Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/6hlJWxyEpxR7SfyI5qQ520W_2-o.asa
File:                     6hlJWxyEpxR7SfyI5qQ520W_2-o.asa (raw, json)
Hash identifier:          /oGoZit8RwZPSMub5y9BmBC9g7SLP5Z7yGn6lO2+qts=
Subject key identifier:   EA:19:49:5B:1C:84:A7:14:7B:49:FC:88:E6:A4:39:DB:45:BF:DB:EA
Certificate issuer:       /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial:       019D34861D3DA869D7EC3CD63039E398D9B2
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/6hlJWxyEpxR7SfyI5qQ520W_2-o.asa
Signing time:             Sat 28 Mar 2026 12:58:17 +0000
ASPA not before:          Sat 28 Mar 2026 12:58:17 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            201541
Providers:                AS: 213449
                          AS: 215828
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:86:1d:3d:a8:69:d7:ec:3c:d6:30:39:e3:98:d9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
        Validity
            Not Before: Mar 28 12:58:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ea19495b1c84a7147b49fc88e6a439db45bfdbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:7d:bd:44:36:21:bb:3a:bc:e9:92:89:15:
                    dc:6d:bd:70:7e:cf:16:df:45:1a:cf:e8:b0:cf:71:
                    9b:16:82:4d:88:b7:25:7b:33:80:b4:8e:43:02:72:
                    73:d5:f8:68:aa:e7:2c:1e:bd:9d:d1:a8:36:51:a5:
                    0b:b9:da:f1:71:d7:c5:3a:05:bd:2a:ed:92:24:b8:
                    5d:a0:08:49:18:85:53:90:cc:a1:ed:7f:24:f5:4e:
                    79:2c:40:e3:74:94:71:33:2b:24:dc:63:76:e7:50:
                    9b:87:2e:f3:b6:cb:70:85:b3:f0:29:75:45:05:f4:
                    cc:9c:d1:98:19:e9:42:3c:dc:7b:4b:fe:13:1a:22:
                    5b:be:8c:2f:89:f2:92:20:56:a8:94:d8:ea:36:a5:
                    56:66:db:a2:69:7f:e1:98:37:83:ae:8d:66:2d:fd:
                    9c:30:51:96:8d:d4:28:1e:98:83:b0:a3:73:c8:19:
                    c9:7f:d6:aa:1a:a2:62:42:2b:5d:6d:4e:69:69:38:
                    68:7a:4b:a2:cb:ac:3c:37:9f:46:67:8b:4f:c2:6a:
                    96:a3:28:fa:ee:65:94:99:7f:8e:6e:e9:86:6e:ea:
                    89:f5:64:f1:f6:02:e2:f7:0e:2a:06:98:75:37:5e:
                    86:9c:4f:0f:24:f7:24:11:28:d1:ce:52:27:0c:a8:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:19:49:5B:1C:84:A7:14:7B:49:FC:88:E6:A4:39:DB:45:BF:DB:EA
            X509v3 Authority Key Identifier:
                keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/6hlJWxyEpxR7SfyI5qQ520W_2-o.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  201541

    Signature Algorithm: sha256WithRSAEncryption
         8c:84:19:49:6a:a2:a4:e7:61:c7:8e:06:df:4e:98:6e:ac:e6:
         6a:9a:08:81:c9:c8:8c:0e:4e:31:8c:8c:ca:70:74:68:71:fe:
         d5:09:6f:f8:26:2c:2f:ea:1b:72:d3:5a:6d:4f:74:51:b3:fe:
         6d:44:d6:ab:63:66:eb:76:c7:48:47:85:4b:21:0e:2e:0b:de:
         08:33:a4:10:d9:02:ff:44:f1:ea:3e:9f:46:f5:ac:ac:2d:2b:
         3f:b6:2a:7e:81:f4:37:25:49:9b:bc:a2:ee:b9:3a:1e:5c:78:
         9f:a8:5d:30:0d:53:76:21:40:b0:e5:94:1f:e9:d7:23:ba:f9:
         d8:1f:13:eb:30:d0:63:1d:f3:40:f5:e1:96:aa:0c:a8:ea:91:
         c3:df:a0:bf:60:42:79:b7:d6:1e:a7:0d:46:d1:bb:66:5f:76:
         f1:7a:92:13:04:2b:df:38:ac:c6:46:13:a5:b1:d1:ec:a6:6a:
         4c:66:ed:82:3f:f1:64:39:d5:c9:f4:ac:30:e7:90:6d:06:e2:
         c2:65:4c:1f:d7:87:f1:ab:7c:c3:71:7f:aa:5d:1b:d9:93:b3:
         e3:60:01:a2:ef:6b:c9:b0:e7:9c:25:e0:af:5f:a1:e4:58:51:
         27:62:56:6c:27:be:ca:20:3d:24:77:1a:19:1e:7c:00:eb:ec:
         36:5e:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:57:25 2026 by rpki-client