Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/Wkka_V42HxWorxdgZD9_NFgsaJA.asa
File:                     Wkka_V42HxWorxdgZD9_NFgsaJA.asa (raw, json)
Hash identifier:          FPyTcbsiLtsSTSgovrUqEmWyP291dinoJqAUbHPLikc=
Subject key identifier:   5A:49:1A:FD:5E:36:1F:15:A8:AF:17:60:64:3F:7F:34:58:2C:68:90
Certificate issuer:       /CN=e9280c4871b2bf9afc3351fdf6a57ddfa7daf48c
Certificate serial:       019E91FD8040D997AB2C27AD9CDC64F59718
Authority key identifier: E9:28:0C:48:71:B2:BF:9A:FC:33:51:FD:F6:A5:7D:DF:A7:DA:F4:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/Wkka_V42HxWorxdgZD9_NFgsaJA.asa
Signing time:             Thu 04 Jun 2026 09:36:09 +0000
ASPA not before:          Thu 04 Jun 2026 09:36:09 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            197324
Providers:                AS: 11967
                          AS: 205941
                          AS: 213449
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:fd:80:40:d9:97:ab:2c:27:ad:9c:dc:64:f5:97:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9280c4871b2bf9afc3351fdf6a57ddfa7daf48c
        Validity
            Not Before: Jun  4 09:36:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5a491afd5e361f15a8af1760643f7f34582c6890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:11:a8:5b:9b:0f:75:2b:95:99:6b:b7:9b:
                    21:f0:40:7f:d3:9f:7f:2e:39:79:f2:2d:4d:92:90:
                    8e:f2:35:50:5a:1b:d8:82:70:75:61:a2:4a:a1:f7:
                    98:c9:b1:57:9e:67:d7:3b:41:58:6a:e7:e7:e7:76:
                    8e:cc:f1:fe:cd:1a:0b:60:40:75:ad:6b:44:4e:d3:
                    e6:dc:65:bf:3d:59:e8:c7:07:b2:de:e2:ef:cb:8e:
                    27:3b:6e:d3:3b:18:bd:21:0c:66:4a:e2:9e:52:8f:
                    04:2c:6d:e4:e8:c3:d6:3e:70:d1:6d:c4:a1:62:db:
                    3f:e2:8c:e3:ae:88:aa:5b:16:c8:ca:f1:8c:16:12:
                    76:75:cc:3a:f3:c6:8c:0c:be:21:54:29:31:ac:47:
                    d0:d4:77:9c:6b:da:c4:56:6e:de:c9:a4:a8:a0:ec:
                    22:14:f3:7a:0d:69:5d:e1:d6:52:e6:b5:c7:9b:fd:
                    5c:e9:38:73:c3:7e:cf:9f:3a:34:5c:7e:a7:85:84:
                    1b:1f:9a:86:e9:92:66:82:66:7f:e5:b2:f1:60:df:
                    fd:61:87:51:87:fa:e0:75:72:bb:32:63:b2:d7:4b:
                    fb:08:66:2d:44:64:82:7a:31:d6:09:e7:84:c0:ed:
                    a6:37:7c:6b:a4:29:b0:25:e1:15:2d:b7:73:c0:9d:
                    77:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:49:1A:FD:5E:36:1F:15:A8:AF:17:60:64:3F:7F:34:58:2C:68:90
            X509v3 Authority Key Identifier:
                keyid:E9:28:0C:48:71:B2:BF:9A:FC:33:51:FD:F6:A5:7D:DF:A7:DA:F4:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SgMSHGyv5r8M1H99qV936fa9Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/Wkka_V42HxWorxdgZD9_NFgsaJA.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b9d18b-553d-4678-8307-3374da3401f1/1/6SgMSHGyv5r8M1H99qV936fa9Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  197324

    Signature Algorithm: sha256WithRSAEncryption
         0c:bd:cc:5b:e1:fc:02:2c:37:fc:a0:12:bb:ff:0f:8b:3c:47:
         6a:fe:63:79:b2:63:43:eb:1c:3e:90:03:cd:7a:3e:3c:40:dc:
         8e:66:47:cc:f9:39:c9:7d:6d:7c:00:a1:0a:07:23:a6:7c:57:
         b9:85:b7:82:28:a8:88:d5:a4:41:50:02:a8:2b:71:b3:f9:5a:
         dc:15:96:6b:9d:8d:90:d2:4c:6e:9d:92:76:a1:d9:50:75:5e:
         c4:2b:f9:55:9a:25:01:39:b2:ba:44:ba:82:1f:ca:26:c8:3a:
         bb:84:4e:55:ae:d0:71:10:7e:54:01:78:47:7f:bc:38:f3:14:
         1c:17:29:00:59:66:8c:33:ee:23:b8:59:7c:b6:18:27:f5:de:
         9a:e7:e9:ab:4f:02:23:c3:c1:5b:c9:e4:6d:90:73:7b:be:4d:
         7c:e0:7d:12:c8:1f:51:06:a5:d2:e8:6f:7f:08:26:d3:a1:88:
         8f:d4:ca:58:03:71:dd:bf:cc:65:7c:0b:da:07:f4:77:86:0a:
         77:c7:f3:f8:01:c9:93:49:cd:9c:ef:e8:a6:02:6a:ca:e0:53:
         f2:45:82:dd:7d:ef:1e:4c:27:4b:07:d6:7c:e9:ac:9e:ef:82:
         17:45:a6:11:86:cf:19:83:ec:64:0d:e6:02:6b:37:4c:5f:35:
         b0:7f:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:55 2026 by rpki-client