Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa
File:                     AS215828.asa (raw, json)
Hash identifier:          xY1Yp2b9xtswDljy+sEDaQx90hJFzuCUTkyNiPHVMBc=
Subject key identifier:   27:A9:A0:30:9B:E4:D2:3A:31:8E:DA:A5:D4:9F:8F:95:24:ED:A5:CB
Certificate issuer:       /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial:       7ED2B6A6DE011857514C9DFC0990B2B017E3DA16
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa
Signing time:             Thu 21 Nov 2024 06:38:32 +0000
ASPA not before:          Thu 21 Nov 2024 06:33:32 +0000
ASPA not after:           Thu 20 Nov 2025 06:38:32 +0000
Customer ASID:            215828
Providers:                AS: 6204
                          AS: 6939
                          AS: 8772
                          AS: 29390
                          AS: 29632
                          AS: 34465
                          AS: 34927
                          AS: 39249
                          AS: 41051
                          AS: 44592
                          AS: 48752
                          AS: 50917
                          AS: 51019
                          AS: 58057
                          AS: 62403
                          AS: 152726
                          AS: 197071
                          AS: 199524
                          AS: 203686
                          AS: 207656
                          AS: 209533
                          AS: 210464
                          AS: 215147
                          AS: 216324
                          AS: 216360
                          AS: 393577

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d2:b6:a6:de:01:18:57:51:4c:9d:fc:09:90:b2:b0:17:e3:da:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
        Validity
            Not Before: Nov 21 06:33:32 2024 GMT
            Not After : Nov 20 06:38:32 2025 GMT
        Subject: CN=27A9A0309BE4D23A318EDAA5D49F8F9524EDA5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:ac:1a:43:a9:4f:90:39:8b:ec:e3:94:e7:
                    a4:bd:99:8b:cd:5e:d2:f5:b5:11:49:2e:dc:a9:f9:
                    25:25:78:34:c9:ff:7d:48:37:d1:a4:ca:4a:ea:fb:
                    4c:df:78:6a:5c:d7:75:d4:b0:e2:f2:5f:8d:3b:fc:
                    8f:cd:57:3b:7f:c6:d3:b3:23:8a:0a:0c:48:7b:e1:
                    3f:c8:a5:11:a5:af:66:53:0c:0c:94:88:b9:94:9f:
                    4a:82:96:fa:2c:87:64:65:1e:47:c8:e7:0f:dc:4e:
                    e8:c7:23:a4:14:c1:9a:d5:14:68:1d:f6:53:8e:25:
                    1e:c6:80:3a:96:a2:1a:11:7b:38:02:0e:89:22:7e:
                    6e:34:78:62:8e:15:9b:98:a2:e8:50:48:af:ca:3c:
                    92:74:bf:08:1d:0e:86:d3:f1:01:9c:30:a7:06:1c:
                    07:45:2b:44:eb:22:80:eb:b7:1c:f1:9e:c1:2d:50:
                    14:8a:f5:98:25:2c:6f:2d:4a:56:c7:31:99:f0:f3:
                    b5:f3:6a:7d:6b:5d:2e:22:e1:f6:bd:42:45:fa:c1:
                    80:0e:96:b5:6b:b1:e5:da:00:b5:fd:1c:a0:15:a1:
                    8f:0c:02:e7:b9:b7:08:49:8b:4a:55:7a:8b:e5:68:
                    2c:c6:df:dd:31:df:9d:91:ba:d8:b1:cd:76:50:25:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A9:A0:30:9B:E4:D2:3A:31:8E:DA:A5:D4:9F:8F:95:24:ED:A5:CB
            X509v3 Authority Key Identifier:
                keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215828

    Signature Algorithm: sha256WithRSAEncryption
         e1:0b:4c:28:fb:b6:d9:04:48:e1:20:1f:04:52:53:e3:c2:bb:
         9b:7b:84:5d:69:18:fa:6a:b7:31:29:cb:de:b3:6f:b4:d8:35:
         58:21:36:c7:34:30:2f:21:d4:5a:6f:9f:8b:53:5a:8d:7d:6f:
         af:8f:b1:8d:42:19:61:02:5b:1b:8f:59:20:4a:a3:1d:b4:45:
         59:12:a7:85:90:fe:97:8e:f4:a7:d3:1a:6b:10:25:f1:4b:0a:
         a6:85:ce:b7:f3:47:54:3f:c1:ff:6a:99:b7:9b:21:73:fc:45:
         f3:ac:1a:23:12:3a:d9:ad:bf:4f:25:ce:e4:43:71:4d:5f:8f:
         79:bc:6a:32:c7:0b:5d:25:71:1b:da:45:ec:0a:4e:88:bb:3b:
         e1:7e:58:5f:8e:63:ba:a8:7e:10:cf:1e:92:01:e0:3a:62:f8:
         86:4d:2c:a2:6e:26:2b:1d:5c:2f:18:78:f1:a2:ca:69:fc:cb:
         91:05:10:b4:4e:ba:14:62:3c:f4:22:90:58:b4:d3:1d:8b:28:
         65:3f:a2:3a:23:63:43:80:4d:98:b6:3d:9f:15:a7:91:f1:7c:
         5b:5f:14:e0:54:8f:43:bc:b1:f9:89:29:d5:b5:65:53:dd:2f:
         45:b9:99:df:73:78:30:10:da:1b:24:d7:af:51:d8:ba:a4:91:
         86:05:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:09:03 2024 by rpki-client on console-fra.rpki-client.org