Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/M_CYpRI8SqN2pbVtKePdOnYWUSE.asa
File:                     M_CYpRI8SqN2pbVtKePdOnYWUSE.asa (raw, json)
Hash identifier:          M0fsFeA37g+aMXBHQ8+8jEtPr1DuQjy82Sio4c1x2i4=
Subject key identifier:   33:F0:98:A5:12:3C:4A:A3:76:A5:B5:6D:29:E3:DD:3A:76:16:51:21
Certificate issuer:       /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial:       019CE136CCBABBF6A20E7FC16D4621492401
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/M_CYpRI8SqN2pbVtKePdOnYWUSE.asa
Signing time:             Thu 12 Mar 2026 08:43:10 +0000
ASPA not before:          Thu 12 Mar 2026 08:43:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            56770
Providers:                AS: 31313
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:36:cc:ba:bb:f6:a2:0e:7f:c1:6d:46:21:49:24:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
        Validity
            Not Before: Mar 12 08:43:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=33f098a5123c4aa376a5b56d29e3dd3a76165121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:36:8b:d7:6d:e9:fc:f0:e6:8f:24:98:d5:
                    cc:c3:6c:16:cd:c4:cb:8f:b3:0b:e9:34:9b:61:f2:
                    f3:14:90:46:3a:ab:60:f5:b5:12:fe:6c:31:56:36:
                    de:a7:06:6d:39:00:fa:d8:bc:2e:2f:2c:a7:96:3d:
                    ed:c7:c6:ef:ce:4e:04:02:39:96:f6:ce:07:20:35:
                    9f:26:38:57:3e:8f:79:3f:36:b8:37:63:e6:f1:d9:
                    10:32:d0:67:31:01:7b:56:0f:1a:6c:4e:0e:71:4e:
                    6a:db:49:82:51:63:07:66:c4:e1:59:7e:9d:13:c4:
                    57:7c:a8:a4:d6:fe:81:97:6d:47:c8:3d:f9:07:c1:
                    e8:fb:83:03:39:71:39:d8:7b:e2:c7:c5:1d:78:0f:
                    a3:b3:10:55:4a:9d:a1:9b:ae:9c:2b:85:a7:69:70:
                    7d:73:33:c1:fd:a9:8e:78:fc:46:c0:1e:24:a9:ee:
                    74:8b:64:db:f2:96:2c:d9:15:be:ca:ac:4d:71:4d:
                    fa:1a:fa:c6:0f:e1:a8:4d:f6:42:d8:6d:58:fe:95:
                    09:e5:41:f7:eb:d2:09:1f:c2:83:5d:c0:8d:bb:86:
                    ef:8a:ac:43:9f:5c:bb:e1:a7:08:e3:0b:2d:60:6c:
                    5e:35:6f:fe:69:43:92:95:00:20:9a:c7:2e:ed:1b:
                    af:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F0:98:A5:12:3C:4A:A3:76:A5:B5:6D:29:E3:DD:3A:76:16:51:21
            X509v3 Authority Key Identifier:
                keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/M_CYpRI8SqN2pbVtKePdOnYWUSE.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  56770

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:d8:f8:81:3a:a1:6e:e4:d0:21:cb:f7:1f:07:7d:28:46:
         3c:c8:35:e3:e5:e8:5e:f7:7e:43:4c:f3:8f:25:38:68:2e:02:
         64:b0:c6:ee:3f:3e:4e:f1:5e:0c:8d:f9:63:5a:d7:85:53:9e:
         ef:c9:44:6b:3b:da:5c:5f:8e:cd:a8:16:b5:da:b5:7b:42:3a:
         bb:fa:33:dd:eb:4f:20:a9:2b:96:2e:ac:eb:8a:73:e9:d2:f8:
         dc:eb:18:f1:66:23:46:ea:f6:69:a0:16:b6:76:27:fb:ad:7c:
         ad:5e:01:58:7b:b3:be:2e:4f:4d:ad:7e:14:3a:f2:c2:10:d2:
         2a:9f:69:04:1c:4b:4e:a3:f6:0b:b4:c3:90:00:99:0a:ad:db:
         71:36:45:33:12:68:36:70:62:b1:d7:d1:1f:4a:20:84:5b:af:
         8f:9b:f7:3e:c7:0c:0a:2d:3e:10:98:a1:dd:06:39:8a:81:9c:
         8b:a2:7f:0f:61:d4:d0:6d:1c:87:d4:8d:8e:98:38:2d:2d:6c:
         08:5c:2e:bf:8f:5d:4b:ad:a0:90:01:e6:37:46:94:65:8f:e7:
         1e:ed:da:5d:ad:73:b0:5e:cf:5f:77:2f:c7:b8:39:85:0d:6e:
         ec:54:c9:2f:af:e2:0f:42:95:9d:ed:2c:36:26:39:25:55:04:
         52:76:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:48:43 2026 by rpki-client