Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/PVIvAggMAtuREjhV8GPK-EuHdx8.asa
File:                     PVIvAggMAtuREjhV8GPK-EuHdx8.asa (raw, json)
Hash identifier:          /yi4srMyiV+9qj1Uy16aZQoRy4KHU28OFJInXDw+3jg=
Subject key identifier:   3D:52:2F:02:08:0C:02:DB:91:12:38:55:F0:63:CA:F8:4B:87:77:1F
Certificate issuer:       /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial:       019F1901067E79BE79BBA7BFA4A9196E5A6D
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/PVIvAggMAtuREjhV8GPK-EuHdx8.asa
Signing time:             Tue 30 Jun 2026 14:48:45 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:45 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208460
Providers:                AS: 20473
                          AS: 209533
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:06:7e:79:be:79:bb:a7:bf:a4:a9:19:6e:5a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
        Validity
            Not Before: Jun 30 14:48:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d522f02080c02db91123855f063caf84b87771f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:d3:37:b8:ff:ca:48:1c:f8:7c:b4:a9:f3:
                    6c:07:42:7d:0f:62:e5:a2:b8:4d:72:5a:63:3f:b3:
                    1d:43:d5:14:f1:54:d0:79:22:58:a9:3c:ed:40:29:
                    d3:85:cb:88:8f:c6:05:b7:11:c7:71:05:80:5e:f4:
                    7f:8d:c7:66:f4:d3:8d:05:10:14:7a:25:06:b4:49:
                    ab:05:92:0d:a0:66:17:c9:a3:73:02:b0:14:ac:32:
                    14:2e:37:17:7a:ed:f2:4a:e9:8e:ec:2f:ca:5f:c7:
                    a4:05:e8:6b:cb:7b:aa:c4:04:28:06:df:85:fd:99:
                    9c:ca:27:2d:01:c1:fe:51:87:78:92:02:2a:37:5a:
                    a0:93:be:fc:4a:00:fb:8f:e7:ce:0f:57:ef:57:88:
                    05:2b:29:4f:fb:a8:47:c1:21:f2:03:2d:5f:84:40:
                    c7:a9:39:10:3c:31:57:b6:43:ad:5b:61:e7:4d:f8:
                    d3:30:aa:23:a5:ef:e8:51:92:32:60:59:a4:93:b0:
                    75:ea:43:df:55:c5:4a:af:bb:03:7a:af:a8:c2:76:
                    75:0b:0b:9c:cf:88:ea:b0:fc:0b:5a:4f:a7:0f:18:
                    d4:d0:66:e4:d2:98:24:c0:d2:93:f3:a7:f8:2c:96:
                    cf:c7:46:81:9e:67:a8:f7:ca:64:c8:67:a2:2a:00:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:52:2F:02:08:0C:02:DB:91:12:38:55:F0:63:CA:F8:4B:87:77:1F
            X509v3 Authority Key Identifier:
                keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/PVIvAggMAtuREjhV8GPK-EuHdx8.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208460

    Signature Algorithm: sha256WithRSAEncryption
         34:b4:4f:4b:ba:26:d0:c7:d8:e5:48:de:65:6b:30:65:64:df:
         61:32:ff:dc:7e:2e:1b:19:63:c6:e0:35:0a:12:52:f0:2a:5b:
         3c:f1:26:e0:f6:e1:d6:f1:1b:29:e4:7e:8e:3e:d7:fa:8d:78:
         85:19:8d:99:43:1c:c0:42:e1:a6:f0:38:c6:34:08:73:37:92:
         3c:72:c0:b8:4f:fa:db:16:ff:10:04:bc:a6:3b:2b:59:8b:d2:
         d6:16:8d:87:dc:37:a7:19:ec:69:25:7a:01:09:d5:39:e8:55:
         25:b5:67:00:48:43:b8:23:93:88:9b:13:4a:1f:72:26:ac:da:
         48:df:38:87:45:2a:8c:5d:0f:fd:fd:e4:3d:6c:20:2b:9a:30:
         de:50:6a:32:42:fc:0e:dc:cf:0e:bb:21:c3:f4:47:d6:cb:2e:
         21:ce:07:2f:8e:c4:64:81:c9:05:ee:41:bb:74:c6:3d:03:7d:
         eb:bd:7b:df:d6:43:90:6e:e2:7a:6d:26:a1:8b:a9:55:77:a0:
         99:a8:7a:41:68:92:09:4e:c0:de:2a:00:b2:3d:e0:5b:57:f4:
         28:64:60:89:71:6c:9e:b6:a2:e3:35:fa:34:73:fd:17:de:5a:
         6c:92:47:f2:4e:d8:8f:28:c2:ef:b7:df:34:08:91:70:fd:cd:
         76:d4:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:52 2026 by rpki-client