Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Bb6S0v3-9S6UDz2rsb3YDwUAyS4.asa
File:                     Bb6S0v3-9S6UDz2rsb3YDwUAyS4.asa (raw, json)
Hash identifier:          ECFsSLxS2ROB7ArbTJti+EbGuUGYBqPKnEh5flU6l0s=
Subject key identifier:   05:BE:92:D2:FD:FE:F5:2E:94:0F:3D:AB:B1:BD:D8:0F:05:00:C9:2E
Certificate issuer:       /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial:       019F1901525BF576CC142E8E5710CB6D242B
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Bb6S0v3-9S6UDz2rsb3YDwUAyS4.asa
Signing time:             Tue 30 Jun 2026 14:49:04 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:04 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            553
Providers:                AS: 174
                          AS: 559
                          AS: 680
                          AS: 1299
                          AS: 2914
                          AS: 3320
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:52:5b:f5:76:cc:14:2e:8e:57:10:cb:6d:24:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
        Validity
            Not Before: Jun 30 14:49:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=05be92d2fdfef52e940f3dabb1bdd80f0500c92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:a1:e5:93:0f:df:a4:60:9d:53:14:cc:a7:
                    bc:10:a5:c3:5a:de:23:f0:ce:34:ee:86:c6:a7:10:
                    b0:8d:94:9f:f6:e7:0d:0e:75:59:13:21:f0:19:ff:
                    1a:70:b5:49:d3:cb:12:3e:cc:83:02:84:e5:21:a1:
                    55:5f:bd:59:19:b5:e8:12:1f:5f:d9:b7:52:dc:7a:
                    39:af:38:42:03:73:0a:11:96:eb:ea:47:53:b5:81:
                    d1:ba:b1:7c:32:42:9d:31:d5:51:2a:83:ae:f9:9f:
                    96:f0:34:a7:5e:0e:b7:bc:77:99:ee:c7:87:f3:73:
                    02:1d:cc:7c:ad:cc:4e:f9:70:b6:8d:a3:3c:22:3e:
                    41:bd:e6:12:c9:19:6b:ae:86:84:7f:d3:c3:81:cd:
                    10:51:21:33:20:b7:60:19:3f:bc:98:e5:9c:f2:fd:
                    e0:2d:a0:fc:2a:5a:61:e4:04:8e:c2:b8:be:9a:a9:
                    6e:76:75:6a:9e:e4:9a:28:88:d8:c9:65:ea:32:7e:
                    6c:1d:91:dc:79:ce:b1:64:6f:e0:35:61:59:c7:2f:
                    e1:d3:0d:5c:e2:c5:b4:68:7c:ed:28:a5:a9:b3:56:
                    da:6f:f3:bb:51:af:5f:67:83:a8:47:a0:65:b3:5d:
                    cb:97:82:23:10:a5:6e:2d:6a:64:7e:51:60:a4:ab:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BE:92:D2:FD:FE:F5:2E:94:0F:3D:AB:B1:BD:D8:0F:05:00:C9:2E
            X509v3 Authority Key Identifier:
                keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Bb6S0v3-9S6UDz2rsb3YDwUAyS4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  553

    Signature Algorithm: sha256WithRSAEncryption
         a7:0d:b9:43:1a:91:e3:32:3a:85:e2:6c:46:51:c6:26:ef:ec:
         db:e2:20:8d:6c:e4:1b:2f:1b:9e:e5:3f:71:7e:a1:99:ed:30:
         ec:d9:f8:62:dd:f0:0c:9b:5f:0a:01:e3:62:46:b6:a5:30:42:
         b6:cc:8d:0e:61:a6:37:df:77:36:32:22:d8:d9:d1:57:64:2e:
         06:7d:52:1b:97:7d:ce:f4:14:07:aa:02:ae:f3:ab:4e:23:55:
         2a:a1:34:65:f1:8a:74:db:ef:6a:9a:f9:d4:32:4f:62:d9:a8:
         7a:7f:95:4d:34:b7:f0:db:c1:2d:9a:8f:c5:a8:d5:d9:3b:ea:
         22:58:ba:4e:f7:00:1a:ad:ec:68:33:f9:36:3d:48:ba:e1:da:
         14:31:7c:fd:70:cb:c9:5d:72:97:3d:f4:a6:ed:7c:4a:93:fd:
         cf:29:3c:0d:32:dd:fb:52:78:69:b2:56:4d:04:ab:d0:75:86:
         13:8f:a1:22:07:e6:8c:d4:ca:62:a3:89:32:8c:af:24:1d:2b:
         62:e1:05:ad:d0:6d:c3:8d:a2:6a:41:a7:e3:26:bc:77:a7:d8:
         4e:1f:da:f4:dc:e5:49:2b:ce:f1:7d:f5:de:36:4a:3a:6a:a1:
         cc:bd:be:70:44:df:f1:22:e0:47:87:7f:7a:f5:7d:24:29:e3:
         7a:87:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:08:43 2026 by rpki-client