Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
File:                     AS215085.asa (raw, json)
Hash identifier:          yTwGGFk40228CDJmdSOsVqGZM7rSmaRt2Gc52FXkG4c=
Subject key identifier:   CA:6C:20:30:36:01:43:DF:4F:17:5E:D1:9A:0B:36:94:D0:91:47:0E
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       53981147A688BFE08C04B68D5F1CAC6EADD068AD
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
Signing time:             Fri 24 Jan 2025 08:02:21 +0000
ASPA not before:          Fri 24 Jan 2025 07:57:21 +0000
ASPA not after:           Fri 23 Jan 2026 08:02:21 +0000
Customer ASID:            215085
Providers:                AS: 35133
                          AS: 42093
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 16:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:98:11:47:a6:88:bf:e0:8c:04:b6:8d:5f:1c:ac:6e:ad:d0:68:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Jan 24 07:57:21 2025 GMT
            Not After : Jan 23 08:02:21 2026 GMT
        Subject: CN=CA6C2030360143DF4F175ED19A0B3694D091470E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:ab:b8:7e:59:19:7c:f5:6f:dc:bb:ac:80:
                    18:cf:5e:bf:f3:3d:74:de:47:3a:1c:98:dd:5c:b4:
                    b2:61:08:2e:f7:d9:f9:b3:74:0a:68:b3:6a:9d:5d:
                    81:c1:60:3c:7b:b6:f7:ae:bf:5f:b6:98:97:26:29:
                    cf:52:84:e3:e2:3f:8f:b6:ff:f0:fd:7a:58:70:33:
                    f0:f3:91:d2:6a:eb:74:38:ac:4e:89:7c:51:a5:aa:
                    7e:8c:83:a4:35:7e:38:a4:c6:4f:aa:aa:26:ed:a0:
                    f0:5e:b4:b7:f4:5e:ca:ee:82:36:00:da:be:6f:f4:
                    f1:e2:9f:0b:1c:6a:2a:30:8f:e7:99:d6:53:3f:e8:
                    32:f3:02:d2:65:2d:a0:ea:35:17:84:fa:f0:ee:82:
                    e2:68:6b:0d:46:42:35:98:bb:92:8e:3d:7f:3c:52:
                    3c:23:4f:52:93:fe:a2:ad:8f:06:c3:0f:76:3d:9f:
                    70:9d:d1:aa:40:51:3b:e9:6d:95:f8:84:1c:3a:5e:
                    f5:01:4b:6e:2d:83:8f:23:f1:8f:26:8b:31:a2:44:
                    2f:63:54:d1:8a:a3:cf:dc:6b:b3:8e:50:0c:44:97:
                    da:05:88:a6:13:1f:ea:a3:de:28:1a:ac:71:f0:46:
                    d7:f7:74:85:bc:f9:2b:4c:7c:29:2b:bc:81:64:1e:
                    10:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6C:20:30:36:01:43:DF:4F:17:5E:D1:9A:0B:36:94:D0:91:47:0E
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215085

    Signature Algorithm: sha256WithRSAEncryption
         63:c7:b3:9e:4c:4c:83:da:b9:37:66:16:2c:ad:a4:72:71:a6:
         2c:19:0c:a1:f2:64:fc:41:cd:e7:94:00:03:03:45:21:6c:eb:
         a9:0f:71:ca:fb:b5:8d:29:03:48:72:f5:ef:b0:65:c1:10:3b:
         06:06:1a:84:f1:a0:43:1c:47:9d:a1:00:4c:bd:78:17:21:c5:
         c0:a4:47:b6:da:16:82:ff:4f:18:20:a6:fb:91:b2:94:69:0d:
         3b:7f:72:d9:3e:55:5d:86:32:1f:95:04:36:f7:d6:98:e9:ef:
         3a:30:c9:1e:35:28:49:de:a0:96:eb:72:d2:62:2b:61:0b:5b:
         9f:b0:49:ed:52:8d:92:d0:fa:f9:c9:3c:af:3a:ab:cc:14:56:
         5c:b4:b5:94:b5:78:c6:78:49:77:a2:21:3b:ef:76:52:73:8f:
         67:e7:c6:fc:25:f9:cd:a4:b1:91:84:08:f3:f8:1b:3e:c3:4b:
         90:b6:96:bd:cc:18:1e:23:f9:d7:f0:fe:70:ca:e8:c5:7e:53:
         5c:15:aa:3b:76:49:54:a3:c9:d0:62:aa:3a:58:33:d8:4b:fb:
         15:6f:15:fb:8d:3c:31:ec:d7:1b:0f:ba:ab:37:e4:80:39:05:
         07:dd:3c:69:de:b5:f8:47:1f:97:64:23:01:97:d5:9f:0f:6f:
         6f:1f:86:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:03:58 2025 by rpki-client