Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/AS215277.asa
File:                     AS215277.asa (raw, json)
Hash identifier:          /NSm7byRzs0tpnovtHnCzzB6PpqZTxUH8EmHV77zmWY=
Subject key identifier:   A9:1F:8E:22:D9:3E:F8:06:F8:84:7D:77:FE:AC:B5:92:F5:90:8D:9C
Certificate issuer:       /CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
Certificate serial:       37B193F797C8D86132DF6F7687DD3906E287D332
Authority key identifier: 4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/AS215277.asa
Signing time:             Sun 16 Mar 2025 21:03:46 +0000
ASPA not before:          Sun 16 Mar 2025 20:58:46 +0000
ASPA not after:           Sun 15 Mar 2026 21:03:46 +0000
Customer ASID:            215277
Providers:                AS: 11358
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Apr 2025 16:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b1:93:f7:97:c8:d8:61:32:df:6f:76:87:dd:39:06:e2:87:d3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3434f13a572bf5e189f1b7fa148f5d107f6f57
        Validity
            Not Before: Mar 16 20:58:46 2025 GMT
            Not After : Mar 15 21:03:46 2026 GMT
        Subject: CN=A91F8E22D93EF806F8847D77FEACB592F5908D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:39:4d:0e:25:db:f3:10:5e:f3:5e:e0:a1:
                    b1:82:03:e7:1e:95:f6:1b:c8:8e:62:dc:33:32:68:
                    9d:29:b1:33:76:b9:a1:8c:86:0a:11:db:8d:51:91:
                    a2:7f:53:70:9d:2c:c5:51:d2:c1:52:a3:52:74:f5:
                    c9:36:28:d1:0c:fe:4f:63:aa:a4:52:73:06:99:93:
                    3f:e6:8f:23:9c:fe:bc:88:38:52:3d:38:f2:03:a9:
                    9e:1e:4e:c3:ba:cd:cf:3f:48:de:3a:c5:61:09:f2:
                    f1:0b:bf:be:70:34:91:bc:b4:7d:25:f7:1a:91:e0:
                    22:3c:d0:8d:23:49:2d:bc:1d:5c:ea:97:be:df:19:
                    e6:90:0b:1a:4e:aa:f3:f0:f3:67:e9:3b:be:82:3b:
                    ff:e3:46:eb:f3:16:8d:b4:af:db:06:5f:d4:36:03:
                    64:de:a7:74:88:a0:b9:9f:55:ae:94:ac:1a:ca:d7:
                    3d:ff:c1:d4:31:80:25:79:2e:f4:a6:60:f8:c1:b3:
                    cd:0d:3e:88:64:39:da:24:de:fa:38:b9:f2:99:e0:
                    3b:03:45:3c:88:2f:ad:4d:11:d2:7d:c1:c5:58:80:
                    11:59:0b:80:7f:ad:65:3d:d6:9c:55:99:83:17:5d:
                    bb:1f:a1:30:d5:64:be:df:3f:81:cf:0c:9a:1b:8e:
                    20:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:8E:22:D9:3E:F8:06:F8:84:7D:77:FE:AC:B5:92:F5:90:8D:9C
            X509v3 Authority Key Identifier:
                keyid:4E:34:34:F1:3A:57:2B:F5:E1:89:F1:B7:FA:14:8F:5D:10:7F:6F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/4E3434F13A572BF5E189F1B7FA148F5D107F6F57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQ08TpXK_XhifG3-hSPXRB_b1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bc9a2e7-61e8-4e70-942d-c545cf0674c3/0/AS215277.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215277

    Signature Algorithm: sha256WithRSAEncryption
         ad:b8:84:be:26:69:3b:30:6d:2e:4c:a1:16:af:30:82:9e:36:
         0b:7d:ba:8d:79:50:f4:c5:8d:86:75:f5:35:d9:f9:62:0f:9c:
         a6:da:c4:74:8d:13:dc:d0:9e:8e:36:9c:d4:6e:93:e4:25:8e:
         39:c6:d6:66:8d:0c:a4:6c:95:ab:f9:fa:28:15:59:de:a9:2c:
         64:da:80:0c:f6:89:59:96:54:47:eb:0c:3a:e1:19:58:9c:74:
         10:59:47:b7:48:40:89:34:9e:c4:2d:c0:9d:24:fe:5d:4c:69:
         57:57:67:11:b0:5e:1e:e6:0c:89:c4:1f:6c:63:35:cb:3d:dd:
         e5:a5:f7:dc:0e:dd:da:57:4e:78:6b:a4:ac:2d:a1:c9:1b:56:
         e0:5b:4c:d0:2b:06:21:fc:45:9d:81:69:30:d2:ae:9b:c4:b1:
         4f:54:7d:7f:92:d6:2e:4d:54:d5:2d:89:43:b3:b9:58:23:5b:
         44:94:eb:87:62:fb:98:6f:f2:71:3e:5f:73:08:5d:1a:4c:5e:
         c1:01:73:6a:66:b9:50:1d:45:d7:cf:6a:dc:e1:4b:77:7d:2a:
         88:3c:88:52:74:d8:ae:41:c0:9b:8f:eb:5f:29:99:9c:98:8e:
         30:00:bb:f4:1c:5c:73:8d:fc:06:76:dc:d1:6d:eb:c3:b1:30:
         c0:18:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:28:47 2025 by rpki-client