Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/D_KlB34E9TuYjqot3WH68IZh9Oo.asa
File:                     D_KlB34E9TuYjqot3WH68IZh9Oo.asa (raw, json)
Hash identifier:          g2ep34hP7XJuNaAzXn6kUfYddFEXLyHb6BpLTFIwPsE=
Subject key identifier:   0F:F2:A5:07:7E:04:F5:3B:98:8E:AA:2D:DD:61:FA:F0:86:61:F4:EA
Certificate issuer:       /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial:       019E86D9E3D3C63AD422ACDACC07D25385B4
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/D_KlB34E9TuYjqot3WH68IZh9Oo.asa
Signing time:             Tue 02 Jun 2026 05:41:26 +0000
ASPA not before:          Tue 02 Jun 2026 05:41:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            198408
Providers:                AS: 3356
                          AS: 6939
                          AS: 9141
                          AS: 12741
                          AS: 197324
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:86:d9:e3:d3:c6:3a:d4:22:ac:da:cc:07:d2:53:85:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
        Validity
            Not Before: Jun  2 05:41:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0ff2a5077e04f53b988eaa2ddd61faf08661f4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:be:6f:c5:ce:89:9d:f5:24:08:d9:08:3b:
                    e1:8e:1c:83:e6:ea:d0:4a:7f:b9:11:12:4c:ab:bc:
                    17:b4:88:e8:fb:b0:aa:e6:e6:b2:3f:63:2e:84:f8:
                    e0:29:06:68:01:38:f6:78:b1:40:04:0e:b5:27:ad:
                    b0:61:8d:56:13:12:26:76:e7:c3:63:b7:52:93:cf:
                    2b:26:67:d1:7a:f7:58:81:e6:18:49:eb:a9:da:91:
                    27:0a:e3:99:40:ab:69:5d:48:a7:08:4d:14:74:c0:
                    1d:0d:da:58:29:32:eb:5e:01:f4:42:8d:3c:95:9a:
                    b0:4b:56:d1:42:35:cf:c9:0c:a1:01:8e:1a:23:d6:
                    b2:53:f3:12:a9:c7:47:60:b9:a4:b1:99:00:1b:38:
                    be:c6:8f:5d:45:ab:14:8f:19:98:d6:3d:5d:c7:ab:
                    0e:5f:81:59:62:ee:8f:49:2d:91:19:9d:d7:02:55:
                    41:10:5d:27:e3:65:1d:0f:55:d1:22:20:33:1c:65:
                    af:41:33:57:8f:72:d5:93:f0:1d:bd:61:6a:a7:e7:
                    f3:ee:4a:25:e7:44:2e:a4:e3:9a:f4:38:f0:f4:b5:
                    b3:26:e0:07:1e:15:69:54:b3:57:1f:cb:e9:4e:2b:
                    07:25:6d:48:f1:00:6c:00:1f:b4:16:b0:8e:8e:9f:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F2:A5:07:7E:04:F5:3B:98:8E:AA:2D:DD:61:FA:F0:86:61:F4:EA
            X509v3 Authority Key Identifier:
                keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/D_KlB34E9TuYjqot3WH68IZh9Oo.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198408

    Signature Algorithm: sha256WithRSAEncryption
         86:f3:47:84:3a:ac:19:97:b7:db:9a:3c:6f:70:d3:f9:11:3b:
         9f:73:1a:33:d4:50:f0:43:06:9d:4a:ae:eb:12:3c:0a:6e:ae:
         c1:73:e4:bf:27:85:10:31:78:bc:b3:78:a9:ce:a2:46:a0:2c:
         96:cc:b5:ff:36:12:36:31:8d:ce:88:02:13:d3:d7:cc:b1:87:
         1f:02:9a:12:ed:4c:cc:64:b1:7c:dd:e4:40:06:8a:06:f9:11:
         79:2b:2b:fd:aa:57:37:20:56:ac:73:e1:b7:c9:d8:4b:a7:b9:
         db:04:58:fe:e0:23:f0:5a:d1:94:1d:16:74:5b:31:0c:fb:16:
         e7:40:04:72:70:ba:99:33:9a:c9:36:7d:50:54:bb:93:0a:36:
         6f:12:05:20:6e:8a:b6:52:cf:83:d6:0d:c6:b1:63:b1:60:43:
         a3:b8:57:1b:c9:cb:f9:02:88:3f:c5:74:25:b8:ed:82:4d:3d:
         a5:0c:15:73:f0:7f:b8:27:c3:b6:9d:ed:0f:99:8e:68:3b:a5:
         dc:b8:61:83:aa:c8:70:1d:56:6c:0e:43:3d:6d:60:8b:78:b5:
         16:7a:3a:a4:07:2b:d4:49:71:1c:fe:5c:85:8b:08:24:ca:6d:
         23:ca:e8:c7:4d:02:92:73:1a:29:ce:37:97:5a:60:29:85:62:
         9a:2a:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:35 2026 by rpki-client