Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/CS5ZQgE1DjiY73TjWXLmvA1XB6s.asa
File: CS5ZQgE1DjiY73TjWXLmvA1XB6s.asa (raw, json)
Hash identifier: cdzgInYFqqniFAya9n+J57Hqz+X64L3eS0xllceyplc=
Subject key identifier: 09:2E:59:42:01:35:0E:38:98:EF:74:E3:59:72:E6:BC:0D:57:07:AB
Certificate issuer: /CN=aa7d9e9ce8bc5dac8faf8816d9a0a0a861db8a85
Certificate serial: 019C24EBAAC55F9CE19281AA215E8942EF68
Authority key identifier: AA:7D:9E:9C:E8:BC:5D:AC:8F:AF:88:16:D9:A0:A0:A8:61:DB:8A:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/CS5ZQgE1DjiY73TjWXLmvA1XB6s.asa
Signing time: Tue 03 Feb 2026 19:12:30 +0000
ASPA not before: Tue 03 Feb 2026 19:12:30 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 215685
Providers: AS: 1299
AS: 5405
AS: 6939
AS: 56382
AS: 62403
AS: 207252
AS: 213753
AS: 215638
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:24:eb:aa:c5:5f:9c:e1:92:81:aa:21:5e:89:42:ef:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7d9e9ce8bc5dac8faf8816d9a0a0a861db8a85
Validity
Not Before: Feb 3 19:12:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=092e594201350e3898ef74e35972e6bc0d5707ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:3d:11:71:a7:63:50:01:13:95:fe:0c:47:
ec:0c:a5:fe:c3:84:e7:19:77:89:5b:76:13:ed:79:
06:2d:64:4b:8a:22:1a:c8:ce:6a:0a:b5:c0:a1:6c:
4c:b0:58:8e:80:a9:93:0f:b5:73:c7:f9:9b:50:e2:
bb:7e:89:2b:7e:c8:a8:c3:24:bb:8b:bd:3d:f5:fd:
f8:1a:64:48:91:d2:e1:6a:cb:da:b5:bd:dc:b2:23:
5b:d4:15:30:b9:ac:9c:00:09:f1:6d:1f:5d:b6:fd:
d3:02:aa:bc:a4:df:77:6d:5e:e3:6c:10:a9:85:60:
e1:6b:99:5d:43:8c:9f:b1:bf:68:e0:9d:81:7b:c1:
9a:69:2c:24:92:f2:ef:00:c7:7c:6c:50:04:73:d3:
6a:fe:25:70:e9:af:15:67:b9:66:f3:3d:4a:29:74:
b4:51:8b:25:61:d7:87:c0:44:c3:c4:17:72:41:70:
a6:df:13:40:dd:f5:7f:ed:78:6e:f7:39:d6:7f:c5:
31:f5:db:8c:9c:89:b6:82:f6:2f:98:b3:33:fa:57:
5a:eb:28:23:34:18:88:d9:e7:57:d5:fc:60:12:b8:
14:e7:db:05:70:dc:07:ef:96:b4:05:3e:e0:1b:9d:
af:9a:12:d5:be:ad:d2:37:82:6e:28:3e:29:3d:ef:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:59:42:01:35:0E:38:98:EF:74:E3:59:72:E6:BC:0D:57:07:AB
X509v3 Authority Key Identifier:
keyid:AA:7D:9E:9C:E8:BC:5D:AC:8F:AF:88:16:D9:A0:A0:A8:61:DB:8A:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qn2enOi8XayPr4gW2aCgqGHbioU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/CS5ZQgE1DjiY73TjWXLmvA1XB6s.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e28d5b-69b1-4752-99cb-554a81c90711/1/qn2enOi8XayPr4gW2aCgqGHbioU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215685
Signature Algorithm: sha256WithRSAEncryption
1c:d0:a9:d5:21:69:e7:0a:c2:2a:ec:b9:35:30:a6:a9:85:dd:
c3:72:80:be:db:a9:03:c3:69:45:36:8d:69:30:de:e7:60:ee:
44:e4:53:cf:59:39:4b:3a:85:04:5e:c0:90:8c:c4:7d:77:eb:
34:d9:7c:cb:71:cf:f6:43:f7:69:59:6c:e1:02:91:b3:46:9b:
18:7e:ea:1d:f8:5a:70:2b:2a:29:52:ad:a5:d5:ed:ea:ea:50:
32:da:d9:ca:5c:53:c5:e7:79:64:ff:a4:69:b2:15:7f:37:8b:
cc:32:11:3f:c2:c9:99:50:31:1a:be:d5:32:3f:fc:5d:91:d2:
a0:21:4e:5f:55:98:68:6a:a8:59:4c:28:0d:47:50:29:33:46:
44:58:75:98:6a:d3:e8:cd:45:01:b2:2c:66:5d:e8:37:bf:e9:
77:27:7a:b8:e6:2e:bb:ae:32:9f:42:ee:1a:32:99:19:12:91:
c0:b3:f1:76:3d:4e:74:1c:30:8b:9a:58:b0:a5:78:cd:a8:4d:
46:e3:8c:01:2f:9f:1c:1f:f2:39:b7:56:30:97:e2:41:1f:58:
6c:a1:6e:03:ac:12:be:be:68:c0:35:e7:f8:8e:7e:75:4a:d7:
0c:bd:d5:39:ae:0d:df:9b:a4:f6:76:80:e8:3d:cd:dc:eb:bb:
59:03:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 11:37:56 2026 by rpki-client