Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/AS215084.asa
File:                     AS215084.asa (raw, json)
Hash identifier:          VnCOMkKT2maWsf2f4NVt587A2kDQziKAN+YsQMVpLkI=
Subject key identifier:   20:C0:E8:53:A8:51:0A:C6:88:59:26:79:0E:E3:93:24:36:B7:E9:30
Certificate issuer:       /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial:       5BE844490659D21C4C3DC1ED95F10607AD80E0CF
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/AS215084.asa
Signing time:             Tue 03 Dec 2024 20:49:08 +0000
ASPA not before:          Tue 03 Dec 2024 20:44:08 +0000
ASPA not after:           Tue 02 Dec 2025 20:49:08 +0000
Customer ASID:            215084
Providers:                AS: 6939
                          AS: 20473
                          AS: 34927
                          AS: 207841
                          AS: 212271
                          AS: 393577

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Dec 2024 15:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e8:44:49:06:59:d2:1c:4c:3d:c1:ed:95:f1:06:07:ad:80:e0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
        Validity
            Not Before: Dec  3 20:44:08 2024 GMT
            Not After : Dec  2 20:49:08 2025 GMT
        Subject: CN=20C0E853A8510AC6885926790EE3932436B7E930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:c9:0e:9e:93:de:2d:d3:13:f0:3b:69:a4:
                    ce:c1:6f:18:52:cb:cb:4e:8b:86:cc:d2:79:fd:d9:
                    eb:5f:f8:05:e3:e1:4b:9f:2f:bb:90:7c:0a:f6:a1:
                    36:8c:b9:f2:6c:3e:5d:16:da:ca:f7:0f:f1:ae:dd:
                    3a:e1:1d:60:ad:bc:00:21:d7:05:eb:73:c5:ec:67:
                    50:c6:85:1b:34:2f:ba:14:ed:a7:3b:01:c6:a0:57:
                    f9:d4:5f:37:d6:a1:67:29:c4:12:25:f5:7a:a1:7e:
                    21:1b:69:63:7e:96:ed:d0:9a:b2:5c:62:0f:9e:76:
                    9c:aa:3d:d1:27:cf:67:1b:95:21:fd:90:8d:3d:d7:
                    8a:1d:d5:d1:9e:19:96:4c:40:7b:26:c8:93:01:a8:
                    ec:44:39:7f:8e:ec:bc:b2:06:7f:62:50:12:ba:fd:
                    2a:41:c8:df:e2:38:a4:92:c0:d2:89:36:63:6e:3d:
                    c8:4b:bf:5b:b9:09:e3:55:55:ee:e4:2a:ff:cf:10:
                    79:66:f3:fc:da:d2:1e:d4:c4:b2:23:8a:a4:9c:0d:
                    5f:03:2a:3b:b5:d4:a3:7b:c4:5e:26:0f:62:70:2a:
                    d6:fa:99:23:4f:16:bc:8f:3f:cd:97:c2:47:46:31:
                    fd:71:6f:c6:05:45:10:79:ae:c6:c6:7a:43:14:fe:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C0:E8:53:A8:51:0A:C6:88:59:26:79:0E:E3:93:24:36:B7:E9:30
            X509v3 Authority Key Identifier:
                keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/AS215084.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215084

    Signature Algorithm: sha256WithRSAEncryption
         8e:c8:62:ec:f8:d6:88:ff:cc:8c:ae:ab:ee:2e:61:7d:99:cb:
         8d:f9:1a:97:5b:e0:08:06:71:83:7e:41:7b:3c:58:f1:71:9d:
         a3:34:05:4b:26:5d:84:49:88:9e:33:5c:5b:86:00:15:ec:14:
         9f:e3:aa:86:52:4d:34:1b:d1:62:24:64:d4:98:f3:d6:80:0e:
         1a:2c:51:89:3b:cd:7e:dd:c7:83:8e:74:ff:4c:73:64:bf:1b:
         3d:a2:63:2d:f0:3c:01:8c:24:af:4c:f1:7e:49:64:ca:da:06:
         66:29:08:73:7d:50:0c:a9:48:fe:77:1a:9c:f8:0d:16:52:86:
         f3:53:aa:bb:b5:14:ef:8a:0a:49:55:cd:e6:b7:47:66:76:65:
         71:dd:51:33:a0:98:5d:81:1e:d9:e6:8b:7d:5a:01:93:77:86:
         70:b9:3e:d7:47:3c:81:84:e9:d0:64:51:10:c3:16:0d:31:78:
         12:b7:15:ef:7b:4d:b5:fc:ee:74:26:f0:24:c6:6a:84:52:ef:
         d7:27:15:dc:23:82:31:d9:04:26:40:a8:43:23:be:cc:c1:84:
         53:c8:e9:6c:b1:ef:10:8f:d4:a2:90:bb:02:7f:68:e0:ef:0e:
         00:5f:1e:91:32:35:f5:79:7b:01:ee:9e:e9:ff:b2:81:f5:af:
         92:3e:92:84
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUW+hESQZZ0hxMPcHtlfEGB62A4M8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGNkYjMyZDYyNTNmYmFmZTA3Mzc4YTFhMzA5NDZhNzNh
ZWM3ZTNkNDAeFw0yNDEyMDMyMDQ0MDhaFw0yNTEyMDIyMDQ5MDhaMDMxMTAvBgNV
BAMTKDIwQzBFODUzQTg1MTBBQzY4ODU5MjY3OTBFRTM5MzI0MzZCN0U5MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfskOnpPeLdMT8DtppM7BbxhS
y8tOi4bM0nn92etf+AXj4UufL7uQfAr2oTaMufJsPl0W2sr3D/Gu3TrhHWCtvAAh
1wXrc8XsZ1DGhRs0L7oU7ac7AcagV/nUXzfWoWcpxBIl9XqhfiEbaWN+lu3QmrJc
Yg+edpyqPdEnz2cblSH9kI0914od1dGeGZZMQHsmyJMBqOxEOX+O7LyyBn9iUBK6
/SpByN/iOKSSwNKJNmNuPchLv1u5CeNVVe7kKv/PEHlm8/za0h7UxLIjiqScDV8D
Kju11KN7xF4mD2JwKtb6mSNPFryPP82XwkdGMf1xb8YFRRB5rsbGekMU/nlTAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUIMDoU6hRCsaIWSZ5DuOTJDa36TAwHwYDVR0j
BBgwFoAUDNsy1iU/uv4HN4oaMJRqc67H49QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2
NDgwLzAvMENEQjMyRDYyNTNGQkFGRTA3Mzc4QTFBMzA5NDZBNzNBRUM3RTNENC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ROc3kxaVVfdXY0SE40b2FNSlJxYzY3
SDQ5US5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhkNWNkMTRlLTVmNjMt
NGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8wL0FTMjE1MDg0LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNILDANBgkq
hkiG9w0BAQsFAAOCAQEAjshi7PjWiP/MjK6r7i5hfZnLjfkal1vgCAZxg35BezxY
8XGdozQFSyZdhEmInjNcW4YAFewUn+OqhlJNNBvRYiRk1Jjz1oAOGixRiTvNft3H
g450/0xzZL8bPaJjLfA8AYwkr0zxfklkytoGZikIc31QDKlI/ncanPgNFlKG81Oq
u7UU74oKSVXN5rdHZnZlcd1RM6CYXYEe2eaLfVoBk3eGcLk+10c8gYTp0GRREMMW
DTF4ErcV73tNtfzudCbwJMZqhFLv1ycV3COCMdkEJkCoQyO+zMGEU8jpbLHvEI/U
opC7An9o4O8OAF8ekTI19Xl7Ae6e6f+ygfWvkj6ShA==
-----END CERTIFICATE-----
Generated at Mon Dec 9 22:08:46 2024 by rpki-client on console-fra.rpki-client.org