Autonomous System Provider Authorization

$ rpki-client -vvf krill.starlamp.su/repo/starlamp/0/AS214675.asa
File:                     AS214675.asa (raw, json)
Hash identifier:          8BVZ9hfVKRCV4U0q+ZUP74VTYEzAJyced6M77HwKQaw=
Subject key identifier:   41:B3:25:A5:06:E5:A3:74:6E:34:7E:16:82:16:1D:52:DE:5C:AF:8B
Certificate issuer:       /CN=0e44f0e672780e468c3c993198615894008ad128
Certificate serial:       28CF4EE2E0FF7A35FEC349DE4C18EC06C06EF51E
Authority key identifier: 0E:44:F0:E6:72:78:0E:46:8C:3C:99:31:98:61:58:94:00:8A:D1:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkTw5nJ4DkaMPJkxmGFYlACK0Sg.cer
Subject info access:      rsync://krill.starlamp.su/repo/starlamp/0/AS214675.asa
Signing time:             Sun 12 Oct 2025 12:50:33 +0000
ASPA not before:          Sun 12 Oct 2025 12:45:33 +0000
ASPA not after:           Sun 11 Oct 2026 12:50:33 +0000
Customer ASID:            214675
Providers:                AS: 6939
                          AS: 11967
                          AS: 34872
                          AS: 34927
                          AS: 38074
                          AS: 41051
                          AS: 63798
                          AS: 150369
                          AS: 214757
                          AS: 215828
                          AS: 216324
Validation:               OK
Signature path:           rsync://krill.starlamp.su/repo/starlamp/0/0E44F0E672780E468C3C993198615894008AD128.crl
                          rsync://krill.starlamp.su/repo/starlamp/0/0E44F0E672780E468C3C993198615894008AD128.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DkTw5nJ4DkaMPJkxmGFYlACK0Sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Oct 2025 08:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cf:4e:e2:e0:ff:7a:35:fe:c3:49:de:4c:18:ec:06:c0:6e:f5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e44f0e672780e468c3c993198615894008ad128
        Validity
            Not Before: Oct 12 12:45:33 2025 GMT
            Not After : Oct 11 12:50:33 2026 GMT
        Subject: CN=41B325A506E5A3746E347E1682161D52DE5CAF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:fd:39:64:d5:98:20:2e:57:8a:96:e1:1e:
                    e7:3f:40:d6:90:2b:1b:a9:be:95:2f:97:42:32:81:
                    1e:bc:0a:6f:3b:c5:67:1f:8d:39:1d:82:f6:9e:60:
                    3e:a7:ed:47:67:29:35:8c:66:6b:51:f5:5c:d2:5e:
                    51:80:62:4e:4e:3b:39:34:9b:68:1d:d8:17:a6:0c:
                    18:de:cf:4c:51:20:60:1a:04:85:03:ce:37:78:fd:
                    6a:f6:9e:41:61:80:26:4d:f6:9a:63:62:6c:ff:89:
                    21:1d:11:ac:82:da:6b:20:87:e8:d8:fe:63:a8:c0:
                    d9:65:d5:88:40:23:58:26:0e:41:66:c3:5a:4b:55:
                    fa:47:f3:ac:eb:1d:61:4d:bc:ee:71:a3:c3:44:e4:
                    99:35:c5:92:fa:94:10:bf:6b:51:14:86:a1:55:29:
                    65:77:b1:32:59:d8:e2:f0:c4:1c:f7:98:0a:4e:94:
                    e6:a1:ce:00:ec:30:6f:6f:4e:5d:4f:24:ed:c7:f5:
                    53:8a:42:2f:5e:16:69:58:91:d7:c0:34:7e:6e:ff:
                    fd:08:10:63:ef:68:bf:8c:71:00:e8:8e:35:78:3f:
                    c9:a5:f1:ba:fc:d2:86:67:2d:e5:ba:11:f6:0c:ab:
                    cb:7e:54:74:d2:db:65:2b:a4:60:b3:51:17:6a:4a:
                    c3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B3:25:A5:06:E5:A3:74:6E:34:7E:16:82:16:1D:52:DE:5C:AF:8B
            X509v3 Authority Key Identifier:
                keyid:0E:44:F0:E6:72:78:0E:46:8C:3C:99:31:98:61:58:94:00:8A:D1:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.starlamp.su/repo/starlamp/0/0E44F0E672780E468C3C993198615894008AD128.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTw5nJ4DkaMPJkxmGFYlACK0Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.starlamp.su/repo/starlamp/0/AS214675.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214675

    Signature Algorithm: sha256WithRSAEncryption
         6f:2a:7d:ce:ef:93:c5:fe:c6:99:1a:f6:c4:25:42:8f:15:6b:
         96:e2:d0:38:0f:6f:78:41:36:a3:c2:63:de:63:12:a8:a7:cd:
         ea:da:d5:84:9d:a4:71:4f:5f:18:d3:85:67:54:3e:b0:d4:ae:
         00:48:68:2c:ad:81:c3:63:f1:91:1a:b6:51:1d:2b:08:46:1b:
         b6:13:43:53:17:93:68:5e:ca:e2:be:34:42:16:b8:67:9d:ef:
         b0:ca:76:66:81:4c:1c:0f:69:a6:9a:34:8b:f2:2a:d9:26:50:
         96:5b:fa:7e:67:86:f3:6b:76:0b:8b:9e:1b:a2:79:d8:37:b9:
         78:36:fb:10:e0:1c:64:3e:37:99:18:7e:d3:6c:e2:ab:a3:64:
         1f:a1:7f:d7:7a:f1:02:8d:7d:e7:9e:be:72:d0:eb:8e:58:4c:
         3f:38:43:a6:d5:9c:0c:85:70:eb:53:70:13:cc:95:a7:e7:04:
         5d:38:35:30:f8:81:34:db:7e:62:64:c2:3a:5a:c6:47:91:7b:
         69:1c:51:a4:1f:61:e6:2c:c9:bc:ee:12:5f:39:bc:97:bd:05:
         aa:e6:0b:22:a4:ab:75:a8:0f:60:78:23:27:c4:90:07:28:a5:
         b1:eb:63:88:84:78:ce:ca:70:15:44:6d:82:a9:d4:f7:4f:bf:
         6a:7b:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 23:52:48 2025 by rpki-client