Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/LEuYoFCXhInzPdNgWnas4QB6xcE.asa
File:                     LEuYoFCXhInzPdNgWnas4QB6xcE.asa (raw, json)
Hash identifier:          9rbkn1NHCcTS6LE4JL5/e1dtTrb/DOIhiwih8TaALY0=
Subject key identifier:   2C:4B:98:A0:50:97:84:89:F3:3D:D3:60:5A:76:AC:E1:00:7A:C5:C1
Certificate issuer:       /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial:       019DB6677535115E684412D2B88A00D19DE3
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/LEuYoFCXhInzPdNgWnas4QB6xcE.asa
Signing time:             Wed 22 Apr 2026 18:15:26 +0000
ASPA not before:          Wed 22 Apr 2026 18:15:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12365
Providers:                AS: 28910
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 06:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b6:67:75:35:11:5e:68:44:12:d2:b8:8a:00:d1:9d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
        Validity
            Not Before: Apr 22 18:15:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2c4b98a050978489f33dd3605a76ace1007ac5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:30:79:70:16:35:5a:47:91:1c:0e:30:a0:
                    cb:85:d9:49:35:8e:a6:21:df:48:06:69:5b:71:3d:
                    4d:5c:a6:f9:8e:11:71:f0:c2:5b:55:f5:92:69:b0:
                    7f:59:17:10:e6:bb:73:62:ad:51:89:e7:2a:fe:3f:
                    e9:75:71:a8:83:06:b4:e3:b0:b4:92:a9:bc:08:dd:
                    1e:57:23:41:14:de:79:1c:4a:2f:a6:84:53:61:1c:
                    e2:5c:03:f1:0f:fb:02:ab:bb:56:6f:30:cd:f1:e5:
                    17:01:36:77:c9:61:dd:ce:06:c9:49:53:63:ad:78:
                    25:ee:7d:6d:ed:18:a7:0a:21:58:07:e8:64:c5:9e:
                    4f:7b:ca:5c:b3:f6:aa:ef:ac:ba:72:4c:bc:4b:b0:
                    52:43:c1:58:4d:86:cf:a1:bf:50:aa:e5:28:d1:02:
                    36:a9:3c:ff:5b:54:c6:10:75:e1:98:c8:07:97:4a:
                    f5:fd:58:17:71:f8:a2:5b:d9:93:2b:e8:f4:9c:27:
                    b4:af:12:02:cc:1f:58:41:7a:3e:16:b0:b4:2a:ad:
                    b2:2b:f4:2f:4f:cc:8b:f9:33:97:66:59:d6:14:a9:
                    f2:45:38:9d:e4:f5:7e:d6:f3:32:b7:c5:5b:a1:55:
                    f8:fc:22:d8:75:f1:23:0b:53:3c:5f:2d:be:bc:36:
                    cc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4B:98:A0:50:97:84:89:F3:3D:D3:60:5A:76:AC:E1:00:7A:C5:C1
            X509v3 Authority Key Identifier:
                keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/LEuYoFCXhInzPdNgWnas4QB6xcE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12365

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:d7:e9:2f:33:d3:c6:28:d8:88:92:7e:f7:96:7e:41:c2:
         95:fd:9d:bd:10:54:40:b8:49:24:9d:5a:4e:3e:cb:e9:5d:46:
         20:80:04:cb:36:e3:f3:7b:26:40:8e:c8:21:a6:ad:9c:7d:31:
         57:bb:bd:42:05:dd:39:17:08:ac:76:48:e7:27:79:a9:3a:83:
         28:bd:d7:bd:01:c1:c1:14:eb:a2:7a:c0:4b:13:5a:c0:ea:13:
         65:ea:28:6a:4b:b9:e0:55:c0:eb:b7:4b:7b:06:d4:15:4b:c3:
         d6:10:81:d3:44:9f:6c:fd:1e:e3:17:1f:33:9e:d0:11:68:72:
         d1:55:98:44:b0:ca:79:da:d7:48:f2:25:3c:5f:b0:12:8e:ae:
         b5:9a:fe:f8:24:0a:39:0a:3c:d1:c5:96:fe:cd:47:52:2d:83:
         26:2d:61:04:ac:ad:d0:db:a4:d5:91:e3:fb:80:94:6c:71:6b:
         9d:b3:88:d8:d1:08:e7:1e:3d:21:f6:2e:c6:a6:ad:a6:f2:78:
         7e:0e:19:78:86:2f:44:77:78:07:6d:70:25:95:d5:c0:fa:ca:
         08:26:fb:b3:cd:f0:2c:5d:c8:a2:c7:9f:e0:da:93:14:e4:b0:
         a6:99:0f:96:c0:fd:84:a2:6d:f6:e7:64:25:e0:4f:80:c2:23:
         f9:35:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 11:56:32 2026 by rpki-client