Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/765B4oqIAjE4ys3sceOasyp6Frs.asa
File:                     765B4oqIAjE4ys3sceOasyp6Frs.asa (raw, json)
Hash identifier:          tXcZPa1qNAq++okd9KsxnN5MN76G3AcXdMJlT7DKBIs=
Subject key identifier:   EF:AE:41:E2:8A:88:02:31:38:CA:CD:EC:71:E3:9A:B3:2A:7A:16:BB
Certificate issuer:       /CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
Certificate serial:       019CBE3F049DC5FF24C3961F963AB1F54DB2
Authority key identifier: 13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/765B4oqIAjE4ys3sceOasyp6Frs.asa
Signing time:             Thu 05 Mar 2026 13:45:26 +0000
ASPA not before:          Thu 05 Mar 2026 13:45:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            203168
Providers:                AS: 151194
                          AS: 215172
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 09:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:be:3f:04:9d:c5:ff:24:c3:96:1f:96:3a:b1:f5:4d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e5707444a16c68e1a1c52ac4909d0bdca62ae
        Validity
            Not Before: Mar  5 13:45:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efae41e28a88023138cacdec71e39ab32a7a16bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:81:82:0d:0a:e6:dd:a8:65:dd:d0:be:75:
                    59:b2:52:3d:e1:80:f8:8d:f0:b8:30:f0:4d:aa:eb:
                    2b:65:ba:79:af:6f:8c:04:d2:c1:f7:2f:b5:ff:0f:
                    b5:6e:b0:ac:f7:7a:ac:e4:ed:13:7e:0d:70:d2:7c:
                    14:5e:a5:ff:3e:1c:32:41:c3:6f:56:ac:a7:22:52:
                    e7:03:0a:7a:dc:67:c0:e3:47:22:8e:a7:7c:91:04:
                    46:9c:b9:bc:86:79:e2:b6:cf:35:a0:3d:74:91:9b:
                    0d:9b:ba:b9:c6:32:87:38:de:71:a4:2a:dd:e1:da:
                    34:6e:90:75:a5:3f:df:75:97:77:3d:5b:10:71:46:
                    f0:b6:58:8b:8b:7f:b2:7e:28:16:53:72:a6:e6:c0:
                    85:8c:94:95:9d:d6:6f:1f:cd:e7:1d:d6:06:94:95:
                    8a:00:c2:15:74:1f:5e:c7:51:b7:4a:58:bb:f5:c2:
                    c4:73:17:15:2a:4a:65:50:7b:12:08:57:0d:cb:34:
                    d4:e3:7a:07:37:9a:0d:5a:58:f4:df:ad:43:d4:43:
                    9c:ee:36:3a:b6:c6:70:9b:cb:da:57:79:af:6c:b0:
                    cd:9d:de:25:6c:4a:8e:44:59:0e:30:50:c4:02:68:
                    0a:22:45:98:d9:5f:69:dc:51:06:1a:07:03:77:02:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AE:41:E2:8A:88:02:31:38:CA:CD:EC:71:E3:9A:B3:2A:7A:16:BB
            X509v3 Authority Key Identifier:
                keyid:13:7E:57:07:44:4A:16:C6:8E:1A:1C:52:AC:49:09:D0:BD:CA:62:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E35XB0RKFsaOGhxSrEkJ0L3KYq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/765B4oqIAjE4ys3sceOasyp6Frs.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6eaeae-f45c-4355-932f-c0d207c02d27/1/E35XB0RKFsaOGhxSrEkJ0L3KYq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203168

    Signature Algorithm: sha256WithRSAEncryption
         75:d5:86:b1:10:76:e4:4f:7e:e1:a0:8b:90:7b:ee:0b:70:75:
         53:a3:33:d1:59:1a:d3:21:76:29:02:0c:98:45:61:f1:7d:94:
         70:d5:be:13:7c:c2:2e:7c:67:d7:45:40:8b:6b:e3:c5:5e:dc:
         04:b3:0d:63:c1:6e:c6:5c:ee:d3:f3:d3:ae:9b:8c:f3:11:37:
         6d:99:1e:50:9f:f1:0e:93:7f:14:ad:d1:41:8e:1f:10:88:cc:
         ba:17:52:1e:ac:cb:0b:0f:e1:0b:22:b0:55:73:dc:bb:98:46:
         a1:d6:c8:b3:5f:49:b9:8b:de:e5:13:c2:c6:46:10:06:f5:49:
         88:37:30:37:fd:ad:df:c2:25:67:73:ad:f1:16:02:45:7d:b8:
         92:cb:c4:e9:65:8c:52:a4:1d:3b:17:fa:34:cb:17:3a:df:d4:
         e8:20:94:06:9e:21:2b:08:27:4a:80:46:77:71:4d:48:61:6a:
         d5:70:b2:35:9e:7e:f0:54:18:e1:34:c9:c4:6d:ab:ea:3f:e5:
         69:9e:47:4d:f2:72:d5:70:4f:4e:0d:9e:1c:82:7e:73:13:44:
         c4:96:a8:b8:76:bd:6a:10:cc:87:c9:cb:a3:99:22:6b:59:f0:
         bc:a2:26:af:99:37:89:bc:20:0e:f9:71:a8:b8:9d:0a:0c:5a:
         56:50:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:54:22 2026 by rpki-client