Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa
File:                     AS215147.asa (raw, json)
Hash identifier:          NeimsipMWG2Arb4707vJK6VXPqcjNL3IwCqjLSpwhuw=
Subject key identifier:   AE:C9:E0:80:8F:65:DF:E7:07:1B:BF:F2:3C:07:81:88:8C:6A:4C:81
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       43E9E130DE31A7C87674C2C959B55CDDA5A84C83
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa
Signing time:             Fri 21 Jun 2024 09:03:55 +0000
ASPA not before:          Fri 21 Jun 2024 08:58:55 +0000
ASPA not after:           Fri 20 Jun 2025 09:03:55 +0000
Customer ASID:            215147
Providers:                AS: 207252
                          AS: 215828

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Jul 2024 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e9:e1:30:de:31:a7:c8:76:74:c2:c9:59:b5:5c:dd:a5:a8:4c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Jun 21 08:58:55 2024 GMT
            Not After : Jun 20 09:03:55 2025 GMT
        Subject: CN=AEC9E0808F65DFE7071BBFF23C0781888C6A4C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:c9:aa:20:95:6a:38:60:50:93:67:1b:12:
                    68:7c:ae:3d:d1:f0:07:bb:72:6f:5f:62:8b:12:ae:
                    35:a5:da:6f:ce:dd:ff:75:53:ea:00:49:44:4f:ce:
                    ea:bd:59:8c:0f:e2:47:b7:04:be:71:23:85:f0:12:
                    a6:97:ad:94:83:6c:2e:bb:b6:7d:53:60:0f:53:21:
                    39:ef:2c:79:b4:4b:d1:7c:8c:d2:6c:dc:a7:c6:54:
                    a2:a8:c9:d3:6e:a8:e1:a5:8f:ea:dd:5a:53:4d:55:
                    a3:1e:c9:ac:70:1f:ea:e4:89:63:06:ce:29:fc:f4:
                    32:81:1c:af:71:13:7c:b7:df:ba:d3:78:c9:91:2b:
                    a2:9a:ed:41:52:b5:a8:72:93:c1:76:1b:14:9d:0b:
                    5f:93:5d:e6:21:a5:6b:0c:e3:1c:a6:2a:00:e3:1f:
                    66:98:ba:ec:45:c7:95:81:66:d6:1f:70:0d:4e:1d:
                    e3:a4:ed:06:23:8d:d4:6b:7f:90:01:3a:71:a3:ee:
                    6a:70:66:45:21:aa:39:23:3c:f4:85:24:6b:5c:de:
                    94:da:06:8b:7a:a0:d1:5b:1c:6c:05:18:20:5b:09:
                    2f:1d:f7:a6:0a:87:f0:a9:78:a3:90:e9:17:ee:5c:
                    0b:24:a6:da:54:83:92:e1:a0:98:c5:e6:2e:2a:9c:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C9:E0:80:8F:65:DF:E7:07:1B:BF:F2:3C:07:81:88:8C:6A:4C:81
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215147

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:dd:09:48:c2:d7:50:4b:c6:66:b8:d2:16:88:e2:f0:5c:
         e4:f9:5a:b2:6e:e4:28:a9:1a:a3:38:71:5d:0e:44:5a:a4:e7:
         7e:8b:e9:1b:39:09:a7:e9:f9:d0:07:02:f6:63:45:e8:06:2e:
         d2:88:40:96:f4:d0:bd:71:f1:b7:77:54:c2:a8:3c:c8:dc:d7:
         f4:21:d0:09:f0:28:e0:61:95:35:02:5f:c7:42:ba:54:e9:7a:
         1e:77:3c:b2:bb:c4:3a:e6:4e:1c:a3:c2:5d:4d:f9:ef:13:e6:
         17:f3:dd:f7:b9:af:62:e7:86:63:a8:5e:ad:00:bd:dd:d7:a5:
         d3:11:0e:aa:ea:bf:27:ff:c2:d5:bf:9d:bc:3d:59:aa:11:1f:
         20:fb:44:2e:87:92:57:fd:3d:16:30:e7:fa:1a:f8:7c:bf:b2:
         4b:50:96:40:ba:5f:98:c4:81:61:af:f7:e6:7e:75:b2:2b:56:
         f2:d6:b7:d4:df:ec:2e:ba:cd:5c:b8:a0:a5:dd:72:ef:23:39:
         d2:d2:e7:46:52:41:c5:3c:5f:cd:32:d2:2b:cd:7a:98:9d:67:
         e4:4b:0e:4c:9f:a1:53:a2:36:50:0d:cc:ed:12:cb:4c:da:c5:
         18:64:fe:37:ab:fc:27:25:c3:6a:62:f2:1d:5b:56:5d:87:ea:
         ad:3d:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 16:21:14 2024 by rpki-client on console-fra.rpki-client.org