Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/UIll6YIedo-QY-yPa3jX6bp0h0Q.asa
File:                     UIll6YIedo-QY-yPa3jX6bp0h0Q.asa (raw, json)
Hash identifier:          AZvI46Ji0DAlrLNpPAxAAMglepWrJCLYP2IYIypu/4Q=
Subject key identifier:   50:89:65:E9:82:1E:76:8F:90:63:EC:8F:6B:78:D7:E9:BA:74:87:44
Certificate issuer:       /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial:       019CDC3B79C84C0FC001AF52DC81685A2704
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/UIll6YIedo-QY-yPa3jX6bp0h0Q.asa
Signing time:             Wed 11 Mar 2026 09:30:11 +0000
ASPA not before:          Wed 11 Mar 2026 09:30:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            24611
Providers:                AS: 3356
                          AS: 6661
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 21:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:dc:3b:79:c8:4c:0f:c0:01:af:52:dc:81:68:5a:27:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
        Validity
            Not Before: Mar 11 09:30:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=508965e9821e768f9063ec8f6b78d7e9ba748744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:60:c8:f4:9e:06:90:61:dc:f0:b3:48:a6:a4:
                    a8:ea:e2:83:03:b0:50:20:f4:02:32:27:74:66:f0:
                    1f:4c:42:74:a1:2d:e5:b9:a4:06:33:7d:e7:3c:27:
                    00:74:50:8a:35:95:f9:54:28:3d:bb:59:8a:39:b4:
                    94:d9:a3:4e:82:5e:c9:2d:af:05:0a:51:84:c9:18:
                    f1:28:8c:15:3d:a0:5f:e1:07:b8:90:82:f0:a4:00:
                    20:cf:40:11:62:b2:8c:94:39:cc:8a:fb:71:fb:8f:
                    2f:f5:53:06:85:6d:62:5b:a0:5c:5f:93:dd:2b:95:
                    b9:88:86:41:f2:ff:3c:16:4d:cd:16:25:06:17:3d:
                    8c:63:aa:1a:65:5d:e1:fd:e7:ff:43:9d:04:ae:98:
                    a9:f5:20:53:2e:94:b8:46:73:cc:1a:f6:83:d1:70:
                    c1:c9:c3:ba:53:b8:51:8c:1a:a1:76:d4:d7:04:b4:
                    86:2d:fe:59:bf:78:49:e2:dd:30:e9:41:29:be:82:
                    4f:ef:00:b1:1c:0c:29:6a:0f:a2:5e:cc:af:a5:5e:
                    d0:13:1b:b4:5f:67:14:55:e5:bc:e6:18:e6:4f:39:
                    25:ea:a5:3a:a3:0a:36:54:6e:06:58:67:d6:4b:f2:
                    88:97:4f:59:82:91:73:78:82:a7:05:66:da:ae:62:
                    9c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:89:65:E9:82:1E:76:8F:90:63:EC:8F:6B:78:D7:E9:BA:74:87:44
            X509v3 Authority Key Identifier:
                keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/UIll6YIedo-QY-yPa3jX6bp0h0Q.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  24611

    Signature Algorithm: sha256WithRSAEncryption
         44:ed:33:47:02:14:89:43:d0:4d:70:29:e8:12:a4:e0:2e:6b:
         6f:e2:1f:2a:ef:60:a8:98:39:67:f2:86:e0:7e:b7:ec:6c:e4:
         6e:e1:28:cf:69:fd:c3:84:16:23:36:65:40:b7:95:73:e3:c8:
         c9:df:58:f4:0a:5e:fa:89:93:18:6e:bd:a6:b5:91:68:f6:e6:
         54:bd:ef:52:2c:39:3d:84:fc:ae:98:b6:e1:51:63:73:db:92:
         f4:16:10:d5:7e:b4:93:f3:71:e5:33:f8:a7:34:4d:5d:21:dc:
         d3:6f:d0:c1:17:62:5a:c9:36:f6:d8:56:d4:ee:2d:df:7e:35:
         35:d3:28:94:4d:a7:67:12:c9:3e:f0:bd:05:34:f9:d2:a4:12:
         28:8f:fa:b4:85:d6:b3:a1:19:76:13:65:ae:24:39:a8:23:fa:
         f5:e2:c9:dd:52:ee:40:72:61:91:e5:ea:86:4a:1a:5e:a2:f1:
         e0:71:51:38:4d:4f:89:17:7a:09:bc:06:b3:78:73:73:e1:bc:
         18:b6:4a:99:77:3b:4b:a7:01:92:5d:9f:26:8a:e4:0b:ca:e4:
         85:f9:e2:f5:1f:a7:28:89:9e:84:a9:5a:1f:ce:5a:a0:be:72:
         cd:ad:a8:43:19:55:1a:aa:86:09:41:3a:c8:3d:10:76:07:99:
         5e:6b:41:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:45 2026 by rpki-client