Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/AS213915.asa
File:                     AS213915.asa (raw, json)
Hash identifier:          JhCbGVFzlqO3KC//0XOSCTOLUCS41YpMnqWiaYg/Zc8=
Subject key identifier:   A5:9D:6B:B0:EA:F9:2A:D4:74:70:BE:B9:4C:17:57:87:5B:4D:59:12
Certificate issuer:       /CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Certificate serial:       6B5B8894BBC6AF518EED25112CF4C3524BB79BF3
Authority key identifier: 4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/AS213915.asa
Signing time:             Tue 03 Dec 2024 17:14:35 +0000
ASPA not before:          Tue 03 Dec 2024 17:09:35 +0000
ASPA not after:           Tue 02 Dec 2025 17:14:35 +0000
Customer ASID:            213915
Providers:                AS: 215147
                          AS: 215828

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Dec 2024 23:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5b:88:94:bb:c6:af:51:8e:ed:25:11:2c:f4:c3:52:4b:b7:9b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
        Validity
            Not Before: Dec  3 17:09:35 2024 GMT
            Not After : Dec  2 17:14:35 2025 GMT
        Subject: CN=A59D6BB0EAF92AD47470BEB94C1757875B4D5912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:79:93:01:ee:82:9d:4b:4b:f6:9d:84:36:
                    dd:cf:37:6d:bb:df:e0:f8:50:03:82:5f:04:e4:e0:
                    c3:bd:d7:ff:12:2d:0c:8f:fd:39:aa:a1:30:7d:c2:
                    c1:ef:1d:42:3c:ee:c0:29:fe:ee:14:a9:b4:09:13:
                    51:d7:c3:99:87:fe:a2:d8:b2:72:d8:07:37:da:97:
                    d9:1e:ee:cb:bb:7f:a6:a1:c6:a5:04:4b:20:5d:95:
                    48:ae:95:84:f6:42:a0:4d:ec:7b:e8:6a:63:53:5d:
                    0e:fb:94:10:a6:1c:4b:3a:d8:d4:d7:f2:4c:f3:96:
                    ae:1c:3e:b2:34:d3:86:4c:14:5f:b7:43:92:8f:61:
                    cb:85:ec:e4:52:c0:1c:de:96:ba:e7:d4:95:1e:42:
                    c5:44:61:9a:80:01:60:04:0f:f2:9b:86:ef:72:df:
                    f1:9e:60:84:c4:90:61:2e:a1:fd:47:fa:7d:56:be:
                    38:3e:9b:16:22:b6:6e:5c:1f:f5:a4:fd:cd:32:34:
                    84:a0:26:76:90:34:94:f9:b5:51:ae:97:a1:88:0a:
                    7e:ae:51:5b:8b:7e:c5:45:33:3f:fc:26:06:cf:13:
                    72:2b:28:b4:3d:c7:54:21:46:ca:d6:e2:bf:91:c3:
                    c0:2c:b3:17:17:81:e6:43:3d:89:fb:d4:db:c8:11:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9D:6B:B0:EA:F9:2A:D4:74:70:BE:B9:4C:17:57:87:5B:4D:59:12
            X509v3 Authority Key Identifier:
                keyid:4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/AS213915.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213915

    Signature Algorithm: sha256WithRSAEncryption
         5b:5f:e5:a8:08:31:15:c7:b2:ba:b9:fd:c3:38:95:6f:19:4d:
         81:25:ac:7d:5e:8c:5f:28:c6:dd:03:7f:a6:cb:89:7d:cd:ea:
         61:5c:0c:a5:02:a9:a2:15:3c:49:9c:7c:93:91:40:d8:65:97:
         0a:dd:c3:1f:23:09:30:31:ff:2f:db:e8:35:e8:86:70:6b:ea:
         38:66:04:49:8f:66:d8:b0:92:11:75:4d:9a:73:81:bc:6c:77:
         24:3f:f4:b2:22:7b:22:2c:f5:a6:3b:09:71:5b:ab:3c:0b:72:
         60:71:d2:14:db:74:ce:e8:d0:0e:c2:67:08:4d:be:ae:fa:af:
         9d:13:0c:42:ec:1a:ec:28:f1:91:7b:f8:d8:02:7d:eb:98:b5:
         4c:81:b6:1f:df:5b:78:74:84:ee:db:eb:f0:2d:c9:ee:08:89:
         4b:ce:aa:67:e9:ae:2a:fc:e0:9e:dc:2d:cf:db:0b:39:19:da:
         65:33:b5:76:e0:2c:83:af:32:77:5a:aa:1e:b5:19:ad:c2:e9:
         51:bb:8a:cb:7d:33:17:70:5e:00:1e:73:3e:0e:7a:d3:1c:ea:
         8e:1a:4d:f7:3c:27:a5:c1:ac:08:86:37:96:ba:1a:c4:63:01:
         ac:fc:37:b9:40:e0:64:8e:96:e4:f2:d6:05:85:c8:eb:d3:06:
         0c:15:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 05:41:00 2024 by rpki-client on console-fra.rpki-client.org