Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/odt_2E36HJJB984srGHjv6qER2U.asa
File:                     odt_2E36HJJB984srGHjv6qER2U.asa (raw, json)
Hash identifier:          R8X7F+f+3wADu+sKhSukvo7cCZr57RXUSRSmArsF1fg=
Subject key identifier:   A1:DB:7F:D8:4D:FA:1C:92:41:F7:CE:2C:AC:61:E3:BF:AA:84:47:65
Certificate issuer:       /CN=f2262faf4376420024aad72983ac3e87944ea7a5
Certificate serial:       019CB8042B3DB78C195436A08A2FE8C0B104
Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/odt_2E36HJJB984srGHjv6qER2U.asa
Signing time:             Wed 04 Mar 2026 08:43:26 +0000
ASPA not before:          Wed 04 Mar 2026 08:43:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            211248
Providers:                AS: 15614
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 23:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b8:04:2b:3d:b7:8c:19:54:36:a0:8a:2f:e8:c0:b1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5
        Validity
            Not Before: Mar  4 08:43:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a1db7fd84dfa1c9241f7ce2cac61e3bfaa844765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:4a:7f:49:a0:1a:43:6e:96:6f:fb:51:85:
                    fc:16:73:f1:9d:9f:f2:ae:44:e5:9a:bb:02:65:f6:
                    e7:1c:ef:6f:54:9f:4b:7f:d5:f1:96:2d:d7:89:3e:
                    d5:24:e7:13:d7:2d:24:8c:c6:e0:a3:a0:be:d7:d4:
                    07:77:5b:54:44:92:42:6b:b2:91:3b:02:a2:92:64:
                    70:6f:b6:3f:7f:1c:43:ad:d4:e7:02:ac:29:b2:6f:
                    d6:5c:cb:1b:29:23:7d:1e:db:25:30:01:c8:f7:24:
                    1f:76:2d:09:2a:b3:4e:f2:79:aa:ec:ce:a0:d6:e9:
                    5e:b0:03:db:4c:5a:ed:c7:d9:11:93:c5:59:1d:44:
                    bd:f5:21:28:ce:d5:fe:e6:02:35:a7:16:3f:03:90:
                    cd:6c:d7:7d:57:05:f0:38:30:91:21:b3:51:ee:61:
                    00:54:22:4a:d9:12:00:ad:74:ae:54:92:e3:84:33:
                    7c:57:a6:a6:7c:ff:ba:51:96:cc:62:7c:e9:47:0b:
                    76:9f:0a:da:0a:ac:03:db:01:ae:b2:19:23:2e:ed:
                    d4:df:6b:b6:ef:55:bf:ba:92:1e:5f:d3:25:f0:0d:
                    30:7d:31:f4:6e:91:d5:03:30:72:76:64:50:b3:d0:
                    8a:d4:55:fb:2a:57:15:78:27:34:0c:80:1b:75:dc:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:7F:D8:4D:FA:1C:92:41:F7:CE:2C:AC:61:E3:BF:AA:84:47:65
            X509v3 Authority Key Identifier:
                keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/odt_2E36HJJB984srGHjv6qER2U.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211248

    Signature Algorithm: sha256WithRSAEncryption
         8f:79:6e:3d:97:55:2a:6d:2f:8e:8b:25:7d:3d:e5:44:62:ae:
         f5:6c:22:8c:6c:ed:ac:9e:22:7b:0b:f0:dd:de:30:30:ce:24:
         c2:f3:e1:2e:2a:01:d4:2f:87:14:a3:a9:cc:b0:24:10:97:61:
         93:f1:fd:a7:74:26:64:17:66:74:1a:18:2e:24:4a:5a:19:d3:
         08:ab:47:94:30:2a:50:81:14:60:73:b7:07:3e:22:e2:6c:a1:
         f4:e5:7e:ce:91:93:30:21:54:e2:38:cc:64:85:64:c2:61:ce:
         1d:f0:3d:c1:fb:78:69:84:89:3b:70:49:ca:6a:ce:73:ac:78:
         c9:00:b7:57:e8:49:31:49:a3:fd:95:18:1c:cf:58:6c:eb:b9:
         ea:31:6c:66:36:4e:71:f1:00:2d:a5:76:ac:04:c5:89:f8:00:
         a1:03:74:c8:c8:af:40:c2:9a:28:65:77:d4:db:c7:6f:cd:4a:
         90:ad:9c:92:fa:d5:6f:3f:de:70:59:9e:bc:0c:58:54:a2:61:
         f7:49:0c:1f:a2:a4:cc:97:fc:a9:84:20:55:84:92:e4:90:11:
         bc:95:b9:ce:57:d7:8e:5e:01:4c:b9:31:f7:67:90:8c:96:3f:
         d9:f5:f8:83:9a:a8:ab:21:41:46:d5:19:9a:5d:97:ce:37:d2:
         d8:f5:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:44 2026 by rpki-client