Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/gledw4240Dyd4ySNd3EiBGN_CT4.asa
File:                     gledw4240Dyd4ySNd3EiBGN_CT4.asa (raw, json)
Hash identifier:          M04U7guZmUOlclnnZ5JAo58CmLjMUZmoOonluYoN36w=
Subject key identifier:   82:57:9D:C3:8D:B8:D0:3C:9D:E3:24:8D:77:71:22:04:63:7F:09:3E
Certificate issuer:       /CN=308dd357bc316287c3264299e30170765c1a32c4
Certificate serial:       019CE169282750B43907F71D8C2A77B26F24
Authority key identifier: 30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/gledw4240Dyd4ySNd3EiBGN_CT4.asa
Signing time:             Thu 12 Mar 2026 09:38:11 +0000
ASPA not before:          Thu 12 Mar 2026 09:38:11 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            207567
Providers:                AS: 49581
                          AS: 62255
                          AS: 209693
                          AS: 213702
                          AS: 215730
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e1:69:28:27:50:b4:39:07:f7:1d:8c:2a:77:b2:6f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=308dd357bc316287c3264299e30170765c1a32c4
        Validity
            Not Before: Mar 12 09:38:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=82579dc38db8d03c9de3248d77712204637f093e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:3e:a3:6a:8f:48:d4:ce:bd:3b:6c:fd:14:
                    c2:8c:b5:ea:eb:87:77:22:a9:51:57:b6:fd:79:22:
                    2b:c6:bd:f0:9d:e7:bb:a1:8d:da:69:2b:6b:9f:00:
                    07:1a:86:db:67:58:2f:e9:43:98:ef:1e:b8:67:7c:
                    b8:a5:90:33:d4:96:31:8a:65:73:fb:2c:c0:ab:c5:
                    53:f3:47:bf:49:67:01:a8:2e:84:c0:1b:ec:1b:0f:
                    6d:50:05:43:10:aa:5b:d3:8f:67:45:ed:90:9a:e1:
                    84:79:48:4c:9a:19:0c:df:42:4b:3a:6c:7d:63:91:
                    c6:f9:b6:01:ed:6c:03:97:4a:cd:e8:7a:2b:15:2b:
                    c0:16:25:4e:27:04:19:2a:91:8a:b7:22:36:2d:b4:
                    75:45:53:a0:04:a9:90:96:08:4c:20:0f:fd:c9:c7:
                    27:db:31:df:a2:08:d1:47:5e:44:6f:c8:96:02:9d:
                    3f:0b:52:c4:b9:6e:6d:d5:6f:23:af:6d:95:34:32:
                    8a:60:34:76:ae:4e:7a:ed:d7:8a:e9:57:3b:50:db:
                    9e:cf:3e:eb:0a:be:b8:97:4d:5d:50:53:14:de:63:
                    94:30:75:f8:f3:64:ad:81:10:84:30:b1:a8:3b:01:
                    f6:ad:80:f3:86:23:66:be:07:40:58:a1:d7:4d:fc:
                    bc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:57:9D:C3:8D:B8:D0:3C:9D:E3:24:8D:77:71:22:04:63:7F:09:3E
            X509v3 Authority Key Identifier:
                keyid:30:8D:D3:57:BC:31:62:87:C3:26:42:99:E3:01:70:76:5C:1A:32:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/gledw4240Dyd4ySNd3EiBGN_CT4.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dc930-52f4-49ae-b401-fa11c1cd4975/1/MI3TV7wxYofDJkKZ4wFwdlwaMsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207567

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:da:10:a1:b1:35:cf:a7:ef:a9:01:ed:83:f2:69:dc:f9:
         70:8c:45:47:72:4f:82:c6:14:25:b8:47:ea:42:c5:c5:ce:0b:
         53:cc:e3:87:83:47:fa:29:3f:c6:18:58:df:7a:aa:7b:e3:34:
         41:2d:98:75:98:e5:62:15:9c:fc:78:68:db:d0:51:a5:51:bf:
         7c:e7:cb:28:4f:18:6f:30:df:26:75:30:28:68:39:4b:19:35:
         7d:0b:e9:95:df:15:d7:14:e5:34:3a:9f:61:03:fa:59:ed:24:
         33:bd:e5:45:20:6c:27:79:05:49:13:ef:db:ba:66:a6:27:a6:
         a8:d6:19:8d:70:08:c1:ff:b6:e4:b9:db:0a:89:58:99:c0:f5:
         fa:5c:ec:69:a6:f7:47:4c:f6:7c:b3:f3:99:41:a4:1a:71:38:
         6a:7d:47:77:07:59:85:e5:1f:b7:df:39:a2:bc:e0:9d:e6:db:
         22:8d:04:f9:ca:7c:0b:24:7c:86:e2:fb:d2:16:b7:e9:c4:bd:
         dd:32:42:d1:2e:06:69:18:80:47:f2:6a:32:94:65:31:dc:7d:
         cb:3b:e9:5a:36:0c:14:d9:bd:33:77:a4:99:53:6a:13:98:62:
         5a:f5:39:ae:fa:e9:0c:c6:66:39:ef:46:4a:0c:9e:86:d2:d1:
         4e:a7:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:49:46 2026 by rpki-client