Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/Or7LcIyObyo8uO_NM8qGF_X4SAU.asa
File:                     Or7LcIyObyo8uO_NM8qGF_X4SAU.asa (raw, json)
Hash identifier:          oFIOSDIrWcnanuGWnbcbZBqZTKavnnPNGoZlzl6rLLI=
Subject key identifier:   3A:BE:CB:70:8C:8E:6F:2A:3C:B8:EF:CD:33:CA:86:17:F5:F8:48:05
Certificate issuer:       /CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
Certificate serial:       019FAB5C81ADBA8E12A2CC5712300765CC09
Authority key identifier: 21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/Or7LcIyObyo8uO_NM8qGF_X4SAU.asa
Signing time:             Wed 29 Jul 2026 00:53:14 +0000
ASPA not before:          Wed 29 Jul 2026 00:53:14 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            202902
Providers:                AS: 20473
                          AS: 209533
                          AS: 209735
                          AS: 212895
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:5c:81:ad:ba:8e:12:a2:cc:57:12:30:07:65:cc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212bfa6fde3455bc099288e9ff450d9ad8216c60
        Validity
            Not Before: Jul 29 00:53:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3abecb708c8e6f2a3cb8efcd33ca8617f5f84805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:aa:99:24:33:36:1e:f3:82:dc:b2:b2:98:
                    c0:c7:7c:bb:b9:93:9d:f4:e5:0a:1e:5e:a3:cb:c3:
                    25:8f:9d:1c:57:29:3f:fb:2c:98:a5:aa:70:27:2d:
                    fb:17:2e:fe:e7:81:e6:cf:3c:54:a4:43:87:f9:a7:
                    86:2d:f7:e4:21:2a:8e:27:da:3d:d8:b6:a3:f8:28:
                    08:d7:e2:61:8c:90:8f:f4:60:59:ec:97:91:64:d1:
                    80:0a:45:f8:ce:a0:44:cf:4b:b9:c2:ce:2a:b1:ed:
                    13:10:4d:6c:4d:8f:03:18:cd:87:a3:95:27:bc:f8:
                    ef:8e:7f:b2:06:6a:8c:9b:96:f9:04:89:46:03:30:
                    1a:6a:9d:b2:57:4b:59:2e:2b:6f:e3:1f:28:b9:8c:
                    02:8b:30:3b:9c:04:c0:51:c5:b2:c7:f1:26:17:b8:
                    37:be:4d:1d:0a:b6:8b:fe:f5:cc:60:5f:73:87:d7:
                    a1:04:4a:48:2a:95:8f:ea:02:b6:97:64:0b:90:cc:
                    3b:c7:51:5d:d1:8e:8e:1c:a6:80:71:63:cc:cc:03:
                    ef:a1:fa:eb:f0:15:5f:46:97:a9:2a:28:52:93:34:
                    42:c1:fd:9b:05:00:a0:7d:b6:f6:2b:94:ed:a3:98:
                    77:da:17:ee:b8:f3:7b:bb:2b:c9:8f:5f:7c:72:90:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BE:CB:70:8C:8E:6F:2A:3C:B8:EF:CD:33:CA:86:17:F5:F8:48:05
            X509v3 Authority Key Identifier:
                keyid:21:2B:FA:6F:DE:34:55:BC:09:92:88:E9:FF:45:0D:9A:D8:21:6C:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISv6b940VbwJkojp_0UNmtghbGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/Or7LcIyObyo8uO_NM8qGF_X4SAU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5dc10d-4b67-4ca5-b51b-f4ac04adbd95/1/ISv6b940VbwJkojp_0UNmtghbGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202902

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:5f:d2:8d:46:63:84:60:34:1b:2d:32:b0:45:51:7c:a4:
         71:84:be:60:95:1c:25:17:b5:bc:0b:d6:2d:ce:ff:b9:97:52:
         ce:4a:47:17:4f:8d:8c:61:d2:c1:4b:1d:04:b3:ec:71:14:61:
         6f:a8:d0:09:e6:1e:c6:3b:89:9a:96:ac:ef:87:56:b3:2a:b3:
         29:0a:9a:11:dd:61:42:26:3e:8f:6e:bc:dd:eb:7a:33:56:f1:
         5d:de:19:cf:49:02:91:a6:64:a8:1a:b3:74:a8:04:98:10:a8:
         ed:ec:af:dc:31:90:e2:df:a0:d3:b6:c2:43:44:78:9f:e4:c2:
         c2:db:c6:72:fe:7b:b3:8a:ed:c3:91:65:55:87:46:e0:46:e5:
         29:9a:7e:22:91:ad:aa:70:52:4d:12:f2:0d:fb:05:da:46:68:
         ee:c3:b4:e2:81:38:a2:07:28:19:58:dc:82:8c:2a:3e:85:a9:
         c2:b3:48:a4:61:42:2d:8e:81:fa:5e:9f:6b:10:86:66:78:70:
         e2:01:4e:47:02:14:bf:01:c9:29:93:94:b2:06:3f:ee:9c:0b:
         09:f6:78:38:7c:9a:c8:b8:5f:e2:38:a1:76:b3:44:ce:a1:37:
         81:b7:44:2e:72:d0:da:fd:fa:29:5d:21:c6:44:9e:85:f1:3a:
         ed:59:d0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:50:39 2026 by rpki-client