Autonomous System Provider Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/AS215778.asa
File:                     AS215778.asa (raw, json)
Hash identifier:          DpjkI602CV6zx5f7nRaiYmCgzlFYjwSLOVxYdymK/6E=
Subject key identifier:   1D:CC:46:ED:73:BA:ED:DB:32:22:3E:20:BB:C4:A3:72:BA:D1:AA:6A
Certificate issuer:       /CN=e5264f1bb8fb7caec59a970c34cbb47178ad6892
Certificate serial:       3EA01F3A3DB1B84AC0180B4B4153486B92CA8E3F
Authority key identifier: E5:26:4F:1B:B8:FB:7C:AE:C5:9A:97:0C:34:CB:B4:71:78:AD:68:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5SZPG7j7fK7FmpcMNMu0cXitaJI.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/AS215778.asa
Signing time:             Wed 13 Nov 2024 12:41:31 +0000
ASPA not before:          Wed 13 Nov 2024 12:36:31 +0000
ASPA not after:           Wed 12 Nov 2025 12:41:31 +0000
Customer ASID:            215778
Providers:                AS: 8772
                          AS: 29632
                          AS: 39249
                          AS: 41051
                          AS: 207656
                          AS: 209533
                          AS: 393577

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/E5264F1BB8FB7CAEC59A970C34CBB47178AD6892.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/E5264F1BB8FB7CAEC59A970C34CBB47178AD6892.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5SZPG7j7fK7FmpcMNMu0cXitaJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 18:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a0:1f:3a:3d:b1:b8:4a:c0:18:0b:4b:41:53:48:6b:92:ca:8e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5264f1bb8fb7caec59a970c34cbb47178ad6892
        Validity
            Not Before: Nov 13 12:36:31 2024 GMT
            Not After : Nov 12 12:41:31 2025 GMT
        Subject: CN=1DCC46ED73BAEDDB32223E20BBC4A372BAD1AA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:65:92:c4:a6:b4:eb:b5:d5:cc:1d:52:9d:
                    fd:cf:3b:48:79:e5:18:55:3b:fb:87:d8:5c:b4:ea:
                    17:ca:01:7f:43:ce:7c:7b:55:d5:e2:9b:d4:00:8f:
                    a7:e6:8e:cd:21:13:14:dc:48:90:3a:cc:73:7e:5d:
                    e4:44:76:03:fb:05:f3:c1:a8:6e:20:bc:05:cb:39:
                    a8:43:4d:1f:8c:dd:0d:cd:b5:3a:57:87:66:d2:4f:
                    3c:65:13:20:23:99:ee:94:d7:43:95:e0:49:36:37:
                    b0:11:ca:d1:81:88:ca:77:9b:5e:7f:ad:19:b8:cc:
                    79:b5:35:65:95:18:15:ce:5b:d6:ef:50:27:01:c0:
                    df:2d:68:67:70:2b:a5:5f:a3:d0:ee:3a:c1:c1:56:
                    46:b4:01:e3:42:31:d2:97:55:f1:1b:8c:65:b6:bc:
                    6a:d2:73:55:f3:eb:b3:0f:6e:83:26:cf:1e:e3:7a:
                    c5:f5:6c:a7:af:de:28:38:22:9c:9b:7d:b2:c1:4f:
                    6f:38:ac:1c:46:da:7b:43:1a:49:9c:f3:db:7e:4f:
                    40:af:22:f6:df:4b:fd:aa:3b:83:f9:07:05:57:1c:
                    a4:f6:ac:93:e1:98:5a:ef:af:70:53:ad:62:70:4b:
                    ce:58:ca:38:23:94:d1:24:a4:8d:93:b0:80:42:dc:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CC:46:ED:73:BA:ED:DB:32:22:3E:20:BB:C4:A3:72:BA:D1:AA:6A
            X509v3 Authority Key Identifier:
                keyid:E5:26:4F:1B:B8:FB:7C:AE:C5:9A:97:0C:34:CB:B4:71:78:AD:68:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/E5264F1BB8FB7CAEC59A970C34CBB47178AD6892.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SZPG7j7fK7FmpcMNMu0cXitaJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/1/AS215778.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215778

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:50:43:df:d7:05:6b:f1:d9:25:46:59:97:01:1a:40:9e:
         ee:2f:27:22:a9:b4:54:50:86:69:2f:e1:5c:93:00:75:80:96:
         e4:9e:84:d5:6a:5f:45:be:fc:fc:41:31:e1:f9:b1:70:62:f6:
         17:d9:ab:1b:2c:3e:fe:e6:2e:ae:3d:75:8b:6a:5d:61:0b:89:
         45:d0:87:36:f0:24:5c:ff:4e:bd:39:2d:0a:76:56:62:29:55:
         af:d8:86:7a:a5:e4:a3:8f:0e:cc:aa:ff:4b:42:b6:68:db:8e:
         ca:46:d3:3b:e0:6c:af:c7:f4:d6:98:a0:80:4f:32:6e:2a:cc:
         e7:25:bb:fe:a3:0b:a7:50:92:63:4b:6c:e6:b4:de:8d:94:0f:
         e0:ae:df:c2:9f:c6:15:6d:cd:92:91:2c:56:ba:c3:7c:16:02:
         aa:88:cb:12:3e:32:92:46:78:c5:7e:d6:9b:74:11:74:65:61:
         68:50:77:7d:f8:18:47:af:0e:4d:a5:72:1a:8b:7f:79:88:0c:
         64:ff:fb:a3:cd:7e:3f:14:81:29:fa:e5:04:77:51:be:5b:da:
         7b:35:ed:a1:58:84:2a:eb:e7:e3:d5:82:74:0e:74:5f:10:d4:
         29:20:3e:a8:55:43:b0:74:28:c7:af:32:03:b7:78:87:84:ff:
         63:1b:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:19 2024 by rpki-client on console-ams.rpki-client.org