Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/FsdxCBsSPhgrqj2DSICdPcHdelg.asa
File:                     FsdxCBsSPhgrqj2DSICdPcHdelg.asa (raw, json)
Hash identifier:          eEvqQgi+lzyKHFjO4TryDYnkbMBQ3ARIXRQH0ITgfu4=
Subject key identifier:   16:C7:71:08:1B:12:3E:18:2B:AA:3D:83:48:80:9D:3D:C1:DD:7A:58
Certificate issuer:       /CN=971a799c6a663439d74450dfb38993571f98e15d
Certificate serial:       019CC2EA164E098B9932E2E98341EDEFC21E
Authority key identifier: 97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/FsdxCBsSPhgrqj2DSICdPcHdelg.asa
Signing time:             Fri 06 Mar 2026 11:30:46 +0000
ASPA not before:          Fri 06 Mar 2026 11:30:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            12816
Providers:                AS: 680
                          AS: 8767
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 20:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c2:ea:16:4e:09:8b:99:32:e2:e9:83:41:ed:ef:c2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=971a799c6a663439d74450dfb38993571f98e15d
        Validity
            Not Before: Mar  6 11:30:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=16c771081b123e182baa3d8348809d3dc1dd7a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:d7:9c:6b:70:6e:08:d1:fe:a3:ed:02:c2:
                    59:2f:d6:46:15:49:14:94:13:ae:d5:a7:cf:71:9f:
                    7b:1b:20:6a:4b:ec:a7:40:47:fc:31:13:00:f9:c3:
                    38:6a:c9:60:4d:39:6c:7c:ef:2c:39:c3:c9:8a:58:
                    1b:5e:10:c9:f2:ec:67:c3:5f:1d:c3:c8:c8:65:3e:
                    35:92:ee:55:7a:fd:aa:20:df:a3:af:97:ab:d1:10:
                    20:57:7c:58:6d:4d:2c:6f:72:18:f3:cb:ac:53:a7:
                    38:56:7a:19:58:49:62:03:5f:26:5f:31:24:17:5f:
                    55:c0:5a:ac:43:24:e2:c8:81:51:ef:30:2f:cb:eb:
                    36:78:3e:65:3a:cb:90:44:b4:6e:6e:22:91:80:12:
                    c1:73:af:b3:67:de:ef:10:06:55:da:2a:29:c0:c1:
                    59:21:fd:4e:9f:e0:64:71:1b:1c:d2:94:15:f0:ed:
                    4d:99:75:d2:c5:0b:3f:51:e2:e5:46:85:2c:00:6f:
                    95:f3:a2:78:7c:f1:70:67:14:4f:56:14:32:1c:f9:
                    f6:6a:29:ef:fe:54:9c:81:02:e7:d2:e6:77:6c:4a:
                    8d:62:d8:af:70:1a:e2:89:bb:36:33:ae:68:84:ab:
                    c0:ee:51:f2:ee:3b:cb:bd:14:1b:44:80:72:ed:8a:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C7:71:08:1B:12:3E:18:2B:AA:3D:83:48:80:9D:3D:C1:DD:7A:58
            X509v3 Authority Key Identifier:
                keyid:97:1A:79:9C:6A:66:34:39:D7:44:50:DF:B3:89:93:57:1F:98:E1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/FsdxCBsSPhgrqj2DSICdPcHdelg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e4bdc-e6eb-4208-9b13-a2efae3f9cab/1/lxp5nGpmNDnXRFDfs4mTVx-Y4V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12816

    Signature Algorithm: sha256WithRSAEncryption
         a2:2a:bb:08:11:ee:67:68:f9:4e:74:85:2a:5f:60:7c:ad:1a:
         57:76:b5:a6:47:d4:6c:75:0c:65:0e:a1:6a:ac:f3:3c:eb:66:
         6e:23:2f:19:24:26:5d:d6:f1:b0:00:87:a2:79:ca:6c:92:9c:
         6d:a7:7c:5f:3a:95:1d:ff:05:7e:37:77:b4:9f:11:e0:9d:9a:
         6d:d4:2a:58:39:7c:d4:d6:ed:d8:7e:15:2b:58:7a:b4:b7:d3:
         1e:50:36:7e:9a:c2:da:1b:a6:78:6b:21:e3:a5:b3:40:cf:35:
         0e:f6:bf:da:db:6e:87:ea:7e:02:db:5d:71:66:0c:85:43:c2:
         f9:da:f1:c4:7f:1f:b4:9f:de:15:fd:c8:82:ec:07:cc:7b:25:
         b4:c2:4d:fa:5a:2c:d0:39:40:e7:02:7e:95:e9:2f:36:a2:fd:
         09:3e:94:bb:34:52:2d:5e:08:2d:a2:82:88:7e:a9:7e:cc:e7:
         8e:95:05:dd:0a:00:2d:a3:0e:29:66:11:75:70:e7:a4:0a:9a:
         36:ad:51:8b:0d:a4:9b:55:52:56:0b:28:10:8d:16:9c:2f:ac:
         9e:48:f4:dc:80:a8:24:12:e4:1d:0d:01:e1:47:bf:17:09:40:
         b1:a5:5c:52:25:cc:5c:c4:6a:3a:c0:d7:ce:5e:1b:32:5c:55:
         89:2f:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:41 2026 by rpki-client