Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa
File:                     AS215147.asa (raw, json)
Hash identifier:          NOXWGQFW/ldLfUBuOYQFRAYg+0MBX2snBXZXel0OmU4=
Subject key identifier:   36:D9:3E:FB:DD:A0:AA:9F:93:80:90:50:43:7D:98:4F:F2:C7:E9:F6
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       38FBE0EFEAF00BDF74F5C752C28B05294645284F
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa
Signing time:             Sun 27 Oct 2024 17:06:20 +0000
ASPA not before:          Sun 27 Oct 2024 17:01:20 +0000
ASPA not after:           Sun 26 Oct 2025 17:06:20 +0000
Customer ASID:            215147
Providers:                AS: 47263
                          AS: 207252
                          AS: 215828

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:e0:ef:ea:f0:0b:df:74:f5:c7:52:c2:8b:05:29:46:45:28:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Oct 27 17:01:20 2024 GMT
            Not After : Oct 26 17:06:20 2025 GMT
        Subject: CN=36D93EFBDDA0AA9F93809050437D984FF2C7E9F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bf:44:17:d5:f5:81:bc:4a:0a:33:c7:51:ea:
                    a4:d3:11:05:69:87:27:17:e0:19:34:41:cc:0d:13:
                    d4:f6:f4:23:72:7a:80:93:0e:e8:4f:d0:13:0e:1c:
                    7b:62:78:9e:98:05:c3:85:16:4f:0f:da:83:67:dc:
                    d6:67:15:41:a0:f9:03:39:aa:55:b5:76:3c:f1:48:
                    9b:61:ec:a8:71:aa:0f:34:6c:f2:ed:3b:d4:ef:8c:
                    30:6e:6b:34:7a:2c:6d:e3:0f:7e:14:ea:36:93:d3:
                    b5:67:df:49:7a:35:57:41:6b:f6:8a:4c:ff:b7:61:
                    0e:49:38:65:32:47:00:3b:4e:1e:93:3d:f6:84:d2:
                    5e:fa:c8:cc:c5:63:35:04:03:f7:47:7e:84:a6:5e:
                    c6:ef:32:42:b1:2c:14:7a:14:5e:5e:42:ab:ef:03:
                    6b:22:ec:3c:7d:74:6e:cd:2b:32:5e:6d:47:d7:f3:
                    9c:bd:b6:e5:e6:b2:78:f3:5c:49:35:ac:ad:35:62:
                    1a:e5:e0:98:d6:28:db:7d:e9:25:ff:b0:df:44:67:
                    2e:c3:9f:14:72:f3:2e:c3:19:8a:19:58:9f:1d:a6:
                    89:60:25:7d:a8:1f:34:c2:de:e7:7c:cc:c6:4a:73:
                    3b:af:df:74:6a:83:c4:fa:e0:c9:64:23:7f:00:69:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D9:3E:FB:DD:A0:AA:9F:93:80:90:50:43:7D:98:4F:F2:C7:E9:F6
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215147

    Signature Algorithm: sha256WithRSAEncryption
         48:08:df:a4:b0:5a:2b:40:64:2f:c7:13:cc:df:e6:c2:1a:69:
         b5:d6:a5:bd:fc:0a:11:86:1d:37:28:fe:ac:74:a9:26:e3:79:
         60:04:43:69:9a:25:13:d5:79:d8:c7:59:ac:a2:01:c7:ea:b4:
         b7:12:9a:ad:f0:60:65:c1:da:f2:f2:3c:50:55:b9:d4:1e:8b:
         21:5b:a3:e6:97:d7:5a:ac:bf:b7:e7:4f:2d:cf:83:e8:79:9c:
         d7:28:11:ec:1e:90:d7:b1:7f:88:31:e5:09:d8:8a:ab:f6:17:
         03:85:a0:b3:ad:19:ea:47:0b:31:65:85:3b:a0:9a:e6:b2:81:
         b1:7d:f9:ca:ab:97:99:ff:2e:91:ac:4c:97:0e:7b:df:95:93:
         8e:eb:98:da:4e:4d:4a:a1:53:61:e7:25:a2:f2:81:f5:90:55:
         dd:34:a3:46:04:ea:1e:35:b6:86:4b:6e:50:74:9c:28:1a:89:
         36:ca:0f:20:2a:24:79:6e:05:b8:82:89:d0:10:87:16:9b:7e:
         08:d6:d4:23:f2:ef:e2:6d:f3:7a:1b:0e:d6:a8:48:9a:2b:00:
         31:b4:8b:db:d2:a3:91:2d:f6:e6:51:2d:50:3e:92:39:60:63:
         1d:b3:cb:1c:8b:9b:e1:80:d5:d5:6e:cc:08:de:c9:3b:76:68:
         76:61:14:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:13:28 2024 by rpki-client on console-ams.rpki-client.org