Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/AS215368.asa
File:                     AS215368.asa (raw, json)
Hash identifier:          woWmAWlAdfUVglZTxtjngU+yb37i/M9A1MFxFAQHj+s=
Subject key identifier:   DF:42:D4:A8:44:76:16:0D:12:87:F8:4E:68:7A:67:90:99:3F:5F:7E
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       5D38D8BF52DFD10EC31E8F5D94F0832A39CBD863
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/AS215368.asa
Signing time:             Mon 16 Dec 2024 17:00:52 +0000
ASPA not before:          Mon 16 Dec 2024 16:55:52 +0000
ASPA not after:           Mon 15 Dec 2025 17:00:52 +0000
Customer ASID:            215368
Providers:                AS: 207841
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:38:d8:bf:52:df:d1:0e:c3:1e:8f:5d:94:f0:83:2a:39:cb:d8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: Dec 16 16:55:52 2024 GMT
            Not After : Dec 15 17:00:52 2025 GMT
        Subject: CN=DF42D4A84476160D1287F84E687A6790993F5F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:35:01:c7:8b:e3:cc:dd:7d:0a:e2:e4:24:
                    7c:f3:ca:cd:7e:9d:4c:c3:a4:ef:2e:3a:ed:a1:21:
                    c8:da:da:ba:d7:ef:4c:37:c8:4a:23:32:27:59:84:
                    0a:92:9d:24:a5:21:e3:d5:b6:5f:c9:b2:68:be:05:
                    f7:d2:40:e0:c0:33:56:87:89:7c:9c:83:fe:7c:8a:
                    c6:5d:aa:72:4e:91:f7:4b:76:dc:60:fc:4c:fc:2f:
                    df:60:4d:6e:8d:0e:99:d1:6d:ee:5d:72:cf:c5:4a:
                    77:8b:0f:c4:8e:cb:28:04:45:a4:13:3d:06:ac:a1:
                    e5:d6:a5:33:bc:e6:b0:ab:3e:5f:47:7d:c0:aa:35:
                    ee:dd:f3:d5:18:50:7a:aa:35:87:04:c7:d9:8c:48:
                    e2:b4:66:99:70:37:d0:fb:ca:7b:46:24:fd:36:77:
                    46:ca:ce:a8:4c:80:24:e4:f1:ed:71:5a:e6:c3:43:
                    34:fe:e7:05:c4:97:f7:01:37:f4:f5:d5:47:05:db:
                    9a:1e:60:84:7b:e1:d5:df:c7:0a:15:60:92:50:93:
                    32:a7:1a:f2:f2:e8:79:5d:d3:2e:ac:d0:d7:b1:7b:
                    98:e6:d2:93:35:9a:7e:73:75:c0:0b:e1:22:dc:5b:
                    d7:13:1f:86:a3:6e:15:3b:ac:85:32:ac:e5:cb:40:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:42:D4:A8:44:76:16:0D:12:87:F8:4E:68:7A:67:90:99:3F:5F:7E
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/AS215368.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215368

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:35:cb:55:76:e1:f0:a5:19:04:1a:8d:e4:0d:68:7a:fc:
         40:8e:c0:97:e9:c1:d8:bb:0b:28:3d:7f:c1:4f:65:4a:ad:37:
         22:f1:70:09:78:5b:06:ed:05:a9:78:22:4c:fd:fb:4c:5f:33:
         38:b7:92:02:e2:33:a7:11:00:86:11:a3:36:bb:1b:d3:3a:0f:
         f9:97:20:87:bf:4c:61:58:ef:c9:a3:2b:13:ca:b3:f3:5f:d1:
         91:6e:5e:65:53:fb:73:7c:46:3d:df:81:0a:d7:c7:42:e7:ce:
         c3:59:dd:fe:f7:f6:a7:c2:5d:93:91:66:4e:80:1c:f2:f4:ce:
         79:62:2f:4e:68:16:20:f7:60:57:63:b4:54:3c:b1:5b:0a:19:
         55:b3:2a:4f:cf:27:95:55:be:43:d4:cb:ac:16:b3:83:60:d6:
         bd:60:fb:11:d8:4d:b9:24:88:55:6d:12:d7:f7:29:bf:10:48:
         16:e2:a1:46:4c:e8:ba:43:f9:55:22:81:2d:32:f5:67:4e:f7:
         cd:4c:6a:6f:77:73:d8:d4:de:d9:0f:f3:1a:9c:38:56:88:1b:
         8b:d9:3f:4c:3d:d6:84:c5:07:fc:ac:ed:ce:6d:98:04:09:03:
         05:17:9b:70:fd:b7:f7:3f:2c:30:c9:77:07:eb:13:b3:a9:89:
         ea:d8:08:60
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUXTjYv1Lf0Q7DHo9dlPCDKjnL2GMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTJjOTI5NWNjMWMzMTg3NmM4NTU0ZThiNjBkYzU3M2Nm
ZWE3Y2IyNjAeFw0yNDEyMTYxNjU1NTJaFw0yNTEyMTUxNzAwNTJaMDMxMTAvBgNV
BAMTKERGNDJENEE4NDQ3NjE2MEQxMjg3Rjg0RTY4N0E2NzkwOTkzRjVGN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDTUBx4vjzN19CuLkJHzzys1+
nUzDpO8uOu2hIcja2rrX70w3yEojMidZhAqSnSSlIePVtl/Jsmi+BffSQODAM1aH
iXycg/58isZdqnJOkfdLdtxg/Ez8L99gTW6NDpnRbe5dcs/FSneLD8SOyygERaQT
PQasoeXWpTO85rCrPl9HfcCqNe7d89UYUHqqNYcEx9mMSOK0ZplwN9D7yntGJP02
d0bKzqhMgCTk8e1xWubDQzT+5wXEl/cBN/T11UcF25oeYIR74dXfxwoVYJJQkzKn
GvLy6Hld0y6s0Nexe5jm0pM1mn5zdcAL4SLcW9cTH4ajbhU7rIUyrOXLQN0dAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQU30LUqER2Fg0Sh/hOaHpnkJk/X34wHwYDVR0j
BBgwFoAU4skpXMHDGHbIVU6LYNxXPP6nyyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzMvRTJDOTI5NUNDMUMzMTg3NkM4NTU0RThCNjBEQzU3M0NGRUE3Q0IyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRza3BYTUhER0hiSVZVNkxZTnhYUFA2
bnl5WS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8zL0FTMjE1MzY4LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNJSDANBgkq
hkiG9w0BAQsFAAOCAQEAkOk1y1V24fClGQQajeQNaHr8QI7Al+nB2LsLKD1/wU9l
Sq03IvFwCXhbBu0FqXgiTP37TF8zOLeSAuIzpxEAhhGjNrsb0zoP+Zcgh79MYVjv
yaMrE8qz81/RkW5eZVP7c3xGPd+BCtfHQufOw1nd/vf2p8Jdk5FmToAc8vTOeWIv
TmgWIPdgV2O0VDyxWwoZVbMqT88nlVW+Q9TLrBazg2DWvWD7EdhNuSSIVW0S1/cp
vxBIFuKhRkzoukP5VSKBLTL1Z073zUxqb3dz2NTe2Q/zGpw4Vogbi9k/TD3WhMUH
/Kztzm2YBAkDBRebcP239z8sMMl3B+sTs6mJ6tgIYA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:48:25 2025 by rpki-client