Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/AS208824.asa
File:                     AS208824.asa (raw, json)
Hash identifier:          s478gLdubU217wOwz3XVpDSBZ0mET32A4LFnedJpS04=
Subject key identifier:   34:64:91:BA:83:E5:B1:1C:4B:48:52:0C:3B:79:A8:26:AF:21:46:95
Certificate issuer:       /CN=cf7320162773cffe2866d9712a738e4199536117
Certificate serial:       02709B05215FEF2184B9233EEF087B31088D6C69
Authority key identifier: CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/AS208824.asa
Signing time:             Tue 02 Sep 2025 17:51:53 +0000
ASPA not before:          Tue 02 Sep 2025 17:46:53 +0000
ASPA not after:           Tue 01 Sep 2026 17:51:53 +0000
Customer ASID:            208824
Providers:                AS: 6939
                          AS: 8772
                          AS: 29632
                          AS: 34927
                          AS: 41051
                          AS: 44324
                          AS: 207841
                          AS: 209533
                          AS: 209735
                          AS: 211358
                          AS: 212895
                          AS: 214757
                          AS: 215828
                          AS: 393577
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:70:9b:05:21:5f:ef:21:84:b9:23:3e:ef:08:7b:31:08:8d:6c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7320162773cffe2866d9712a738e4199536117
        Validity
            Not Before: Sep  2 17:46:53 2025 GMT
            Not After : Sep  1 17:51:53 2026 GMT
        Subject: CN=346491BA83E5B11C4B48520C3B79A826AF214695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:7d:c9:b4:79:96:81:61:70:71:c8:f3:1b:
                    2f:44:a6:f6:38:fc:f5:bf:c1:41:76:9f:fc:fb:3e:
                    2b:b8:89:b8:51:f6:ef:20:3a:aa:81:2f:e5:94:d8:
                    98:06:eb:24:b2:b5:eb:b7:8b:50:ab:06:54:1d:de:
                    88:0d:55:8b:53:05:a7:07:6b:65:3c:c2:6f:1e:93:
                    7e:89:3b:cd:c9:6b:ad:a3:6a:19:d3:ba:23:b0:58:
                    a0:3a:d6:85:69:54:19:a2:1b:cd:5c:65:60:bf:d6:
                    83:85:c7:52:cc:91:91:84:83:df:ea:cf:f1:f1:f3:
                    48:f6:c3:2f:48:a3:cc:a0:63:83:b9:ee:60:9a:83:
                    4e:b3:91:29:38:48:08:00:fc:17:4e:56:85:dd:96:
                    d1:7b:aa:5a:b0:ba:5a:e7:e0:63:54:4b:2b:42:ff:
                    07:46:9a:99:fa:b8:25:ef:2e:69:33:a0:1c:57:5f:
                    ff:09:3d:ab:a8:e2:ab:2f:e0:00:0f:8b:88:2e:d6:
                    f1:d5:ed:4b:32:67:72:cb:d1:bf:04:ff:51:28:03:
                    d0:ad:2e:4e:4e:9f:e8:61:f6:fa:91:bb:ac:ae:11:
                    d9:fc:78:75:eb:99:69:85:c5:2c:7a:66:7f:73:ca:
                    bd:20:f3:23:04:88:67:ee:bb:4d:de:92:0f:d0:d1:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:64:91:BA:83:E5:B1:1C:4B:48:52:0C:3B:79:A8:26:AF:21:46:95
            X509v3 Authority Key Identifier:
                keyid:CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/AS208824.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208824

    Signature Algorithm: sha256WithRSAEncryption
         54:98:84:da:82:5a:96:08:a8:0d:1b:33:09:a0:a3:26:af:80:
         57:06:0c:01:05:f1:53:60:a9:db:53:c3:b8:7f:b2:d8:28:3c:
         3c:71:bf:93:3d:d1:a0:d4:99:53:f3:eb:9d:3d:2d:f4:b0:08:
         70:2a:c8:55:ac:ad:d3:a0:3d:8d:02:04:ae:3a:65:ed:0c:a9:
         16:d6:31:19:9f:1d:d8:4c:d5:7c:00:98:7e:3c:97:12:e0:02:
         2a:57:69:98:d0:53:a0:5b:e3:58:65:77:35:66:67:50:d5:aa:
         c6:61:58:93:d6:bb:e5:0d:22:f5:c1:8e:c1:e0:b9:32:a4:a0:
         db:05:2b:88:d0:a5:28:57:a7:c9:d5:92:e8:03:85:42:82:63:
         0f:0a:e7:88:a8:4b:9d:b4:fe:b2:d9:a8:d6:c9:09:85:02:28:
         95:76:ad:ed:d9:80:df:cf:37:f7:9a:69:42:6e:ba:2f:b4:76:
         ee:12:ff:7c:29:57:b5:49:5c:77:80:02:2f:d5:8c:b8:4c:19:
         f3:2a:f8:4e:14:3a:dd:09:6e:cf:a1:32:b2:47:a3:49:de:32:
         b2:c0:14:33:86:b2:14:08:06:ef:09:ef:87:ee:b7:5c:52:cd:
         5b:c3:6d:80:14:e8:40:18:fc:b5:2b:c5:6b:30:e2:ba:1b:25:
         7c:98:44:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 02:12:50 2025 by rpki-client