Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/u0QvJos6aQuVHi55RUrNrXgfUVw.asa
File:                     u0QvJos6aQuVHi55RUrNrXgfUVw.asa (raw, json)
Hash identifier:          ACtAtsRiatajmXHP1C5zTlEQsTPl4TCmsquEFaxzwfI=
Subject key identifier:   BB:44:2F:26:8B:3A:69:0B:95:1E:2E:79:45:4A:CD:AD:78:1F:51:5C
Certificate issuer:       /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial:       019CB79F75773FC5A3BFE340B78203924FDA
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/u0QvJos6aQuVHi55RUrNrXgfUVw.asa
Signing time:             Wed 04 Mar 2026 06:53:26 +0000
ASPA not before:          Wed 04 Mar 2026 06:53:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197444
Providers:                AS: 15614
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 21:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b7:9f:75:77:3f:c5:a3:bf:e3:40:b7:82:03:92:4f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
        Validity
            Not Before: Mar  4 06:53:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bb442f268b3a690b951e2e79454acdad781f515c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2b:1c:9b:89:ed:9b:07:7b:4c:0e:e0:86:ef:
                    a0:b9:07:e1:81:55:e9:42:a9:f8:62:6f:70:74:53:
                    e3:03:77:4a:bc:5e:a8:3c:22:7c:fc:3c:19:43:ae:
                    82:07:56:f3:ce:5e:c7:a2:df:7d:40:7c:6a:73:f5:
                    16:ea:1b:04:e8:df:d9:37:db:0d:27:7f:e4:49:7c:
                    8b:c8:d4:91:4a:29:43:7f:8d:bc:55:90:23:48:2a:
                    40:2d:1b:fb:d4:ae:34:cc:47:32:28:fe:83:76:b0:
                    93:d2:5a:48:7d:dd:c5:ac:6a:71:4c:eb:9d:1a:e5:
                    9c:20:75:ca:82:de:15:3f:06:a0:33:18:45:ec:3c:
                    b6:f6:60:e6:97:09:f4:ef:32:3b:cc:c1:c7:0a:4a:
                    8d:6d:9b:09:b9:e2:dd:d5:46:4f:e4:0a:7f:36:cc:
                    33:81:af:25:c2:0a:70:23:de:cf:00:27:0d:bb:75:
                    be:4b:47:73:59:0e:34:d8:56:dc:55:72:74:95:4c:
                    30:06:62:7b:33:e3:75:e9:4f:f8:cf:aa:c1:c5:57:
                    ea:2c:ab:df:df:a8:fd:b5:4f:65:5e:38:ed:37:10:
                    14:ba:4b:84:d9:af:33:0a:f6:f9:a4:ad:69:2b:c8:
                    79:27:79:a6:e8:b4:ea:28:75:cf:41:16:cd:a1:a6:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:44:2F:26:8B:3A:69:0B:95:1E:2E:79:45:4A:CD:AD:78:1F:51:5C
            X509v3 Authority Key Identifier:
                keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/u0QvJos6aQuVHi55RUrNrXgfUVw.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197444

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:a7:d0:02:a1:af:98:50:8b:49:cf:8c:45:27:6f:a2:2f:
         77:ac:6d:fc:5f:7a:f1:e7:d7:96:a4:68:d1:1f:b9:74:cc:5f:
         df:76:ac:6d:fc:90:1a:0c:dd:82:da:82:09:25:7d:72:3a:ff:
         50:d0:81:de:83:f3:9e:a1:3b:87:2f:24:4a:42:72:2e:c2:31:
         38:8f:2a:a7:0d:d4:36:78:69:3e:f2:c4:69:78:0d:02:61:a7:
         1c:1c:b7:5f:23:1d:a8:3a:7a:d2:c3:71:8f:f0:7a:70:80:d8:
         53:7b:95:1e:c5:e0:24:c7:5e:3f:72:ba:bc:42:05:34:97:4e:
         ae:47:2a:9b:d1:7c:c8:76:d9:98:bb:af:b8:3f:45:55:a8:11:
         47:10:9a:6e:3c:53:4d:a0:11:c6:2f:7d:6f:ae:db:41:77:28:
         c0:43:c2:fa:6f:29:8e:2f:2d:ec:e3:88:25:65:65:45:a6:e5:
         b6:78:31:ac:9e:47:0c:df:c1:a6:92:8d:ad:2f:b5:c7:e8:75:
         63:05:3e:17:0c:ae:48:87:f4:a7:89:a7:8f:c7:be:76:db:5b:
         18:32:d2:40:49:c4:f9:38:29:4d:8e:3b:39:3d:60:49:c4:02:
         c2:ae:6c:ab:05:19:f4:12:d4:69:ed:89:c5:71:0e:81:9b:65:
         a8:56:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:50:30 2026 by rpki-client