Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa
File:                     AS215147.asa (raw, json)
Hash identifier:          qXMMSDVBTmNf/nBu1FmfUoyCcKFPj9cgWZ27i7xpC6M=
Subject key identifier:   50:59:88:8D:70:6F:DA:0F:5F:6B:C9:2E:AD:B9:43:02:F1:1F:E6:B1
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       24FDE160361933659134653533AECFBAF56FC2AA
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa
Signing time:             Sun 01 Dec 2024 22:03:24 +0000
ASPA not before:          Sun 01 Dec 2024 21:58:24 +0000
ASPA not after:           Sun 30 Nov 2025 22:03:24 +0000
Customer ASID:            215147
Providers:                AS: 207252
                          AS: 213915
                          AS: 215828

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Dec 2024 16:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fd:e1:60:36:19:33:65:91:34:65:35:33:ae:cf:ba:f5:6f:c2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Dec  1 21:58:24 2024 GMT
            Not After : Nov 30 22:03:24 2025 GMT
        Subject: CN=5059888D706FDA0F5F6BC92EADB94302F11FE6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:96:b4:75:9b:99:ea:e3:c1:2b:ad:02:22:
                    9b:4c:c6:94:21:9f:f2:a8:ce:97:22:12:3d:c4:30:
                    7b:bd:f9:89:d4:94:56:26:a0:64:6a:fd:6a:50:b6:
                    b5:5d:90:39:cf:7f:0e:65:fc:cd:2b:58:f5:ee:88:
                    aa:7e:81:b0:c6:ff:c5:05:d2:22:c7:af:4e:e9:b8:
                    9e:73:22:f6:68:d3:a0:e8:ae:80:61:5d:8f:53:ba:
                    a1:4f:d2:b3:cc:83:c6:29:8f:b3:4f:1f:6f:19:ab:
                    42:bf:37:37:21:d5:10:93:b9:00:21:e1:2e:c5:e5:
                    23:c2:f0:2e:5f:4e:63:f9:bd:20:9e:45:a7:94:7d:
                    6c:47:af:10:b3:5a:c8:0a:72:c4:38:4e:f3:00:6e:
                    17:ee:20:84:3d:86:ee:da:df:6e:25:0f:76:af:65:
                    45:d2:1f:1b:47:11:0c:b2:27:e8:7d:16:a1:ed:ff:
                    8b:e9:70:31:8f:b5:ca:2c:b0:7e:78:5b:b2:f7:3e:
                    21:cd:6b:e5:6f:bc:69:6e:9e:df:55:52:59:c5:c9:
                    4b:f7:49:88:7c:77:5b:be:66:8f:9b:d6:d0:30:4b:
                    4d:1a:f7:e8:a0:03:73:6c:c6:39:fd:e2:3a:91:34:
                    9c:b3:96:60:3b:1b:1a:c7:b3:9e:e9:e4:5b:6e:43:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:59:88:8D:70:6F:DA:0F:5F:6B:C9:2E:AD:B9:43:02:F1:1F:E6:B1
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215147

    Signature Algorithm: sha256WithRSAEncryption
         28:86:4e:75:ef:d3:c9:f7:d3:a7:6a:e9:58:b8:b5:a4:f7:3c:
         d0:80:96:c6:ac:a1:d2:ed:89:04:e4:f2:cc:3b:63:84:39:b4:
         fd:c3:e6:65:81:fd:71:df:89:03:58:86:ac:bd:1e:32:df:fa:
         ed:cc:02:e1:d5:2f:81:38:83:10:ff:7d:77:19:2f:04:12:f8:
         78:0c:d5:e8:04:93:51:25:1b:47:6a:92:17:37:f7:46:0f:cb:
         fd:18:55:17:e1:fe:d5:55:bd:18:fa:40:0f:f1:c1:7e:34:9e:
         48:d4:96:f2:0e:99:0c:a8:52:14:f2:09:90:9d:26:d5:30:99:
         ca:2d:75:d4:45:98:c9:cd:fb:4f:78:f3:33:ce:07:6c:ff:ac:
         f9:48:b1:34:e3:9d:78:5b:b6:30:05:56:5f:e9:7c:fc:2e:fb:
         58:61:01:2c:86:38:5e:03:3f:16:42:64:9b:47:80:ee:fa:72:
         12:f6:41:e9:6f:20:d1:92:3a:da:53:92:17:3b:1f:09:31:66:
         0c:46:d3:6b:43:b9:2d:a9:98:ac:ae:33:11:e4:95:d1:b2:13:
         f7:72:09:4f:28:13:91:95:8e:52:b4:e8:d9:ff:e9:6c:15:aa:
         6f:e6:3f:39:20:08:9f:10:6f:34:6c:3c:cd:89:cf:57:95:64:
         13:3e:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 19:49:49 2024 by rpki-client on console-fra.rpki-client.org