Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/jJX7xSIiWke1FPnSomAqJgYwlXg.asa
File:                     jJX7xSIiWke1FPnSomAqJgYwlXg.asa (raw, json)
Hash identifier:          W1Mbl/aE/mt4aZBIS4TPuc7iSA5laJN+m5VQraLISag=
Subject key identifier:   8C:95:FB:C5:22:22:5A:47:B5:14:F9:D2:A2:60:2A:26:06:30:95:78
Certificate issuer:       /CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Certificate serial:       019ED4C4C4C10BDD4F28F12C9EEA4319DEDA
Authority key identifier: 8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/jJX7xSIiWke1FPnSomAqJgYwlXg.asa
Signing time:             Wed 17 Jun 2026 08:48:45 +0000
ASPA not before:          Wed 17 Jun 2026 08:48:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            219421
Providers:                AS: 31898
                          AS: 197324
                          AS: 209533
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 18:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:c4:c4:c1:0b:dd:4f:28:f1:2c:9e:ea:43:19:de:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
        Validity
            Not Before: Jun 17 08:48:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8c95fbc522225a47b514f9d2a2602a2606309578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:63:e6:7f:5a:c9:9b:bc:e9:3c:91:94:54:
                    69:3a:2b:ff:6f:21:21:b1:ed:cb:10:2b:73:69:c7:
                    58:af:43:0c:e7:e5:f3:41:4e:bc:02:35:ce:da:3c:
                    fa:8d:d3:fa:be:9c:b2:c2:d5:78:e7:28:f4:91:28:
                    d1:18:88:cd:5c:c5:8f:d3:14:61:2a:0b:62:bd:e9:
                    39:38:10:97:e9:2f:b5:65:a4:02:e6:b3:18:11:03:
                    b8:63:c8:54:fb:98:d2:30:e9:d0:c3:7a:c1:be:41:
                    95:c6:8c:32:18:b3:85:55:c4:09:f7:a8:4b:10:fb:
                    66:69:6a:e1:8d:19:8b:b1:50:2c:62:a2:c5:05:eb:
                    94:68:9d:20:1c:6c:95:25:b9:10:b0:c6:28:fa:f9:
                    df:04:9a:1b:34:4d:d4:86:5b:9e:17:9b:80:c0:91:
                    a7:49:18:a9:07:12:95:aa:aa:bb:36:9b:59:1b:32:
                    81:9a:5c:51:d7:2a:f8:d1:81:a6:bd:ef:ec:57:ca:
                    03:79:23:27:78:f5:a5:5c:23:44:34:a0:50:59:82:
                    7f:b2:6b:08:38:75:be:0e:32:d2:ca:b6:01:b6:0a:
                    05:b2:81:e4:6d:78:dc:17:73:72:60:7d:fc:4f:a9:
                    c0:b7:65:3a:8b:82:17:b6:b4:36:8f:4f:c5:39:ee:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:95:FB:C5:22:22:5A:47:B5:14:F9:D2:A2:60:2A:26:06:30:95:78
            X509v3 Authority Key Identifier:
                keyid:8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/jJX7xSIiWke1FPnSomAqJgYwlXg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219421

    Signature Algorithm: sha256WithRSAEncryption
         55:4b:e7:14:20:64:ad:1a:1c:4d:a8:b2:67:50:57:92:37:32:
         b9:42:d6:c7:34:79:fa:5e:85:0b:e5:bb:c1:7b:2a:4e:d0:1a:
         6d:e2:f6:83:c4:21:bf:b5:3a:dd:ae:d7:bc:0c:92:75:26:76:
         e7:3e:d7:74:5e:9d:cc:46:45:3c:6b:c8:18:1d:81:23:6f:d1:
         08:b0:0e:f8:ab:9e:0a:44:62:3d:7a:68:2d:f3:27:db:26:1e:
         0a:9f:76:52:ea:56:4c:5e:01:73:06:23:ba:04:18:1b:ff:ca:
         37:b5:07:c0:dd:28:08:11:a0:5a:88:33:7d:7a:1d:44:45:cb:
         ae:8d:be:51:56:25:a6:9a:98:60:55:0e:9a:24:86:d0:14:42:
         e6:23:9e:49:95:b1:a3:67:7a:da:d9:b5:2c:e0:7c:41:70:e0:
         25:c1:94:94:c2:7d:eb:b1:6a:3c:53:28:93:49:a8:15:11:3b:
         4e:d5:c2:17:c3:e4:f3:d0:26:f0:96:9e:76:49:a8:59:ce:6d:
         03:ac:a3:bc:48:68:ab:33:6a:bb:3e:80:b5:88:f4:92:32:b1:
         ac:1c:3d:a5:e0:c5:7d:ac:ce:b8:40:47:be:28:8d:e7:d7:a5:
         3d:01:b5:cd:de:ef:58:b7:f2:b4:79:a5:83:85:6a:30:02:bf:
         db:1a:9f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 04:04:12 2026 by rpki-client