Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa
File:                     AS215828.asa (raw, json)
Hash identifier:          IOI9/2ZhDFjkVZ+Xq4ifZqddUNd1iuqdK8H4meHxeQg=
Subject key identifier:   B6:56:A4:1F:81:7F:FA:8A:00:00:BB:FE:EE:F5:77:2F:27:0D:AF:40
Certificate issuer:       /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
Certificate serial:       23EBBD024CDD26F174EEDC742EE24DAF48902025
Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa
Signing time:             Fri 21 Jun 2024 18:12:04 +0000
ASPA not before:          Fri 21 Jun 2024 18:07:04 +0000
ASPA not after:           Fri 20 Jun 2025 18:12:04 +0000
Customer ASID:            215828
Providers:                AS: 6939
                          AS: 8772
                          AS: 29390
                          AS: 29632
                          AS: 34465
                          AS: 34927
                          AS: 39249
                          AS: 41051
                          AS: 48752
                          AS: 50917
                          AS: 51019
                          AS: 58057
                          AS: 197071
                          AS: 199524
                          AS: 203686
                          AS: 207656
                          AS: 209533
                          AS: 216324
                          AS: 216360
                          AS: 393577

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Jul 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:eb:bd:02:4c:dd:26:f1:74:ee:dc:74:2e:e2:4d:af:48:90:20:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1
        Validity
            Not Before: Jun 21 18:07:04 2024 GMT
            Not After : Jun 20 18:12:04 2025 GMT
        Subject: CN=B656A41F817FFA8A0000BBFEEEF5772F270DAF40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:3a:10:f8:19:01:27:58:6a:7b:a7:f0:54:
                    7d:1a:bf:fd:f2:87:3a:a5:35:14:4a:ee:55:f6:cd:
                    ea:fa:77:c8:9f:c4:41:d8:27:7d:b4:69:0c:40:56:
                    7e:96:21:16:2c:10:c1:2e:0c:95:e6:5e:a4:ae:58:
                    ff:42:16:25:65:23:b6:85:e6:ed:c2:e8:45:d4:54:
                    8b:2f:25:68:1e:5c:7b:eb:59:78:6c:28:15:7e:57:
                    9d:87:0d:32:e7:33:59:90:b1:c1:bd:8a:d6:fd:fb:
                    74:16:e6:be:19:9c:e3:1b:f3:ea:d4:fc:56:41:eb:
                    40:b4:03:2c:c1:83:fd:b9:17:83:af:42:a2:f9:9f:
                    cd:91:d9:65:e6:c3:6c:75:94:13:26:0a:11:68:37:
                    8d:8f:45:07:43:43:9d:b8:eb:e9:57:e4:f3:bf:62:
                    c4:66:07:88:43:9e:d7:fe:f0:24:e1:72:8f:84:95:
                    16:71:be:23:09:20:64:22:71:12:16:e6:01:c6:c9:
                    87:83:a2:dc:d6:b8:a1:79:5e:1c:67:b6:fe:cf:55:
                    78:7f:9c:ea:08:8b:18:c7:0e:55:35:f2:b0:91:e0:
                    d3:54:4b:e8:cb:de:0b:5e:f0:e0:49:cc:12:e3:17:
                    46:e8:5e:3c:13:ff:8e:94:c9:03:a0:e2:0d:ee:ec:
                    6c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:56:A4:1F:81:7F:FA:8A:00:00:BB:FE:EE:F5:77:2F:27:0D:AF:40
            X509v3 Authority Key Identifier:
                keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/AS215828.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215828

    Signature Algorithm: sha256WithRSAEncryption
         89:05:c4:06:ba:9e:4e:de:8d:f9:70:1a:3b:46:fa:77:37:2b:
         e0:18:cd:cd:a1:72:d9:94:1d:36:06:52:46:5f:1b:27:71:dd:
         a2:72:f8:b1:1e:cc:b3:42:47:e8:0a:c5:30:f8:0b:99:2c:b3:
         25:3f:7a:47:4f:b1:d4:b3:6a:99:25:fe:3f:00:56:d4:10:01:
         52:01:c6:fb:ac:b0:76:74:69:a9:1d:5c:fc:d2:f7:d8:b4:36:
         ab:9f:b0:fd:b1:f1:d6:2b:72:7d:6e:e1:25:10:8b:79:60:89:
         71:39:9e:a9:20:57:21:98:63:ac:53:23:7a:b3:99:23:0f:10:
         dc:c3:1a:ae:b5:88:01:89:32:ac:9c:b2:5e:53:b3:60:40:0b:
         46:85:46:7e:b1:d6:65:1b:fe:83:55:04:00:49:39:6c:87:09:
         a0:2b:49:3f:8f:3d:c8:77:c6:36:08:c5:18:15:ca:03:13:47:
         c8:f3:c4:a2:d7:e0:30:d1:9c:8d:f6:16:a7:b0:3c:83:e9:67:
         7b:fb:27:36:47:df:9f:db:f1:5a:c4:15:27:e7:ad:5e:b4:ec:
         b0:74:f9:2a:35:20:73:b7:37:f8:9c:85:2d:9d:bc:3e:d9:5e:
         73:01:cd:90:37:ae:3d:c0:15:03:44:29:3f:d2:af:5c:9f:e8:
         2a:d5:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 23:25:45 2024 by rpki-client on console-ams.rpki-client.org