Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/GM03u5yBJkGtFWqPqV1xQd23_ls.asa
File:                     GM03u5yBJkGtFWqPqV1xQd23_ls.asa (raw, json)
Hash identifier:          P3zGu9AtK2f6I03RZ9PLoqiuMtIuwHpkNeiX6gmRasU=
Subject key identifier:   18:CD:37:BB:9C:81:26:41:AD:15:6A:8F:A9:5D:71:41:DD:B7:FE:5B
Certificate issuer:       /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial:       019CCE4F90FEA3CCEC547D0CFCAE615633EE
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/GM03u5yBJkGtFWqPqV1xQd23_ls.asa
Signing time:             Sun 08 Mar 2026 16:37:26 +0000
ASPA not before:          Sun 08 Mar 2026 16:37:26 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            216096
Providers:                AS: 174
                          AS: 1299
                          AS: 3257
                          AS: 6939
                          AS: 16509
                          AS: 21700
                          AS: 21738
                          AS: 34872
                          AS: 34927
                          AS: 44901
                          AS: 52025
                          AS: 58057
                          AS: 59678
                          AS: 61138
                          AS: 214354
                          AS: 215638
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Mar 2026 15:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ce:4f:90:fe:a3:cc:ec:54:7d:0c:fc:ae:61:56:33:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
        Validity
            Not Before: Mar  8 16:37:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=18cd37bb9c812641ad156a8fa95d7141ddb7fe5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:3e:11:4a:c0:5a:cd:f7:7d:37:07:79:5b:
                    36:43:7b:31:ce:c1:cd:70:c2:a7:4e:ff:c1:93:b2:
                    92:4e:68:ac:20:5b:f7:50:a8:3b:30:17:3a:5c:6f:
                    43:28:7a:e5:77:a7:b7:62:71:33:60:3b:60:a5:b1:
                    1c:55:d8:6d:73:9b:c1:45:f4:e5:49:40:74:43:ca:
                    5c:fa:22:ae:35:d0:95:93:4c:b1:e6:ec:eb:fa:65:
                    19:75:d0:a5:16:fa:db:2c:e8:75:6b:3f:fe:c8:70:
                    18:2d:18:f1:a8:48:33:e3:5a:11:e1:b9:60:fc:be:
                    b6:90:84:e9:b6:36:92:c8:cd:0e:77:cf:06:a9:56:
                    45:5c:ae:fe:dc:4c:f4:b7:d2:24:86:db:39:02:d4:
                    7b:db:a5:85:fc:5f:95:8c:6d:d7:25:4c:13:f3:a8:
                    fa:3e:e9:6a:3a:c6:cb:37:f9:a5:b9:92:2b:5d:69:
                    af:13:f2:5a:66:15:33:fd:e1:04:34:1a:cd:97:bf:
                    f0:60:83:32:92:94:bc:b6:ab:7f:bd:81:22:c7:25:
                    f6:b2:cc:05:1f:8e:9c:54:6f:7c:09:56:a8:f0:1a:
                    d4:d5:f1:99:fb:91:7c:9f:88:35:5e:01:c8:ee:f3:
                    69:c1:13:a2:ee:a0:25:90:e1:c7:f4:a1:86:0d:e8:
                    07:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CD:37:BB:9C:81:26:41:AD:15:6A:8F:A9:5D:71:41:DD:B7:FE:5B
            X509v3 Authority Key Identifier:
                keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/GM03u5yBJkGtFWqPqV1xQd23_ls.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216096

    Signature Algorithm: sha256WithRSAEncryption
         5f:c4:7c:bc:14:1e:94:63:63:34:98:44:c7:24:63:c6:59:f3:
         56:06:8f:77:03:c0:e3:e2:69:a6:54:14:ff:7f:13:10:50:d6:
         0f:1d:22:84:ae:b6:53:5b:26:be:8c:59:18:0f:43:fd:ee:66:
         8b:db:c4:bd:85:0e:bd:9e:71:2b:02:6f:16:ee:33:a7:a2:5f:
         5c:47:d2:6f:8b:89:56:97:54:5e:4d:d5:ab:19:31:48:66:7a:
         21:d1:26:8d:9f:8f:bc:82:92:2a:c8:f0:01:06:42:ab:eb:b6:
         0a:50:92:a8:54:5b:b3:96:77:9e:7a:00:43:81:a0:fe:27:4c:
         49:d0:67:c3:bc:fb:6a:65:ef:c0:a4:cd:59:c0:e7:87:ea:62:
         e8:db:50:d1:46:c8:ae:68:62:ed:87:ac:ac:97:46:b8:cf:d0:
         9f:c0:28:da:78:68:3b:a7:1c:d7:af:3c:95:34:16:ae:f3:3e:
         fe:3a:6a:0c:92:94:b8:81:66:24:f9:9a:da:22:2c:f0:15:ea:
         37:f1:87:ba:0f:48:53:56:8c:3e:60:65:ef:91:23:b7:2c:3f:
         ae:fa:6c:d1:7e:4b:5b:25:08:42:cf:fb:54:42:ab:7a:17:73:
         59:10:cb:fc:1b:13:9d:3c:07:a4:a9:50:9f:60:79:31:0b:18:
         a9:90:03:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 00:40:13 2026 by rpki-client