Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/gPLTPxBOlsPpSyClaHOXsXurFVU.asa
File:                     gPLTPxBOlsPpSyClaHOXsXurFVU.asa (raw, json)
Hash identifier:          m7Y+8AfsPObIoCSFCZ1H15cEpSNRDYWM5/NDvGL7Jps=
Subject key identifier:   80:F2:D3:3F:10:4E:96:C3:E9:4B:20:A5:68:73:97:B1:7B:AB:15:55
Certificate issuer:       /CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
Certificate serial:       019E27CB5239078D852E0C8BD6886C366BDD
Authority key identifier: D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/gPLTPxBOlsPpSyClaHOXsXurFVU.asa
Signing time:             Thu 14 May 2026 18:41:36 +0000
ASPA not before:          Thu 14 May 2026 18:41:36 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            50124
Providers:                AS: 174
                          AS: 3257
                          AS: 5511
                          AS: 39801
                          AS: 199524
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:27:cb:52:39:07:8d:85:2e:0c:8b:d6:88:6c:36:6b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4f86a9a3c429c1bc26ec06a3ae4e417ca74dfde
        Validity
            Not Before: May 14 18:41:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=80f2d33f104e96c3e94b20a5687397b17bab1555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:21:b4:52:a8:c4:8a:4f:5f:d2:41:b4:73:
                    bd:05:e4:23:bb:3f:9c:b2:2c:36:72:dc:da:e4:5f:
                    e2:7f:a3:cb:21:9f:39:fb:fc:f9:97:55:5a:93:70:
                    76:d0:4e:86:97:ec:26:0e:23:1d:df:49:cb:e8:52:
                    b2:bd:f4:72:c2:e1:13:e2:b3:b1:94:ff:42:04:16:
                    4e:65:c3:f1:39:36:c4:00:43:a6:72:5b:8e:41:fd:
                    e4:b7:ab:c7:87:2f:13:51:33:a1:98:ab:2c:60:4d:
                    81:cf:64:2c:1e:4c:31:34:70:94:42:ba:38:3e:64:
                    b2:12:05:c7:15:5b:6c:50:61:8f:3b:b5:ed:0c:c8:
                    b4:01:c8:9a:cd:44:4e:7e:85:11:83:a0:c6:f1:c2:
                    93:a9:e5:7f:3b:97:17:c1:f5:22:b8:5f:56:ba:67:
                    c2:e7:d8:51:3a:7f:50:5f:c9:26:8d:bb:08:ba:67:
                    17:a2:da:d1:60:53:0c:68:01:36:7d:17:0e:6b:d3:
                    51:e8:aa:7a:c8:3a:cd:af:e1:bf:83:db:96:9c:73:
                    81:1a:33:8d:fd:33:de:65:22:ff:77:dc:1e:50:40:
                    e4:71:70:76:6c:58:42:2a:06:ee:01:a7:6a:48:24:
                    a4:5b:83:12:e1:e5:5e:10:cb:93:8e:f3:8f:03:5f:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F2:D3:3F:10:4E:96:C3:E9:4B:20:A5:68:73:97:B1:7B:AB:15:55
            X509v3 Authority Key Identifier:
                keyid:D4:F8:6A:9A:3C:42:9C:1B:C2:6E:C0:6A:3A:E4:E4:17:CA:74:DF:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PhqmjxCnBvCbsBqOuTkF8p0394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/gPLTPxBOlsPpSyClaHOXsXurFVU.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a5e531-1a08-4336-b0d8-4832659994cb/1/1PhqmjxCnBvCbsBqOuTkF8p0394.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50124

    Signature Algorithm: sha256WithRSAEncryption
         ac:c2:24:9a:30:e0:51:2e:a0:44:71:16:9a:cc:59:c4:d5:75:
         5e:17:e1:a1:cd:7d:cb:d4:e3:a2:2a:b2:68:52:a5:c6:1f:cb:
         a3:67:f8:19:30:da:5a:56:7f:32:50:44:b4:88:ba:89:c7:b7:
         92:c4:20:cf:db:87:1b:cd:c9:78:db:0c:ab:43:37:74:43:c1:
         76:1e:86:de:49:be:17:01:f6:ae:d3:ad:fa:7c:3c:5a:ea:2d:
         6b:c9:be:b3:76:18:33:9d:55:66:db:11:b4:63:37:aa:b4:db:
         61:65:cb:4b:59:c7:c9:1d:8e:3f:27:5d:d8:32:a3:91:0b:9d:
         87:de:69:37:d9:37:3e:cf:77:63:99:67:36:27:41:0a:a3:94:
         ae:20:38:7d:e6:c2:e8:aa:db:6e:59:07:d2:b0:e1:ac:aa:5c:
         e0:44:04:34:b8:1c:37:09:12:e5:4f:72:6f:53:db:3c:37:a5:
         e1:c0:d0:79:2e:dd:e5:85:ad:88:5b:b3:e1:6a:97:08:75:6f:
         93:98:d1:84:e6:7f:17:2e:d2:3e:b6:bb:04:c2:50:5c:a6:36:
         72:b1:36:5c:68:b3:25:86:e5:5c:33:c3:2b:97:2a:25:7b:78:
         08:90:77:eb:06:a1:53:72:58:90:15:7e:96:2a:d8:32:80:b5:
         79:91:25:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 05:35:50 2026 by rpki-client