Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1033bf-f4f3-41b4-b1a6-0689e6389d82/1/YQezev6tU26Tv5TrnPK3up8TwUc.asa
File: YQezev6tU26Tv5TrnPK3up8TwUc.asa (raw, json)
Hash identifier: t8ebK+w0g0X6B7deaK4o4OFK5boSwt1cm/fxIRKMEME=
Subject key identifier: 61:07:B3:7A:FE:AD:53:6E:93:BF:94:EB:9C:F2:B7:BA:9F:13:C1:47
Certificate issuer: /CN=35d6494b397192a01b60f63189db37619ec0aa1b
Certificate serial: 019B6D890F9B4CC500AA181976DF92154C51
Authority key identifier: 35:D6:49:4B:39:71:92:A0:1B:60:F6:31:89:DB:37:61:9E:C0:AA:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdZJSzlxkqAbYPYxids3YZ7Aqhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1033bf-f4f3-41b4-b1a6-0689e6389d82/1/YQezev6tU26Tv5TrnPK3up8TwUc.asa
Signing time: Tue 30 Dec 2025 04:34:17 +0000
ASPA not before: Tue 30 Dec 2025 04:34:17 +0000
ASPA not after: Wed 01 Jul 2026 00:00:00 +0000
Customer ASID: 211038
Providers: AS: 210554
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6d:89:0f:9b:4c:c5:00:aa:18:19:76:df:92:15:4c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d6494b397192a01b60f63189db37619ec0aa1b
Validity
Not Before: Dec 30 04:34:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6107b37afead536e93bf94eb9cf2b7ba9f13c147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:10:39:1c:8a:6f:45:53:88:5e:58:30:85:
5e:9d:74:46:e9:89:b0:59:ea:f8:89:ae:8d:0b:1a:
39:56:88:7e:0b:43:2b:f9:95:32:f3:7a:ce:79:06:
1e:bd:4c:d1:76:38:af:8a:9d:30:b9:91:2b:56:7d:
d0:df:eb:b1:cc:ad:08:1b:aa:3a:04:15:ab:b5:0e:
38:b0:17:55:39:00:cc:15:75:7f:77:b7:bf:3d:c4:
2d:70:5b:ba:fd:d8:90:16:61:df:03:67:08:65:46:
c4:6a:9b:f5:c6:53:ff:ef:95:32:4c:55:bb:d8:f8:
85:b1:52:83:e4:ce:f3:9a:b2:f8:b5:b2:79:32:a6:
e7:cd:00:e5:d5:21:d2:ed:6a:f8:7b:86:ea:77:6a:
75:c5:a4:10:6e:b2:f0:a5:1b:fc:2a:bb:de:51:aa:
0b:c2:3d:da:dc:78:02:8f:a0:ad:d3:06:ad:ea:13:
e7:ed:70:4c:a7:e7:a1:a8:05:2d:a0:0c:1f:dc:cf:
5d:d5:a5:99:bf:b2:9a:55:30:17:ff:fb:83:40:81:
2b:3e:e4:11:ff:b4:ad:a6:d3:58:70:d9:3f:ff:c0:
92:f5:e2:c5:09:0a:0b:d7:08:3c:e6:50:9a:b8:f7:
63:70:41:70:07:8a:85:c9:3b:c7:6e:f4:f9:59:24:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:07:B3:7A:FE:AD:53:6E:93:BF:94:EB:9C:F2:B7:BA:9F:13:C1:47
X509v3 Authority Key Identifier:
keyid:35:D6:49:4B:39:71:92:A0:1B:60:F6:31:89:DB:37:61:9E:C0:AA:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdZJSzlxkqAbYPYxids3YZ7Aqhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1033bf-f4f3-41b4-b1a6-0689e6389d82/1/YQezev6tU26Tv5TrnPK3up8TwUc.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1033bf-f4f3-41b4-b1a6-0689e6389d82/1/NdZJSzlxkqAbYPYxids3YZ7Aqhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211038
Signature Algorithm: sha256WithRSAEncryption
0a:86:d4:b6:02:0f:83:9b:9e:bb:95:70:06:25:e4:cc:97:1a:
de:dd:43:7c:3c:1e:14:17:5a:10:bd:ca:cd:08:07:ce:88:d8:
23:9b:7c:9d:a8:47:1d:42:5e:b1:65:57:73:d9:5d:e9:f4:3d:
c7:a7:52:fa:8a:b1:5c:bc:fe:d0:80:09:36:bb:a6:fc:89:4e:
ce:67:2f:f8:1e:83:18:0f:6a:31:e0:f2:77:23:54:7f:af:19:
70:e3:65:c9:b0:44:6f:da:b1:a5:5c:04:c2:59:22:5f:b1:04:
79:c3:fe:76:0e:00:20:e9:d8:00:55:d1:05:59:ad:5d:67:0e:
3a:06:53:45:06:d4:0a:a7:9a:58:29:75:51:b1:e1:98:c8:7e:
78:3d:56:07:1d:86:45:c7:62:ff:2a:34:54:6e:16:81:24:53:
4f:91:b2:1c:c6:ee:7b:f4:84:c8:9e:37:3a:d1:59:5c:a6:b9:
79:37:bf:fd:4c:8a:cd:99:25:e8:fe:aa:65:2b:7a:06:d6:bf:
fd:e6:f3:dd:43:eb:43:91:ed:6e:fb:c0:d8:9e:41:64:8c:78:
d9:80:e8:07:44:b0:f1:19:ab:64:7b:cc:ba:d5:ba:cb:75:dd:
55:10:05:05:42:86:88:b9:4b:ae:06:76:8f:02:67:20:d2:07:
09:ad:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:50:58 2026 by rpki-client