Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/3JCprLbCd_JV3m7EK4otwaRJ6FI.asa
File:                     3JCprLbCd_JV3m7EK4otwaRJ6FI.asa (raw, json)
Hash identifier:          C7m74US1J4rnzhzyN9c9AXYlLYYU1lK9Uvvic8/k1+0=
Subject key identifier:   DC:90:A9:AC:B6:C2:77:F2:55:DE:6E:C4:2B:8A:2D:C1:A4:49:E8:52
Certificate issuer:       /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial:       019EAB490BA1C0AB24DBC43FE3C2FBEFDD86
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/3JCprLbCd_JV3m7EK4otwaRJ6FI.asa
Signing time:             Tue 09 Jun 2026 07:29:11 +0000
ASPA not before:          Tue 09 Jun 2026 07:29:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            51132
Providers:                AS: 12552
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ab:49:0b:a1:c0:ab:24:db:c4:3f:e3:c2:fb:ef:dd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
        Validity
            Not Before: Jun  9 07:29:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dc90a9acb6c277f255de6ec42b8a2dc1a449e852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:ff:f8:3b:3e:f4:80:59:e6:8b:45:f1:a0:
                    dc:b3:49:8e:af:ce:1d:c5:92:57:8d:65:3a:1a:8b:
                    16:36:27:77:cc:11:98:51:9b:c3:79:0e:53:8b:6e:
                    d2:bf:ae:c7:a2:64:f6:0d:35:e4:fe:b6:93:ca:41:
                    a5:74:6c:ad:67:1a:2e:fd:5f:ed:6f:2e:72:44:c4:
                    3c:e6:3c:bb:d7:2f:95:2c:27:1f:cd:b4:12:14:a2:
                    d3:bf:60:73:80:4e:5e:22:fa:73:03:06:e4:3c:ad:
                    a6:f1:ae:94:52:47:ad:53:62:73:2f:13:49:8a:14:
                    a7:a8:7d:32:97:15:80:47:be:68:0c:8c:d4:92:ff:
                    89:86:7d:19:90:4d:f8:23:ed:c5:95:4a:b3:0a:04:
                    85:06:b6:c6:8f:e3:cc:bc:ff:ea:4f:41:71:1d:ca:
                    9b:05:be:fc:14:2b:5d:5b:84:28:50:89:be:20:4b:
                    c5:63:46:8b:31:5e:d2:13:ce:02:99:d2:f6:bf:32:
                    2b:9e:15:45:bb:be:4f:a5:0c:15:2a:3c:6f:96:58:
                    50:f7:c6:7c:46:fe:20:3f:02:87:86:ee:96:65:16:
                    e6:6d:5e:b9:b9:02:72:c7:25:77:34:05:c5:99:a7:
                    2e:6b:66:40:33:63:ea:78:1a:6b:99:ff:c4:1f:1d:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:90:A9:AC:B6:C2:77:F2:55:DE:6E:C4:2B:8A:2D:C1:A4:49:E8:52
            X509v3 Authority Key Identifier:
                keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/3JCprLbCd_JV3m7EK4otwaRJ6FI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51132

    Signature Algorithm: sha256WithRSAEncryption
         05:e3:01:48:aa:57:12:d0:a0:f3:51:83:ec:ca:98:f2:98:ea:
         6d:a6:a5:f1:f5:87:a2:65:27:2f:ad:07:d8:11:1a:7f:5e:b3:
         d0:1c:72:ce:75:ed:48:5a:70:4f:60:7e:36:65:d0:f6:ea:ec:
         ae:f4:c4:3e:ab:20:b5:a8:7d:32:f4:e4:d6:98:a2:ca:0b:d8:
         2f:d1:b6:40:28:72:62:20:8e:a1:91:fc:4d:78:e6:9f:be:1e:
         2b:f4:9b:21:d7:98:d8:e9:95:54:2d:8e:da:27:db:c4:df:44:
         23:ef:ee:03:63:3d:85:b6:65:7a:84:83:a4:8d:6c:cc:da:09:
         b0:d8:5f:46:1e:d2:c8:ef:01:70:58:5d:ba:d3:3e:c1:17:c5:
         4e:c5:37:0a:82:92:03:66:7a:ab:af:b8:e6:4d:af:b8:42:ab:
         4a:24:9c:dc:6b:f9:10:29:52:c4:ee:6f:64:17:48:64:27:62:
         80:fb:1e:49:80:d9:f1:68:a6:cf:dd:91:d4:72:e3:6b:44:fe:
         c8:49:cc:0b:4a:ac:fb:b2:24:cd:72:97:19:39:c7:f2:cd:48:
         0a:f6:c9:ff:fc:8a:17:5e:3f:da:aa:d2:fa:60:6b:6a:79:89:
         e9:e3:e9:10:14:b0:74:a5:3e:3a:76:7d:eb:a7:3a:fc:5f:88:
         99:43:d4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:14 2026 by rpki-client