Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/MSWZuKtBI4wlnUe3Uu6905OvveY.asa
File:                     MSWZuKtBI4wlnUe3Uu6905OvveY.asa (raw, json)
Hash identifier:          ys6e6XNvdIzKyQFokYPssOeUxdzEEaAdl3OSb2J4N60=
Subject key identifier:   31:25:99:B8:AB:41:23:8C:25:9D:47:B7:52:EE:BD:D3:93:AF:BD:E6
Certificate issuer:       /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial:       019F190109E05B608D9E86C7AC6668C3875A
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/MSWZuKtBI4wlnUe3Uu6905OvveY.asa
Signing time:             Tue 30 Jun 2026 14:48:46 +0000
ASPA not before:          Tue 30 Jun 2026 14:48:46 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            47694
Providers:                AS: 52091
                          AS: 206810
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:09:e0:5b:60:8d:9e:86:c7:ac:66:68:c3:87:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
        Validity
            Not Before: Jun 30 14:48:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=312599b8ab41238c259d47b752eebdd393afbde6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:fe:9a:f5:c2:ba:26:37:50:bd:d0:71:c3:
                    40:fb:ff:e7:8a:a3:5b:bf:34:b6:88:73:66:c6:39:
                    fb:7b:de:18:0e:90:5b:9c:cb:a5:38:43:ad:67:c6:
                    5b:92:71:72:a0:e9:0e:94:8b:c5:a6:9c:f1:45:2e:
                    29:0e:2f:b2:8c:77:e3:e1:b2:33:1d:72:64:be:26:
                    62:bf:ca:99:9c:09:dc:b0:b4:67:c4:64:88:5d:66:
                    53:74:72:e9:86:34:f5:20:98:6d:dd:b0:f3:0f:79:
                    ec:93:0d:ea:1d:db:31:69:14:fd:f3:5a:7c:3e:d6:
                    5e:78:ad:f6:06:90:9a:32:59:35:0b:7c:97:ac:0e:
                    25:b8:1c:e1:2d:4a:24:a4:29:61:62:f2:5f:98:0e:
                    00:dd:36:ea:8f:a5:e3:f3:97:87:2c:e1:6c:22:da:
                    1a:b1:33:e3:ce:52:f2:3f:05:ff:a3:79:ee:a5:b0:
                    ab:bd:73:bf:d1:38:0c:e3:cd:60:a3:ca:5a:89:17:
                    a4:8d:6e:d6:89:46:63:8b:50:c0:ca:98:17:c6:a9:
                    31:71:29:67:f0:f3:49:a4:58:ca:b9:df:a5:74:97:
                    d2:8d:54:a9:34:52:66:ae:67:7a:33:19:53:fe:b6:
                    e4:7b:ba:22:53:fd:ad:c8:7b:2d:00:37:b7:fc:30:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:25:99:B8:AB:41:23:8C:25:9D:47:B7:52:EE:BD:D3:93:AF:BD:E6
            X509v3 Authority Key Identifier:
                keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/MSWZuKtBI4wlnUe3Uu6905OvveY.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47694

    Signature Algorithm: sha256WithRSAEncryption
         8e:20:6a:d8:65:8b:36:5b:7a:cf:6f:e8:c2:b8:77:d8:37:8c:
         b5:0a:89:44:de:c0:1d:52:e8:78:90:67:6c:91:c8:33:2f:e1:
         b0:b3:b2:ba:c0:60:45:87:ca:b3:36:47:a1:df:8c:6c:ac:49:
         b7:c6:e6:82:77:b7:a6:f8:b1:cf:7c:f8:cc:8d:9a:8f:04:93:
         22:4a:4b:81:51:48:8a:b5:29:50:6c:0b:87:9a:ca:7b:11:59:
         7d:70:5e:fa:df:96:91:25:a7:e9:eb:0f:5c:9c:4e:61:1b:f1:
         87:66:31:39:c5:54:f5:70:8d:c4:1b:4a:f2:bd:26:59:72:5b:
         fe:c4:a0:73:73:21:67:e3:94:3c:f6:6f:45:ab:fe:c1:3b:73:
         7c:93:18:1a:af:de:f1:6d:05:d3:6a:60:eb:42:5c:3a:5c:f0:
         c2:80:c9:5b:18:54:ef:fd:f2:de:96:8d:ba:b5:38:a7:48:4e:
         59:65:e2:33:b6:01:b6:e1:67:60:26:d1:b4:57:17:e6:ec:b2:
         1d:f7:13:98:1f:43:6a:df:0b:fd:a4:91:ea:45:19:b7:35:3a:
         a5:13:fd:b6:93:8c:44:86:04:a0:f0:27:6d:fc:83:ce:96:78:
         fe:1a:bd:88:fe:6b:98:8a:a3:03:8b:0c:80:4d:0d:09:b0:fd:
         88:db:6d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 17:52:11 2026 by rpki-client