Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/Lb2qm0WAbpNaxiohBsDBnLvsS18.asa
File:                     Lb2qm0WAbpNaxiohBsDBnLvsS18.asa (raw, json)
Hash identifier:          LD6bSuV9eJHeO/b9CbjxLEGFW2hTMW4yMSbDkwDE7uI=
Subject key identifier:   2D:BD:AA:9B:45:80:6E:93:5A:C6:2A:21:06:C0:C1:9C:BB:EC:4B:5F
Certificate issuer:       /CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
Certificate serial:       019E60C1D6B3508D96FED5E45D3A9D47C418
Authority key identifier: D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/Lb2qm0WAbpNaxiohBsDBnLvsS18.asa
Signing time:             Mon 25 May 2026 20:09:36 +0000
ASPA not before:          Mon 25 May 2026 20:09:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50301
Providers:                AS: 6663
                          AS: 16019
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:60:c1:d6:b3:50:8d:96:fe:d5:e4:5d:3a:9d:47:c4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
        Validity
            Not Before: May 25 20:09:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2dbdaa9b45806e935ac62a2106c0c19cbbec4b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:db:ef:6d:9a:91:7d:ba:f1:ba:68:87:e9:
                    42:3d:59:38:ae:e7:25:8a:bf:10:75:d9:e0:84:58:
                    ed:d1:17:5b:97:88:4e:a0:3c:89:0d:df:03:13:5c:
                    b5:d2:7d:3a:ad:b1:06:53:a3:65:c7:bb:5c:50:54:
                    8b:67:bc:c9:34:6a:1d:b7:b8:62:4b:90:b2:0b:f1:
                    0c:fc:ef:83:08:70:77:75:95:35:88:8b:19:0a:c8:
                    27:36:c1:a4:23:26:2b:ee:22:c0:e1:3d:db:d8:6c:
                    4c:56:69:5c:5e:36:38:fc:73:97:45:e0:ba:8a:ca:
                    0d:56:74:23:a5:2e:53:4b:e9:86:f2:01:14:6f:56:
                    b3:86:da:68:14:43:09:9d:8a:05:39:d8:d9:c1:82:
                    76:9a:16:f3:d6:7c:f9:56:da:6d:6c:ef:1f:77:07:
                    39:5d:cf:fa:a4:c8:34:0c:f4:ac:b4:b5:7e:8d:66:
                    37:2c:88:18:2e:1a:24:5c:00:f8:07:21:62:d4:c8:
                    0d:26:02:57:c0:2d:7f:56:3d:e3:c6:56:48:ba:5d:
                    5f:9b:6f:00:ff:e7:e1:de:85:f6:7d:6c:a3:1c:2f:
                    9b:ba:8f:29:3d:ae:21:35:c6:35:44:2c:da:1b:9b:
                    bb:2c:49:4d:0c:76:89:6b:e8:f0:61:5d:cd:51:7b:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BD:AA:9B:45:80:6E:93:5A:C6:2A:21:06:C0:C1:9C:BB:EC:4B:5F
            X509v3 Authority Key Identifier:
                keyid:D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/Lb2qm0WAbpNaxiohBsDBnLvsS18.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50301

    Signature Algorithm: sha256WithRSAEncryption
         7f:8d:e6:b7:5b:68:17:fc:ab:70:1b:ac:22:10:3e:63:54:e5:
         2e:99:db:3b:f0:49:cf:17:c2:af:b2:b9:b7:3a:50:b7:a9:1d:
         b4:58:9b:d6:38:a9:a5:fb:7c:80:71:6f:cb:7a:21:19:c0:af:
         c0:20:35:9e:00:78:0e:ac:ae:75:e6:e8:2b:fb:16:6e:ad:27:
         5e:7a:31:2e:0a:9e:dc:4f:e8:e3:07:9e:ef:50:14:c7:da:88:
         58:22:0e:d4:ff:d2:5c:ab:59:4f:a3:92:f3:73:0d:02:30:d2:
         20:a0:c5:f8:9a:e8:87:fc:fc:1d:0a:10:3c:5e:e6:f4:d1:1f:
         3b:a2:1e:01:bc:b8:a0:2b:f9:de:c0:35:e8:86:2d:1f:60:68:
         df:f6:1a:54:a5:2c:41:50:88:e9:8e:3d:6e:95:78:0a:15:cc:
         d6:a1:38:81:23:3c:4a:35:d1:0d:bb:1e:2b:c1:30:8d:e8:1a:
         5b:f5:97:ed:bd:23:94:c7:1b:86:16:56:f6:ca:f0:72:6f:14:
         cc:07:50:2b:25:82:40:79:70:12:5d:34:01:b2:f4:58:6b:c3:
         aa:ee:ca:17:a0:9c:16:74:90:71:2f:50:df:34:0d:f2:50:73:
         ec:75:4e:0c:b1:94:c5:d9:b0:d5:f0:ed:20:de:7c:dd:c1:7d:
         27:87:85:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:28 2026 by rpki-client