Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/AS216311.asa
File:                     AS216311.asa (raw, json)
Hash identifier:          Dmw7omaWtWOpKd5S/DPOujGFLODAQcprPtQE3Nwf75E=
Subject key identifier:   76:95:AB:79:28:5B:19:69:99:7B:C8:9C:8A:A5:B1:81:1D:9E:2C:27
Certificate issuer:       /CN=84101cecaa6a71465dcf665d716279a008341ea4
Certificate serial:       0BF8259DF09D976D9BFE3360900A98174124676E
Authority key identifier: 84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/AS216311.asa
Signing time:             Thu 10 Apr 2025 07:57:43 +0000
ASPA not before:          Thu 10 Apr 2025 07:52:43 +0000
ASPA not after:           Thu 09 Apr 2026 07:57:43 +0000
Customer ASID:            216311
Providers:                AS: 11967
                          AS: 13852
                          AS: 209533
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f8:25:9d:f0:9d:97:6d:9b:fe:33:60:90:0a:98:17:41:24:67:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84101cecaa6a71465dcf665d716279a008341ea4
        Validity
            Not Before: Apr 10 07:52:43 2025 GMT
            Not After : Apr  9 07:57:43 2026 GMT
        Subject: CN=7695AB79285B1969997BC89C8AA5B1811D9E2C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:58:b9:5c:f2:5e:fb:ff:a0:89:05:6e:b4:
                    4f:2d:b6:ec:f5:b8:2d:f8:3b:13:d3:df:2e:42:8e:
                    e6:a5:1b:26:bb:c3:6b:5c:7e:36:d2:d0:f8:d7:9f:
                    75:ee:3b:33:90:1b:8c:05:6b:e1:52:05:c2:72:b0:
                    20:66:4e:da:8a:45:36:74:fd:98:3a:fe:68:c0:5c:
                    2b:1e:77:b5:99:45:fa:ab:df:ba:2e:c0:6e:cf:5e:
                    5e:3f:90:e2:c1:74:17:81:eb:5a:e4:f3:ac:6d:f6:
                    d1:f1:8d:78:47:7a:76:54:0f:e9:8b:7f:87:79:5e:
                    cb:0e:5f:73:ab:60:7a:9e:00:34:2e:88:91:97:98:
                    e2:3d:42:58:21:f2:6f:06:4e:96:fd:9a:48:c2:9d:
                    b2:b0:40:61:ca:81:09:d0:2c:a2:a2:ea:7f:73:8e:
                    92:91:89:51:d0:73:ca:a9:e7:d9:c5:71:2d:63:e3:
                    3e:28:0b:9e:16:c8:b6:23:54:d7:cd:d2:b3:2f:08:
                    c0:29:21:49:eb:1c:d8:2e:e5:36:9a:33:17:db:75:
                    ae:f3:b5:71:19:0a:b5:38:1b:5f:9a:c5:1f:4d:84:
                    df:e5:22:66:71:20:c9:1b:70:29:3c:f3:6f:11:72:
                    2d:40:0d:36:72:29:27:33:e6:4b:46:11:f4:fc:8c:
                    3b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:95:AB:79:28:5B:19:69:99:7B:C8:9C:8A:A5:B1:81:1D:9E:2C:27
            X509v3 Authority Key Identifier:
                keyid:84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/AS216311.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216311

    Signature Algorithm: sha256WithRSAEncryption
         0a:5c:93:83:09:3d:36:d6:3d:88:27:58:50:98:59:f1:c5:bc:
         c5:d6:41:a4:c3:e4:ac:53:87:68:07:d7:09:e6:08:73:a0:8a:
         f2:84:a5:e8:07:e2:aa:79:21:f7:4d:fa:20:30:e9:af:67:09:
         d6:83:87:ff:20:fc:7a:58:d5:aa:ee:90:73:b0:b0:3b:39:b8:
         8d:d0:78:1d:09:ed:12:35:a2:20:9f:d6:e6:3e:51:f3:03:8e:
         f3:8e:f0:42:e0:87:f0:a6:cb:d7:a6:3c:fa:ca:e4:90:00:48:
         9c:94:a1:04:51:f5:06:75:57:65:4b:53:9b:6e:50:c7:61:e7:
         d2:1d:ee:4e:b2:be:dd:69:82:86:b2:10:77:84:32:05:ef:58:
         5a:31:46:11:76:e1:04:6a:a0:0b:60:93:1a:9c:e3:81:b2:0b:
         7e:33:71:b1:7a:cc:05:43:37:57:fb:1e:b0:c5:10:f5:e3:08:
         7d:a6:aa:ea:9b:ec:7d:4a:39:43:e8:29:cb:13:0d:a8:dc:1a:
         c9:65:fd:74:3e:2a:2f:4d:fb:45:23:3b:6d:de:f9:cd:25:d2:
         33:c3:6d:02:d2:3d:85:97:68:3d:dd:69:66:ae:2a:b0:69:a2:
         07:14:4d:77:54:28:3a:d7:85:8f:3d:e6:ca:45:0f:f1:cd:cf:
         a5:85:75:46
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUC/glnfCdl22b/jNgkAqYF0EkZ24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxMDFjZWNhYTZhNzE0NjVkY2Y2NjVkNzE2Mjc5YTAw
ODM0MWVhNDAeFw0yNTA0MTAwNzUyNDNaFw0yNjA0MDkwNzU3NDNaMDMxMTAvBgNV
BAMTKDc2OTVBQjc5Mjg1QjE5Njk5OTdCQzg5QzhBQTVCMTgxMUQ5RTJDMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwm1i5XPJe+/+giQVutE8ttuz1
uC34OxPT3y5CjualGya7w2tcfjbS0PjXn3XuOzOQG4wFa+FSBcJysCBmTtqKRTZ0
/Zg6/mjAXCsed7WZRfqr37ouwG7PXl4/kOLBdBeB61rk86xt9tHxjXhHenZUD+mL
f4d5XssOX3OrYHqeADQuiJGXmOI9Qlgh8m8GTpb9mkjCnbKwQGHKgQnQLKKi6n9z
jpKRiVHQc8qp59nFcS1j4z4oC54WyLYjVNfN0rMvCMApIUnrHNgu5TaaMxfbda7z
tXEZCrU4G1+axR9NhN/lImZxIMkbcCk8828Rci1ADTZyKScz5ktGEfT8jDvlAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUdpWreShbGWmZe8iciqWxgR2eLCcwHwYDVR0j
BBgwFoAUhBAc7KpqcUZdz2ZdcWJ5oAg0HqQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDFiMjAxNzYtNzZiOS00MDAwLWE2ZTYtYmE1NDdiNTI0
MTQzLzAvODQxMDFDRUNBQTZBNzE0NjVEQ0Y2NjVENzE2Mjc5QTAwODM0MUVBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2hCQWM3S3BxY1VaZHoyWmRjV0o1b0Fn
MEhxUS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzAxYjIwMTc2LTc2Yjkt
NDAwMC1hNmU2LWJhNTQ3YjUyNDE0My8wL0FTMjE2MzExLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNM9zANBgkq
hkiG9w0BAQsFAAOCAQEAClyTgwk9NtY9iCdYUJhZ8cW8xdZBpMPkrFOHaAfXCeYI
c6CK8oSl6Afiqnkh9036IDDpr2cJ1oOH/yD8eljVqu6Qc7CwOzm4jdB4HQntEjWi
IJ/W5j5R8wOO847wQuCH8KbL16Y8+srkkABInJShBFH1BnVXZUtTm25Qx2Hn0h3u
TrK+3WmChrIQd4QyBe9YWjFGEXbhBGqgC2CTGpzjgbILfjNxsXrMBUM3V/sesMUQ
9eMIfaaq6pvsfUo5Q+gpyxMNqNwayWX9dD4qL037RSM7bd75zSXSM8NtAtI9hZdo
Pd1pZq4qsGmiBxRNd1QoOteFjz3mykUP8c3PpYV1Rg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:41 2025 by rpki-client