Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/JD_hILTLs5WiN-GGz9cnjaMmPmg.asa
File:                     JD_hILTLs5WiN-GGz9cnjaMmPmg.asa (raw, json)
Hash identifier:          w3ngbPPlSEh0i5ZlPs9dJQ8lVMYy1vGnqLwn37EOyHY=
Subject key identifier:   24:3F:E1:20:B4:CB:B3:95:A2:37:E1:86:CF:D7:27:8D:A3:26:3E:68
Certificate issuer:       /CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Certificate serial:       019ED0369594C1C37E64C72C55D79CC07D6D
Authority key identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/JD_hILTLs5WiN-GGz9cnjaMmPmg.asa
Signing time:             Tue 16 Jun 2026 11:34:58 +0000
ASPA not before:          Tue 16 Jun 2026 11:34:58 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197455
Providers:                AS: 201814
                          AS: 207208
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d0:36:95:94:c1:c3:7e:64:c7:2c:55:d7:9c:c0:7d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
        Validity
            Not Before: Jun 16 11:34:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=243fe120b4cbb395a237e186cfd7278da3263e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:90:8d:20:12:98:ff:7d:dc:70:fe:6d:4a:
                    4a:3c:fa:d9:0c:6b:b0:a7:aa:2a:7e:17:aa:ac:fd:
                    0b:aa:41:e3:c0:3a:46:f0:0e:de:61:82:de:03:fd:
                    4c:5f:e6:02:30:3f:9a:bf:fa:1b:38:3b:55:c1:00:
                    af:0e:cc:c8:49:50:db:4f:e5:7c:d7:53:72:d5:32:
                    27:64:19:aa:52:23:23:b4:5c:24:71:eb:ec:e1:f7:
                    3e:a4:1c:67:02:46:2c:8e:02:a1:b2:d4:62:19:ad:
                    32:93:a4:c4:d8:e3:dd:2f:6e:08:d5:f2:4b:94:d7:
                    41:7c:3f:91:1f:07:2e:5d:17:38:4e:97:b3:5c:e8:
                    46:71:d7:fc:f6:bc:05:90:7b:89:d6:da:22:3c:c6:
                    8a:21:df:65:30:7b:92:3e:10:6f:ef:39:fc:25:ab:
                    93:71:00:34:a2:0f:ba:d2:50:9b:9f:92:cc:cf:95:
                    46:77:18:a1:b3:9e:b4:c4:d3:84:e3:47:00:02:38:
                    4f:3d:04:d4:a2:ae:da:77:4a:4a:85:5d:04:6c:d5:
                    2f:2b:b9:66:53:3c:84:49:74:54:c5:51:94:12:c1:
                    9f:60:5a:aa:e3:49:37:44:83:04:de:e4:94:0c:a7:
                    03:9f:86:d3:11:d7:a0:9b:5c:91:a1:6b:ae:b3:06:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3F:E1:20:B4:CB:B3:95:A2:37:E1:86:CF:D7:27:8D:A3:26:3E:68
            X509v3 Authority Key Identifier:
                keyid:C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/JD_hILTLs5WiN-GGz9cnjaMmPmg.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197455

    Signature Algorithm: sha256WithRSAEncryption
         1d:28:58:51:98:fb:53:df:dc:dc:ea:1a:6d:57:39:ec:b6:fd:
         e3:9a:b1:33:d5:69:9d:be:08:5c:7e:8a:89:d5:47:1b:f3:1d:
         f9:4c:88:eb:37:e6:3b:c5:08:71:82:9b:68:3f:2b:4c:cc:f0:
         1a:f1:50:12:91:fd:0c:7d:ba:9b:d9:78:97:4c:25:10:e4:ca:
         0d:c5:74:81:5b:99:aa:c1:09:ca:26:29:bd:0e:af:7d:ef:9c:
         6a:4d:bb:f9:2d:5d:d3:cc:f4:71:fe:a4:85:a0:fd:62:c6:a5:
         84:a4:ae:67:d5:74:6e:64:60:98:57:2a:2b:41:d7:8c:87:9f:
         39:42:21:63:c8:7d:fc:77:c7:fb:50:4b:36:cf:6a:21:72:ec:
         9a:68:cd:9b:b3:07:1b:35:c4:bd:3b:3a:90:7f:77:17:b0:e3:
         ee:e7:1e:73:88:94:cc:3f:2c:97:c1:0f:3c:16:20:df:1c:43:
         ac:4c:00:d9:32:35:73:ea:95:1f:44:ae:0d:26:1a:50:b9:27:
         98:10:6a:a4:d5:60:62:ed:59:1a:cf:ff:fa:cf:10:41:8e:7d:
         28:57:fe:b3:13:18:ba:86:fa:c3:20:75:fe:0a:86:ad:9a:31:
         ac:d6:7b:af:ee:83:e5:f4:7d:fe:f8:d4:2f:df:d0:62:d5:35:
         87:8d:60:6e
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ7QNpWUwcN+ZMcsVdecwH1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1Yzg5ZDUyNjBjYjM0ZmRiYmIzYmMyNWJmNGFkYmFmNGNk
YzY4YTAwHhcNMjYwNjE2MTEzNDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDNmZTEyMGI0Y2JiMzk1YTIzN2UxODZjZmQ3Mjc4ZGEzMjYzZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS6QjSASmP993HD+bUpKPPrZDGuw
p6oqfheqrP0LqkHjwDpG8A7eYYLeA/1MX+YCMD+av/obODtVwQCvDszISVDbT+V8
11Ny1TInZBmqUiMjtFwkcevs4fc+pBxnAkYsjgKhstRiGa0yk6TE2OPdL24I1fJL
lNdBfD+RHwcuXRc4TpezXOhGcdf89rwFkHuJ1toiPMaKId9lMHuSPhBv7zn8JauT
cQA0og+60lCbn5LMz5VGdxihs560xNOE40cAAjhPPQTUoq7ad0pKhV0EbNUvK7lm
UzyESXRUxVGUEsGfYFqq40k3RIME3uSUDKcDn4bTEdegm1yRoWuuswYO2QIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCQ/4SC0y7OVojfhhs/XJ42jJj5oMB8GA1UdIwQY
MBaAFMXInVJgyzT9u7O8Jb9K269M3GigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82MjNiMTQtNGU2ZS00YzMxLTk2YmUt
OGViY2QwOWIyYmNhLzEvSkRfaElMVExzNVdpTi1HR3o5Y25qYU1tUG1nLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82MjNiMTQtNGU2ZS00YzMxLTk2YmUtOGViY2QwOWIyYmNh
LzEveGNpZFVtRExOUDI3czd3bHYwcmJyMHpjYUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMDTzANBgkqhkiG
9w0BAQsFAAOCAQEAHShYUZj7U9/c3OoabVc57Lb945qxM9Vpnb4IXH6KidVHG/Md
+UyI6zfmO8UIcYKbaD8rTMzwGvFQEpH9DH26m9l4l0wlEOTKDcV0gVuZqsEJyiYp
vQ6vfe+cak27+S1d08z0cf6khaD9YsalhKSuZ9V0bmRgmFcqK0HXjIefOUIhY8h9
/HfH+1BLNs9qIXLsmmjNm7MHGzXEvTs6kH93F7Dj7ucec4iUzD8sl8EPPBYg3xxD
rEwA2TI1c+qVH0SuDSYaULknmBBqpNVgYu1ZGs//+s8QQY59KFf+sxMYuob6wyB1
/gqGrZoxrNZ7r+6D5fR9/vjUL9/QYtU1h41gbg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:33:24 2026 by rpki-client