Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/wjFSWz7vhMciO3NWgq7EOeol478.asa
File:                     wjFSWz7vhMciO3NWgq7EOeol478.asa (raw, json)
Hash identifier:          JJd/1+R2h9nS2P/GXQBEhk+xRvz/fMCd/yGwQQm5K5U=
Subject key identifier:   C2:31:52:5B:3E:EF:84:C7:22:3B:73:56:82:AE:C4:39:EA:25:E3:BF
Certificate issuer:       /CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Certificate serial:       019FD199F57222FB4DA76E858120108FD43A
Authority key identifier: 23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/wjFSWz7vhMciO3NWgq7EOeol478.asa
Signing time:             Wed 05 Aug 2026 11:05:55 +0000
ASPA not before:          Wed 05 Aug 2026 11:05:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            21430
Providers:                AS: 1299
                          AS: 3257
                          AS: 3491
                          AS: 39392
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d1:99:f5:72:22:fb:4d:a7:6e:85:81:20:10:8f:d4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23cf1dc7fc43e814839e00d804d3e0453121a842
        Validity
            Not Before: Aug  5 11:05:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c231525b3eef84c7223b735682aec439ea25e3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e0:96:19:04:ae:ba:f4:d3:45:e1:77:ab:41:
                    34:e7:bd:b9:6b:88:24:48:68:88:26:00:52:d4:0e:
                    75:b6:8b:c5:80:15:eb:53:5e:a2:5b:b8:27:27:43:
                    b7:13:ab:cd:57:8b:3b:ce:bf:f1:0d:13:d3:0e:73:
                    70:e0:7f:4a:c8:18:34:31:95:82:81:e0:91:04:67:
                    35:64:b9:1c:55:75:a8:bc:2b:34:fc:64:30:9d:f1:
                    29:42:83:31:a5:19:7d:00:20:57:7f:9d:0b:05:53:
                    df:e9:72:84:25:68:48:e5:50:08:ae:45:49:0f:d6:
                    e6:ef:d3:54:37:8b:cf:62:d5:06:e7:7e:d5:6d:1f:
                    06:56:8d:f4:9d:ac:08:8d:1e:9f:ac:1f:10:53:a6:
                    4a:62:ab:45:13:18:62:f4:d9:5e:0a:a7:d0:4d:11:
                    00:a9:56:c0:29:c0:d7:34:fb:c5:39:e8:a2:b2:ba:
                    47:b9:ac:e2:24:c7:f5:b3:6d:cd:e3:d4:22:30:37:
                    00:cc:6f:cc:ea:6a:77:80:40:52:f4:d4:6e:96:b8:
                    5b:72:5c:31:b2:58:ea:ef:f7:f0:6c:cb:cf:27:fc:
                    1b:2e:3b:6f:a4:a7:fd:d4:4b:47:56:d8:0d:9b:7e:
                    38:a5:89:2d:16:c1:28:af:e6:91:31:fb:9e:26:cd:
                    cc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:31:52:5B:3E:EF:84:C7:22:3B:73:56:82:AE:C4:39:EA:25:E3:BF
            X509v3 Authority Key Identifier:
                keyid:23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/wjFSWz7vhMciO3NWgq7EOeol478.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21430

    Signature Algorithm: sha256WithRSAEncryption
         8b:b2:fe:68:a2:6b:b5:b9:3e:63:81:da:4f:c4:b8:c6:8d:88:
         d1:d6:5a:a6:cd:0f:5f:f3:14:1e:b1:08:dd:1e:1d:a3:31:fb:
         90:66:8b:29:d0:11:e1:2f:25:3f:aa:26:c5:39:f6:c0:49:f2:
         11:0c:b6:82:39:c7:dc:c5:6d:7b:74:d9:03:a9:93:d8:e1:69:
         be:46:c5:f9:d2:01:79:8f:f0:b5:83:cc:89:72:36:3b:37:8f:
         e7:09:b2:41:b2:97:44:0f:2c:1d:37:17:7e:36:c9:7c:15:29:
         d4:ec:82:ab:fb:96:f9:d3:ea:92:84:70:11:be:7d:8a:d6:c3:
         0a:7e:10:f1:6e:b1:98:e2:f3:9e:46:a1:ff:fb:f4:ae:80:4a:
         73:15:89:12:cf:6c:e8:49:8b:de:f0:8b:03:fc:d5:bd:c9:24:
         78:d6:16:c8:53:1a:c5:2b:22:e2:db:83:b4:2e:cd:e2:65:d4:
         68:16:aa:4f:63:cd:21:10:43:3c:40:07:ab:b5:ac:eb:aa:db:
         fb:b8:51:e4:ba:8d:0c:ca:3e:8b:59:b1:f5:1a:11:6a:5a:0c:
         c5:ee:2a:bd:cf:7c:8f:b0:6f:08:eb:91:92:70:77:97:4b:b0:
         a5:1f:43:48:4c:c5:23:38:ff:5d:68:56:53:a8:14:0e:4c:c2:
         2c:bb:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:42 2026 by rpki-client