Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/AS215664.asa
File:                     AS215664.asa (raw, json)
Hash identifier:          3xgtLcc2KJDcNPvYcpy+weIMwVapy+UkODXe2KlOTz0=
Subject key identifier:   26:64:11:0B:47:73:77:71:0F:A2:19:C8:EF:01:30:5A:FE:E1:B1:34
Certificate issuer:       /CN=adaa2df4f9f7f1b10330c3ab0ce4598d59dffda0
Certificate serial:       3F6A72367E35E73654257201E54AC993B43FEA3B
Authority key identifier: AD:AA:2D:F4:F9:F7:F1:B1:03:30:C3:AB:0C:E4:59:8D:59:DF:FD:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/AS215664.asa
Signing time:             Thu 22 Aug 2024 09:15:26 +0000
ASPA not before:          Thu 22 Aug 2024 09:10:26 +0000
ASPA not after:           Thu 21 Aug 2025 09:15:26 +0000
Customer ASID:            215664
Providers:                AS: 1299
                          AS: 3204
                          AS: 6939
                          AS: 34549
                          AS: 41720
                          AS: 56382
                          AS: 203446
                          AS: 212508

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6a:72:36:7e:35:e7:36:54:25:72:01:e5:4a:c9:93:b4:3f:ea:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adaa2df4f9f7f1b10330c3ab0ce4598d59dffda0
        Validity
            Not Before: Aug 22 09:10:26 2024 GMT
            Not After : Aug 21 09:15:26 2025 GMT
        Subject: CN=2664110B477377710FA219C8EF01305AFEE1B134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:13:79:4f:c2:f5:07:38:2c:29:33:87:6e:35:
                    af:ec:9f:7f:7f:53:80:7b:74:26:67:d2:50:8a:fe:
                    dd:d6:ec:d8:b3:e4:c8:2e:50:09:11:56:c2:9e:27:
                    87:5e:a6:40:2c:55:a3:f8:63:94:04:4a:af:1d:af:
                    89:82:23:c8:09:db:43:ae:74:45:42:55:2f:27:e0:
                    ec:4d:7a:a2:61:df:b4:1d:59:21:18:a4:74:55:0a:
                    92:94:06:b6:eb:1d:ef:65:e1:97:5b:74:1e:9b:55:
                    ad:98:17:f5:ee:fa:b6:52:b8:00:ab:78:77:f8:d4:
                    4c:92:65:5f:a0:0e:61:f7:06:f0:ae:ca:a1:92:14:
                    29:26:9d:af:a4:85:46:8e:be:a0:b2:a1:0c:da:97:
                    46:b8:0f:22:e3:21:aa:0b:cd:2a:4a:d8:9a:7c:fa:
                    3c:37:09:c7:06:13:94:c5:cb:bc:cf:4e:b3:a2:97:
                    ff:96:fc:cd:d2:ec:b1:7f:fb:dc:19:43:86:2c:09:
                    88:38:a0:79:7b:ca:11:6b:3e:49:5a:4d:74:9f:a0:
                    72:12:99:cd:29:e7:d2:7b:cc:58:a7:a0:de:d7:9a:
                    ab:56:c8:3f:a1:88:bb:fb:89:2c:2f:e2:84:51:da:
                    10:65:89:85:84:a4:41:5e:27:75:c6:9c:05:9e:ee:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:64:11:0B:47:73:77:71:0F:A2:19:C8:EF:01:30:5A:FE:E1:B1:34
            X509v3 Authority Key Identifier:
                keyid:AD:AA:2D:F4:F9:F7:F1:B1:03:30:C3:AB:0C:E4:59:8D:59:DF:FD:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/ADAA2DF4F9F7F1B10330C3AB0CE4598D59DFFDA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raot9Pn38bEDMMOrDORZjVnf_aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/0/AS215664.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215664

    Signature Algorithm: sha256WithRSAEncryption
         bc:cd:ff:f2:17:68:4b:81:70:39:d0:68:4d:13:cc:22:f7:8b:
         23:4d:d1:ba:e0:60:f7:4f:ff:6b:7d:98:b5:5f:4f:7a:20:dd:
         5e:d7:b6:f4:6e:ab:d8:ae:6d:b9:57:10:6c:da:3b:1a:c2:02:
         65:b4:3c:51:f9:d4:99:55:fe:df:82:64:93:40:76:fc:12:ab:
         7c:13:2d:a3:2c:d7:9a:71:f0:de:b1:b2:16:bf:dc:63:11:dd:
         09:ec:ed:2f:e3:76:c9:89:c0:76:5b:53:03:ff:a7:ed:8c:79:
         37:a3:44:1a:a7:c0:17:d3:4b:cd:4c:0d:6e:77:0f:f6:3b:75:
         54:2f:19:94:19:ef:4d:a2:92:0d:2e:59:a7:b9:90:dc:c8:b4:
         5a:42:d0:27:fe:d9:8b:bf:8c:70:c8:c2:cf:2b:2f:ee:25:ce:
         2f:ed:56:2e:8a:58:c8:a2:91:72:9e:0a:18:d0:4c:18:47:36:
         c6:ef:1a:d0:b2:df:58:3f:c3:4f:ca:0e:e4:5c:b2:1d:34:7a:
         24:f3:e0:b8:b9:cf:28:4e:f2:4d:bf:f4:12:23:7e:b5:d4:d9:
         f2:10:d3:bf:90:45:3c:ed:ef:40:aa:d1:85:be:ce:0b:af:ef:
         d4:d6:5c:c2:15:62:a0:22:6a:65:61:4d:14:14:07:f1:70:bc:
         ab:69:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:55:32 2024 by rpki-client on console-fra.rpki-client.org