Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/oIac13DlsFA4oV75RJ_6EHoBE8E.asa
File:                     oIac13DlsFA4oV75RJ_6EHoBE8E.asa (raw, json)
Hash identifier:          J+hNIG3Jc2ui+eXyXouYr2r8ldCqegkujVy16x0xlFg=
Subject key identifier:   A0:86:9C:D7:70:E5:B0:50:38:A1:5E:F9:44:9F:FA:10:7A:01:13:C1
Certificate issuer:       /CN=8983d3e15f6e3661d71cf54f62f72fa14a275f4f
Certificate serial:       019FB2B2E219AC9BBE49DDED8B24ADFBEE9C
Authority key identifier: 89:83:D3:E1:5F:6E:36:61:D7:1C:F5:4F:62:F7:2F:A1:4A:27:5F:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iYPT4V9uNmHXHPVPYvcvoUonX08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/oIac13DlsFA4oV75RJ_6EHoBE8E.asa
Signing time:             Thu 30 Jul 2026 11:04:55 +0000
ASPA not before:          Thu 30 Jul 2026 11:04:55 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            199999
Providers:                AS: 44381
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/iYPT4V9uNmHXHPVPYvcvoUonX08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/iYPT4V9uNmHXHPVPYvcvoUonX08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iYPT4V9uNmHXHPVPYvcvoUonX08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 23:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b2:b2:e2:19:ac:9b:be:49:dd:ed:8b:24:ad:fb:ee:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8983d3e15f6e3661d71cf54f62f72fa14a275f4f
        Validity
            Not Before: Jul 30 11:04:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a0869cd770e5b05038a15ef9449ffa107a0113c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2a:e4:a2:11:d3:83:fb:ee:6b:ed:c4:50:f5:
                    a8:da:9d:af:31:2c:3f:80:b3:4e:2a:15:ac:07:21:
                    53:1a:14:d3:3c:63:57:90:79:99:73:bb:57:1d:71:
                    21:d2:d2:ae:07:4f:fb:fe:ca:70:11:05:91:1f:c7:
                    1b:b6:8e:0b:27:2b:44:26:95:bb:b4:7c:fd:87:a8:
                    f4:88:b3:91:ef:79:f8:9c:8f:27:ad:0c:2f:fc:81:
                    ec:80:8b:50:8a:e1:9c:9d:7d:b2:b6:8c:5d:68:91:
                    53:28:7a:ab:8d:df:d4:a1:a0:bf:f7:95:67:14:1d:
                    e5:4d:35:1e:a5:88:de:b1:3e:63:63:70:62:3a:c9:
                    e4:38:26:cc:56:a4:26:a8:97:5d:05:ad:58:ab:e0:
                    c7:f6:ac:a3:fc:db:44:8e:d1:92:55:94:ac:d6:da:
                    22:5c:c3:cd:87:ab:59:58:0a:ca:95:ee:aa:f1:79:
                    ec:a1:08:c7:af:6f:3a:32:e2:9a:9b:47:7d:ce:b6:
                    1b:42:0d:59:cb:d3:f0:14:5b:43:4b:a9:d4:93:75:
                    e0:d0:fd:b5:c1:51:43:f2:24:90:23:25:7d:25:ed:
                    03:61:72:f6:e8:4d:67:1c:d8:c1:55:f1:19:71:a0:
                    09:8f:3a:eb:84:97:d6:ba:84:89:fa:dd:78:e8:3d:
                    c3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:86:9C:D7:70:E5:B0:50:38:A1:5E:F9:44:9F:FA:10:7A:01:13:C1
            X509v3 Authority Key Identifier:
                keyid:89:83:D3:E1:5F:6E:36:61:D7:1C:F5:4F:62:F7:2F:A1:4A:27:5F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYPT4V9uNmHXHPVPYvcvoUonX08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/oIac13DlsFA4oV75RJ_6EHoBE8E.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ee742e-beac-428e-88b7-83b00f68384f/1/iYPT4V9uNmHXHPVPYvcvoUonX08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  199999

    Signature Algorithm: sha256WithRSAEncryption
         51:2e:24:03:a0:f6:5d:ec:ff:7f:98:71:9d:47:7b:59:76:50:
         40:65:f5:41:57:dc:49:54:96:51:c4:f4:cf:7e:6c:b3:16:0b:
         32:23:63:c4:d7:c9:12:e1:6f:7b:9f:c4:01:db:ba:77:ac:bf:
         2c:9b:d3:4b:80:b0:91:09:f2:f3:c5:7d:19:6d:9f:04:71:3b:
         92:c3:b8:ca:ca:18:ee:20:cf:fa:67:b6:b6:00:07:37:75:de:
         21:6f:41:a4:06:97:17:b9:37:38:df:5f:15:9f:6f:77:20:cf:
         3c:ac:1b:0d:c4:f1:04:6f:78:ce:1a:c4:2d:95:c4:65:0c:7c:
         85:44:10:81:6c:9a:89:14:af:63:d6:03:30:db:3f:68:3a:87:
         3f:5d:8f:31:f2:f5:23:bc:53:77:8a:2c:ba:a2:5c:0d:63:c8:
         4e:60:61:9b:bf:f1:9b:9d:43:17:4c:59:6c:22:95:2e:90:7b:
         96:73:3e:c5:a8:ef:7c:9b:7e:b8:c8:a2:ee:e6:20:87:12:a9:
         e2:30:d0:0e:c3:07:66:c7:41:83:97:4c:fb:09:d6:de:49:60:
         ed:61:4b:90:84:6a:d1:bb:04:5b:0f:4d:79:1e:b2:82:9e:e9:
         bb:77:6f:c1:50:43:06:3f:f3:25:30:b6:71:b9:67:1c:a2:3e:
         c8:cc:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:50 2026 by rpki-client