Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa
File:                     l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa (raw, json)
Hash identifier:          5p613mEjLDKXtkZwHBWoFC0KynCvj30DBewuSTWYGQ0=
Subject key identifier:   97:4B:A2:19:F9:F4:FC:0A:34:28:98:B9:6D:55:1A:31:A3:4A:57:C6
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       019DB2FC37EC7A78E55589DA3D7A1E18B5E6
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa
Signing time:             Wed 22 Apr 2026 02:19:26 +0000
ASPA not before:          Wed 22 Apr 2026 02:19:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            58325
Providers:                AS: 1299
                          AS: 3491
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 02:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:fc:37:ec:7a:78:e5:55:89:da:3d:7a:1e:18:b5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Apr 22 02:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=974ba219f9f4fc0a342898b96d551a31a34a57c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:ef:62:f8:90:ec:98:3e:ca:cd:fa:4f:f9:
                    a1:26:f4:25:79:35:79:5c:6e:50:5d:19:24:c4:dc:
                    f5:79:c0:ae:c8:37:f0:a2:08:69:05:8d:a0:5f:0a:
                    a0:c6:9f:a2:12:e6:65:b3:b8:be:ad:d7:7c:10:a0:
                    2c:69:59:25:90:17:b0:93:6a:16:7c:29:1f:40:1a:
                    51:30:dd:f2:fd:b5:a1:05:04:79:9e:c7:26:e0:02:
                    58:01:b0:7e:02:c4:50:f2:74:79:ba:27:89:fd:9c:
                    e1:20:7b:00:7b:45:6f:d6:df:69:60:58:06:3d:60:
                    7d:54:06:c3:e4:3b:2b:69:78:90:9b:02:18:75:77:
                    9a:40:02:70:3e:6d:96:38:c2:c3:6a:69:97:7e:7f:
                    4c:81:81:d0:90:49:be:3b:d7:a5:90:0f:9c:47:56:
                    d8:ae:d2:1e:dd:3d:bc:6f:b4:18:ec:56:bb:11:e3:
                    de:79:2b:22:91:d1:c6:52:8b:e9:66:57:c2:09:f8:
                    66:7a:d3:d6:a5:f0:73:b4:e0:8f:e7:f7:88:22:df:
                    b3:c2:05:98:29:ac:fa:e0:51:3d:9a:68:14:69:e9:
                    93:77:d4:0e:e5:d2:f0:b3:0b:69:81:4e:ca:86:9a:
                    43:ef:16:ca:e5:7b:e2:d0:53:20:d4:1a:42:6b:16:
                    fc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:A2:19:F9:F4:FC:0A:34:28:98:B9:6D:55:1A:31:A3:4A:57:C6
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  58325

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:55:c8:20:db:8f:00:5e:18:84:a4:79:f0:63:90:cc:9c:
         ca:0c:6b:e5:e9:5e:42:15:ed:23:89:72:37:70:96:42:0e:ea:
         d6:85:b6:f7:2f:14:0b:76:f4:98:29:8f:5a:4f:7e:69:ca:b6:
         37:5c:8e:43:af:36:7e:36:47:63:0e:c1:b4:29:cf:73:1d:50:
         59:ae:0a:58:31:b4:c1:d1:c3:fd:12:86:51:3e:6b:3a:70:9a:
         17:dc:bc:b9:4c:af:d7:bf:46:c5:34:46:e3:83:90:c8:06:97:
         c9:ff:da:e4:c5:88:c1:e9:b6:54:27:a7:d7:9c:3c:f5:c4:d0:
         a6:1d:88:18:3d:b2:25:3d:2d:19:fa:23:e9:5e:89:64:07:dd:
         04:6f:30:32:5c:72:4d:13:df:7d:b0:6d:d5:c9:47:05:e0:a6:
         61:f7:73:73:3b:d8:38:9a:09:e9:47:3f:cf:c9:e8:6e:16:9b:
         6c:98:ab:4b:59:e2:d5:21:e9:12:fd:bf:43:12:31:ce:b4:3b:
         d4:23:46:06:97:8b:85:f9:14:54:13:9d:98:f4:75:0f:5e:a9:
         fa:35:68:d2:8e:72:61:a7:67:f0:49:fe:03:7c:ad:07:89:7a:
         fc:55:38:59:93:77:87:7a:f4:01:83:95:b2:24:4d:23:54:29:
         4f:ce:61:b7
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ2y/DfsenjlVYnaPXoeGLXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjYwNDIyMDIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzRiYTIxOWY5ZjRmYzBhMzQyODk4Yjk2ZDU1MWEzMWEzNGE1N2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkbvYviQ7Jg+ys36T/mhJvQleTV5
XG5QXRkkxNz1ecCuyDfwoghpBY2gXwqgxp+iEuZls7i+rdd8EKAsaVklkBewk2oW
fCkfQBpRMN3y/bWhBQR5nscm4AJYAbB+AsRQ8nR5uieJ/ZzhIHsAe0Vv1t9pYFgG
PWB9VAbD5DsraXiQmwIYdXeaQAJwPm2WOMLDammXfn9MgYHQkEm+O9elkA+cR1bY
rtIe3T28b7QY7Fa7EePeeSsikdHGUovpZlfCCfhmetPWpfBztOCP5/eIIt+zwgWY
Kaz64FE9mmgUaemTd9QO5dLwswtpgU7KhppD7xbK5Xvi0FMg1BpCaxb8fQIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFJdLohn59PwKNCiYuW1VGjGjSlfGMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvbDB1aUdmbjBfQW8wS0ppNWJWVWFNYU5LVjhZLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDj1TANBgkqhkiG
9w0BAQsFAAOCAQEACD1VyCDbjwBeGISkefBjkMycygxr5eleQhXtI4lyN3CWQg7q
1oW29y8UC3b0mCmPWk9+acq2N1yOQ682fjZHYw7BtCnPcx1QWa4KWDG0wdHD/RKG
UT5rOnCaF9y8uUyv179GxTRG44OQyAaXyf/a5MWIwem2VCen15w89cTQph2IGD2y
JT0tGfoj6V6JZAfdBG8wMlxyTRPffbBt1clHBeCmYfdzczvYOJoJ6Uc/z8nobhab
bJirS1ni1SHpEv2/QxIxzrQ71CNGBpeLhfkUVBOdmPR1D16p+jVo0o5yYadn8En+
A3ytB4l6/FU4WZN3h3r0AYOVsiRNI1QpT85htw==
-----END CERTIFICATE-----
Generated at Thu Apr 30 11:57:03 2026 by rpki-client