:71:74:ef:f9:14:84:9b:03:17:
                    b3:95:d6:8e:9d:ea:db:ae:46:3b:b2:ba:98:5f:ae:
                    ce:ac:28:e8:3f:58:58:9b:be:6f:77:4b:49:19:cc:
                    1f:2d:5d:08:ed:0d:ff:db:85:12:f5:a8:d1:f7:53:
                    55:42:b9:67:24:59:7c:06:a4:f2:6b:0b:0c:24:2d:
                    17:12:5a:05:ed:b6:5d:d6:8b:f7:81:e8:f1:39:99:
                    dc:9c:f3:16:a5:f2:2b:8d:25:9c:e8:c6:b2:4a:8a:
                    e1:9c:4d:e1:b8:f7:d3:a4:8e:b4:dc:4c:e4:01:58:
                    61:ef:9b:8d:a4:da:c2:db:a9:8b:fe:23:e3:23:c8:
                    21:e8:75:90:e4:88:30:aa:ae:53:98:6f:35:3d:36:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A8:E2:59:8E:3B:28:2F:B1:76:91:3D:86:5E:F2:5C:10:F8:D1:68
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/IajiWY47KC-xdpE9hl7yXBD40Wg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214205

    Signature Algorithm: sha256WithRSAEncryption
         04:02:ba:a9:00:81:98:68:ed:39:27:1b:61:81:7e:e4:90:a8:
         83:a7:ce:e1:dd:cc:9a:3e:15:e7:41:42:39:9e:fa:67:09:e6:
         dc:9b:7d:2f:38:44:c5:18:73:ac:81:93:74:c6:59:fd:79:53:
         09:f8:00:c2:bf:ae:f5:ec:61:e5:d9:3c:88:e5:08:06:a2:cc:
         e0:28:30:f4:05:b1:2d:ec:0b:76:1d:cd:a3:25:f0:67:0d:d4:
         d4:ba:9e:c3:ad:9d:37:c6:96:39:00:66:62:88:d7:16:e0:aa:
         66:91:f8:09:b1:22:6f:c1:92:66:93:9d:cc:4e:67:4c:c7:a1:
         c1:19:c2:99:0a:0e:09:bd:98:4f:41:99:99:4e:56:6b:88:f8:
         03:07:06:f2:fa:e5:32:f2:58:5a:d5:5b:9b:c3:00:e2:8b:3f:
         04:4f:32:20:a8:88:b8:3f:69:90:af:92:3e:67:ca:c3:b1:1f:
         f4:ec:eb:08:fb:24:0f:96:75:6f:13:5a:6b:88:db:9d:b3:44:
         13:cc:a7:b2:b4:f2:3c:3b:13:71:45:35:63:94:fb:3a:74:17:
         d3:28:35:29:07:af:68:c0:56:dc:36:ef:7e:45:d6:4a:7e:95:
         7a:0e:3f:28:21:0e:fc:19:9e:b7:10:21:61:bf:bf:66:fa:33:
         b9:87:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:22:02 2026 by rpki-client