Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
File:                     AS215085.asa (raw, json)
Hash identifier:          qzPVTHzozuNZX3y9s5zVviA92AnsXGUNgVb1u+haBHQ=
Subject key identifier:   BF:BF:BC:26:D4:78:FB:93:3C:29:14:CC:A1:4D:93:F1:70:9D:2C:8B
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       225BB100D96F1AC2E79D3893F5639887CEF1A10D
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
Signing time:             Thu 02 Jan 2025 23:36:36 +0000
ASPA not before:          Thu 02 Jan 2025 23:31:36 +0000
ASPA not after:           Thu 01 Jan 2026 23:36:36 +0000
Customer ASID:            215085
Providers:                AS: 35133
                          AS: 42093
                          AS: 52025

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Jan 2025 09:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5b:b1:00:d9:6f:1a:c2:e7:9d:38:93:f5:63:98:87:ce:f1:a1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Jan  2 23:31:36 2025 GMT
            Not After : Jan  1 23:36:36 2026 GMT
        Subject: CN=BFBFBC26D478FB933C2914CCA14D93F1709D2C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:c4:2c:b7:4a:fa:14:6d:e5:13:95:59:6e:
                    92:8c:03:76:23:99:72:be:3b:82:3b:e2:57:d4:a7:
                    b8:fe:55:ac:5d:7e:23:a3:a7:43:46:ab:b9:80:ef:
                    6e:5f:28:71:d7:5e:89:28:95:35:85:ae:74:79:6e:
                    9c:32:5e:c9:17:1a:70:99:71:ab:f0:8c:d2:61:29:
                    f6:e3:d6:04:3c:85:8f:49:4c:08:b3:f4:43:ea:55:
                    94:50:04:86:64:7a:bc:3c:7f:d2:19:4b:55:bc:a7:
                    d4:82:d4:b7:80:7f:ef:e8:a4:f9:db:84:2b:f8:d3:
                    8d:b9:b4:2f:1a:da:1d:fd:da:42:45:84:49:14:95:
                    8e:e0:f8:32:cd:e1:a3:bf:73:1c:e2:ae:3c:56:ca:
                    f4:e4:60:2a:f6:ec:73:c4:06:e7:a0:bd:fa:10:d4:
                    1a:cb:f8:3e:b7:bb:af:1d:be:8c:d2:e2:0d:18:af:
                    87:fb:8a:62:5b:c2:10:d0:c7:47:0b:f4:ce:40:26:
                    f8:0d:ca:23:51:97:25:6a:ce:44:46:0b:cf:e8:47:
                    2a:e7:47:67:c9:19:c8:a3:55:e8:9e:9e:39:56:9f:
                    e0:32:d5:27:81:20:69:10:fd:c7:49:09:18:8e:f8:
                    fa:64:9a:b0:c5:8b:29:d5:13:07:5e:d0:9f:2b:f4:
                    ea:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BF:BC:26:D4:78:FB:93:3C:29:14:CC:A1:4D:93:F1:70:9D:2C:8B
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215085

    Signature Algorithm: sha256WithRSAEncryption
         32:7a:10:56:8f:5f:d6:39:6a:84:c0:6b:f1:d8:dc:76:c2:90:
         db:3c:3d:6f:cc:18:9a:a0:3c:97:a0:ef:51:93:e8:99:1e:7f:
         e4:9b:11:ef:b2:fb:f2:fd:c8:db:55:c3:97:9f:b6:26:84:95:
         54:c1:eb:26:e8:cd:a2:e2:5e:17:f5:96:76:a5:15:8c:a3:45:
         4c:d8:1c:87:a5:c9:49:52:72:37:6d:ed:dc:3f:83:0e:6a:82:
         2f:71:d9:17:e5:f2:80:dc:49:98:0c:c4:7f:b9:51:d1:93:32:
         bc:94:83:2f:f7:7e:3b:c4:2a:e1:4d:ac:9e:e9:df:4c:43:f2:
         09:25:ea:d1:aa:43:2c:99:54:e0:a6:e5:b5:fe:c2:b1:49:9b:
         d0:d7:28:9d:59:58:95:50:73:7f:1c:6e:35:ec:80:c4:ae:c8:
         81:f5:da:81:8a:2b:78:52:93:f1:41:06:45:44:b5:bb:f8:93:
         93:c6:aa:2a:61:ca:a4:9c:fe:15:e9:1b:6e:89:c9:b9:0b:5a:
         b7:ee:93:df:6f:ad:c8:93:1d:47:43:e1:fb:64:8a:a5:7a:4a:
         be:bd:aa:e7:81:66:34:98:66:eb:4c:92:ed:19:7b:17:f3:29:
         e4:0f:bd:c7:b9:5a:ba:56:fb:f7:10:29:92:24:d9:8a:04:78:
         6b:e7:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 18 17:25:30 2025 by rpki-client on console-ams.rpki-client.org