Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa
File:                     AS215849.asa (raw, json)
Hash identifier:          9UZCyM4teIzSn1Im2N0q8YebSfMGXCtXc/dqDr5kuPE=
Subject key identifier:   BD:AC:8C:4E:FF:26:C4:86:7B:2B:9F:10:D4:20:54:B4:7E:C3:6C:B3
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       3C0BFC9638998B61148320E4B41E9B6AB93F9613
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa
Signing time:             Fri 21 Jun 2024 08:12:43 +0000
ASPA not before:          Fri 21 Jun 2024 08:07:43 +0000
ASPA not after:           Fri 20 Jun 2025 08:12:43 +0000
Customer ASID:            215849
Providers:                AS: 215828

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0b:fc:96:38:99:8b:61:14:83:20:e4:b4:1e:9b:6a:b9:3f:96:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Jun 21 08:07:43 2024 GMT
            Not After : Jun 20 08:12:43 2025 GMT
        Subject: CN=BDAC8C4EFF26C4867B2B9F10D42054B47EC36CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:d0:ca:38:b2:a3:2c:e5:d7:56:92:e9:12:
                    6a:35:24:f8:09:df:95:3c:71:88:cd:34:01:72:df:
                    76:b7:25:5d:df:94:7c:6c:33:de:ba:6d:c1:d0:39:
                    e5:63:5e:7c:bb:35:96:1d:e7:18:3e:36:b3:d7:b7:
                    9b:42:99:cb:0f:e2:c8:20:26:1e:35:0d:1f:11:db:
                    2c:8a:a5:16:f3:40:9e:36:a0:c5:4c:a5:1d:7b:85:
                    46:a3:e3:25:a2:57:63:40:98:23:9a:ef:02:23:72:
                    77:60:e8:12:1d:01:98:1f:43:0b:12:07:34:2d:be:
                    de:b9:f9:52:ac:ef:b6:9c:8d:23:da:74:16:f5:a3:
                    9d:e2:1a:27:f3:71:dc:97:6e:98:7c:b8:bf:a4:33:
                    02:08:d8:cc:cb:fc:dc:d4:3c:1f:39:39:76:eb:10:
                    4c:f8:61:e6:ff:26:3f:66:5e:14:ba:77:ed:b5:65:
                    70:1d:fe:91:4c:73:4e:3c:07:e2:ee:fb:48:61:03:
                    5d:54:18:3d:8a:8b:99:b1:30:7b:93:e5:ab:c4:55:
                    fc:b6:88:3b:af:39:6e:7f:4a:56:18:02:9d:38:79:
                    61:81:ee:4b:0a:c5:34:c5:e9:cd:88:16:34:31:de:
                    c4:d7:fb:1a:88:1d:1b:5e:f8:c5:a6:da:0e:10:5c:
                    fd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AC:8C:4E:FF:26:C4:86:7B:2B:9F:10:D4:20:54:B4:7E:C3:6C:B3
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215849

    Signature Algorithm: sha256WithRSAEncryption
         4f:e3:64:ac:6e:8f:ef:43:b1:54:33:90:43:50:e0:ef:71:67:
         33:e0:1d:cd:5d:71:4f:c1:43:b5:09:ff:24:23:05:66:c7:c9:
         91:6c:47:ae:95:57:98:6e:b0:7d:f4:a8:96:5a:b2:72:48:4e:
         80:d6:75:d9:11:84:df:3b:a3:16:99:49:fc:7e:76:4a:d9:3e:
         50:f6:94:58:a3:e7:0f:f1:e0:bf:cb:c6:56:3e:5f:fb:a7:02:
         ed:5c:c7:b9:14:b1:ea:79:c0:78:9a:fb:65:c8:3d:f1:78:a2:
         dc:e1:39:40:64:a8:e0:41:01:46:00:01:06:1a:1d:ef:1b:e3:
         c2:be:1f:0a:9a:bc:f4:e1:3e:ea:68:dc:ff:40:56:05:01:97:
         8a:1e:74:ba:7f:fb:10:a8:4e:ce:4e:23:cb:e7:45:a5:90:5a:
         f1:bc:cc:e3:4e:c5:a2:8f:2f:ea:b3:63:03:0f:f4:72:0a:84:
         75:2e:74:ea:6e:63:bb:05:99:57:0b:a2:68:a9:4d:33:28:67:
         30:53:b5:a2:49:6b:47:fa:aa:f8:21:7f:22:56:fb:ad:36:88:
         da:4a:25:90:57:b2:e8:c7:ec:81:cd:d9:66:ea:87:0f:52:39:
         5d:e6:49:dc:d6:ba:80:9d:a3:d1:44:ed:2b:5b:46:fb:1b:5d:
         0c:6a:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:59 2024 by rpki-client on console-fra.rpki-client.org