Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/AS213768.asa
File:                     AS213768.asa (raw, json)
Hash identifier:          J13H9BuaKviNhPCxVwYXNwc2bQb/kTa45bbhm15NGa8=
Subject key identifier:   FE:AC:95:06:F8:13:73:0D:C0:3C:81:71:29:89:B7:1A:68:9A:11:AB
Certificate issuer:       /CN=460fb7e5eebb5f865dbf612966909ccca71b3ebb
Certificate serial:       10DBD6E9E9FCA1628BB50DCF04B2346C1E1FA81A
Authority key identifier: 46:0F:B7:E5:EE:BB:5F:86:5D:BF:61:29:66:90:9C:CC:A7:1B:3E:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg-35e67X4Zdv2EpZpCczKcbPrs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/AS213768.asa
Signing time:             Sat 01 Mar 2025 13:46:26 +0000
ASPA not before:          Sat 01 Mar 2025 13:41:26 +0000
ASPA not after:           Sat 28 Feb 2026 13:46:26 +0000
Customer ASID:            213768
Providers:                AS: 34927
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg-35e67X4Zdv2EpZpCczKcbPrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Mar 2025 10:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:db:d6:e9:e9:fc:a1:62:8b:b5:0d:cf:04:b2:34:6c:1e:1f:a8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460fb7e5eebb5f865dbf612966909ccca71b3ebb
        Validity
            Not Before: Mar  1 13:41:26 2025 GMT
            Not After : Feb 28 13:46:26 2026 GMT
        Subject: CN=FEAC9506F813730DC03C81712989B71A689A11AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:1e:32:2c:90:b4:95:80:e4:f2:c5:2c:43:
                    0f:8e:bc:25:05:49:2d:ee:da:d0:aa:7c:68:fc:54:
                    da:4f:ca:ad:21:58:25:ce:bf:15:e2:33:66:06:3d:
                    0f:2f:b1:fa:a1:b3:f1:2d:e9:ec:b3:7c:b4:de:5c:
                    bd:36:4d:ce:fe:1a:04:6a:be:35:12:00:48:f1:d6:
                    c7:30:47:be:d0:15:c6:8d:82:ca:16:b9:f2:6a:52:
                    89:30:7d:dd:fe:32:d3:f4:27:b7:1d:86:a9:7b:32:
                    97:2a:74:6a:aa:c6:a0:ec:46:1f:a4:93:e3:52:2a:
                    d7:1d:18:82:bd:99:b5:ac:f1:17:79:24:17:e8:46:
                    18:04:38:3b:35:ed:f6:18:25:d7:35:64:02:31:89:
                    72:42:f2:6d:ab:86:18:d4:55:52:4e:22:ec:5c:a8:
                    62:00:49:de:07:7a:04:01:b3:8e:9c:9f:6d:44:f7:
                    8e:80:a5:50:37:cb:38:fd:a3:5d:be:18:4a:d2:e1:
                    03:e0:c8:bb:27:a7:82:6a:40:50:a9:9f:99:1c:67:
                    01:db:39:bd:c9:09:ea:dc:af:35:39:36:b2:ee:49:
                    2f:dd:64:d2:23:6b:64:e9:07:7b:d2:aa:bc:71:de:
                    90:56:f6:35:07:66:68:64:a0:c1:14:b0:3a:d7:49:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AC:95:06:F8:13:73:0D:C0:3C:81:71:29:89:B7:1A:68:9A:11:AB
            X509v3 Authority Key Identifier:
                keyid:46:0F:B7:E5:EE:BB:5F:86:5D:BF:61:29:66:90:9C:CC:A7:1B:3E:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/460FB7E5EEBB5F865DBF612966909CCCA71B3EBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg-35e67X4Zdv2EpZpCczKcbPrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35baf3e6-49a6-476a-bbd0-964a5827e808/0/AS213768.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213768

    Signature Algorithm: sha256WithRSAEncryption
         5f:a8:4a:9a:4d:ac:8e:36:b4:2e:d4:20:c9:35:6f:bc:d8:3b:
         c8:28:24:e6:ea:dd:0e:0b:41:d8:1f:54:c7:ac:87:eb:92:25:
         39:85:dc:54:c8:ac:94:56:f9:2b:3b:33:b0:f7:8a:ac:bd:2e:
         13:48:e8:b5:e1:d2:97:e1:1d:9a:b7:d2:78:14:87:dd:92:46:
         85:84:9f:54:b7:d2:83:c9:d1:59:a7:b1:80:46:82:56:33:8c:
         3f:7a:90:d0:b4:47:17:e5:1e:6a:90:a0:fb:cf:8c:92:3e:21:
         ab:70:f8:76:d4:ae:85:c9:ea:59:c3:cd:45:07:ed:24:ba:3b:
         49:30:cd:70:0e:5f:50:81:8d:f1:18:31:bb:ef:20:79:7f:f3:
         df:d1:69:75:3f:35:94:ec:d9:22:b5:16:22:d5:fb:44:b2:f5:
         60:2e:04:5c:bd:42:cd:24:6c:06:0f:73:90:91:43:64:f2:ed:
         98:2e:36:61:9f:9f:22:c7:27:7e:42:69:0c:d3:4b:8f:3d:b0:
         23:39:f9:7a:f1:09:07:0c:58:21:ba:fc:da:9b:84:97:8f:5e:
         9d:9d:8b:5e:ce:07:71:9e:90:26:e0:f4:0c:cf:77:b6:b5:d2:
         bf:33:f0:79:02:f0:d8:6f:8f:14:9c:5b:2a:ab:ee:86:f3:07:
         1f:b0:e5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 22:08:27 2025 by rpki-client