Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/LmM48ME-vV9knrJxSTQaxjQp3co.asa
File:                     LmM48ME-vV9knrJxSTQaxjQp3co.asa (raw, json)
Hash identifier:          EudqvBBerqU77vXqzfKyktKs74IC9c1mzsls/2yJHmE=
Subject key identifier:   2E:63:38:F0:C1:3E:BD:5F:64:9E:B2:71:49:34:1A:C6:34:29:DD:CA
Certificate issuer:       /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial:       019D4E8B9D2BA94B5BFBF264785FD2041C1C
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/LmM48ME-vV9knrJxSTQaxjQp3co.asa
Signing time:             Thu 02 Apr 2026 14:14:25 +0000
ASPA not before:          Thu 02 Apr 2026 14:14:25 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            48018
Providers:                AS: 20764
                          AS: 29226
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:4e:8b:9d:2b:a9:4b:5b:fb:f2:64:78:5f:d2:04:1c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
        Validity
            Not Before: Apr  2 14:14:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2e6338f0c13ebd5f649eb27149341ac63429ddca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:94:6d:2b:57:8f:86:b0:ca:92:a9:67:a4:
                    f8:ae:f3:87:80:ae:97:33:e3:07:d1:35:50:90:bf:
                    62:2c:7c:6b:3e:43:35:1a:e8:2b:36:22:5b:65:4e:
                    5f:d1:a5:df:31:e2:c8:24:c0:1d:d1:14:88:71:83:
                    2a:dd:cf:ab:53:0b:34:11:c9:d3:6d:11:60:0e:ed:
                    14:38:48:46:7c:54:37:a5:91:01:f2:6d:55:3b:7c:
                    f3:3c:4f:c4:de:ba:fa:6e:c9:b7:60:3d:6e:d7:48:
                    e6:5d:50:19:f4:d4:f9:14:08:f5:30:f7:c6:6d:40:
                    47:7f:83:23:26:45:d4:7a:46:09:bc:80:5a:84:02:
                    bd:82:2f:9a:b4:0b:7d:b3:d5:34:2a:57:fb:8a:c1:
                    3a:71:4d:1f:3f:8c:41:c3:e9:a6:e3:6a:7e:fa:60:
                    2a:fb:2f:d8:26:be:90:93:f3:f1:36:3a:14:1d:1e:
                    dd:78:c3:45:2b:bb:9d:cc:f4:17:b4:b4:d6:ae:7c:
                    c7:bb:8b:15:c2:45:e1:1b:96:2b:0d:e2:2b:87:31:
                    1e:bc:d8:d7:d6:53:b6:4c:20:10:62:75:b0:8b:d7:
                    3e:c8:26:47:20:d1:da:06:6d:fe:9b:0d:8f:f6:7e:
                    b8:ee:f0:a4:39:26:8d:df:af:b7:d8:9c:c1:06:01:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:63:38:F0:C1:3E:BD:5F:64:9E:B2:71:49:34:1A:C6:34:29:DD:CA
            X509v3 Authority Key Identifier:
                keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/LmM48ME-vV9knrJxSTQaxjQp3co.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48018

    Signature Algorithm: sha256WithRSAEncryption
         1c:33:40:48:03:26:bf:a7:6e:5c:f8:a4:ad:f6:3f:fc:e0:c0:
         70:7f:7a:56:3c:38:0b:bf:13:41:0d:5a:fd:40:e5:6a:27:69:
         b1:e1:6f:93:ef:13:36:58:8c:a5:58:33:07:a8:2e:3c:52:2a:
         9c:22:11:ca:a3:fd:82:54:72:32:3a:08:1c:fc:b0:e7:b8:1d:
         6f:f4:1e:2f:a7:e0:9e:19:bf:35:8c:fb:c3:0b:bb:d4:a8:3d:
         fb:3f:1c:d6:a9:c9:ae:cc:c0:92:2c:89:76:6e:74:15:9a:66:
         76:84:9b:51:a0:0d:eb:a4:92:37:9d:19:de:6d:76:41:86:15:
         e5:3b:d6:97:54:ad:05:32:d6:e4:e9:fe:e2:66:a4:3a:ca:04:
         cc:3a:1c:ad:2e:7e:c8:16:9e:0e:0a:22:86:df:fd:1d:76:d1:
         67:d8:8d:86:f1:fd:41:4b:72:a5:b0:ea:73:5d:45:fb:d5:51:
         3f:f1:64:a4:11:51:b1:7f:c0:04:c8:eb:2d:e1:25:07:36:b0:
         f6:25:55:7b:8d:5c:41:73:a6:ea:07:b4:ca:bd:0b:a0:9f:d7:
         92:68:0a:b6:ae:12:43:ff:1e:9a:38:08:6a:3b:5f:47:27:f7:
         bf:98:3e:2b:30:2c:93:48:b9:1b:41:9d:88:91:0f:32:d2:39:
         4c:53:e0:fa
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZ1Oi50rqUtb+/JkeF/SBBwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1
ZDAwN2UwHhcNMjYwNDAyMTQxNDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTYzMzhmMGMxM2ViZDVmNjQ5ZWIyNzE0OTM0MWFjNjM0MjlkZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqOUbStXj4awypKpZ6T4rvOHgK6X
M+MH0TVQkL9iLHxrPkM1GugrNiJbZU5f0aXfMeLIJMAd0RSIcYMq3c+rUws0EcnT
bRFgDu0UOEhGfFQ3pZEB8m1VO3zzPE/E3rr6bsm3YD1u10jmXVAZ9NT5FAj1MPfG
bUBHf4MjJkXUekYJvIBahAK9gi+atAt9s9U0Klf7isE6cU0fP4xBw+mm42p++mAq
+y/YJr6Qk/PxNjoUHR7deMNFK7udzPQXtLTWrnzHu4sVwkXhG5YrDeIrhzEevNjX
1lO2TCAQYnWwi9c+yCZHINHaBm3+mw2P9n647vCkOSaN36+32JzBBgENSwIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFC5jOPDBPr1fZJ6ycUk0GsY0Kd3KMB8GA1UdIwQY
MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt
MWZiYzY0MWI1MGIxLzEvTG1NNDhNRS12VjlrbnJKeFNUUWF4alFwM2NvLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx
LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC7kjANBgkqhkiG
9w0BAQsFAAOCAQEAHDNASAMmv6duXPikrfY//ODAcH96Vjw4C78TQQ1a/UDlaidp
seFvk+8TNliMpVgzB6guPFIqnCIRyqP9glRyMjoIHPyw57gdb/QeL6fgnhm/NYz7
wwu71Kg9+z8c1qnJrszAkiyJdm50FZpmdoSbUaAN66SSN50Z3m12QYYV5TvWl1St
BTLW5On+4makOsoEzDocrS5+yBaeDgoiht/9HXbRZ9iNhvH9QUtypbDqc11F+9VR
P/FkpBFRsX/ABMjrLeElBzaw9iVVe41cQXOm6ge0yr0LoJ/XkmgKtq4SQ/8emjgI
ajtfRyf3v5g+KzAsk0i5G0GdiJEPMtI5TFPg+g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:26 2026 by rpki-client