Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/AS215131.asa
File:                     AS215131.asa (raw, json)
Hash identifier:          /Ig9Y9j+GErTcuTTgHxL2iaOhUZXWZH+p25xdO/uCfk=
Subject key identifier:   1C:05:75:05:2B:49:0E:48:FC:CD:AE:CF:5B:50:2B:09:2D:86:8B:83
Certificate issuer:       /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial:       75096A58A7A8046E2D9873EE755B6BDF42F5DFA4
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/AS215131.asa
Signing time:             Fri 25 Jul 2025 19:48:37 +0000
ASPA not before:          Fri 25 Jul 2025 19:43:37 +0000
ASPA not after:           Fri 24 Jul 2026 19:48:37 +0000
Customer ASID:            215131
Providers:                AS: 8283
                          AS: 34927
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 Aug 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:09:6a:58:a7:a8:04:6e:2d:98:73:ee:75:5b:6b:df:42:f5:df:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
        Validity
            Not Before: Jul 25 19:43:37 2025 GMT
            Not After : Jul 24 19:48:37 2026 GMT
        Subject: CN=1C0575052B490E48FCCDAECF5B502B092D868B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b7:69:ee:61:d1:cc:f5:28:4f:21:b2:15:58:
                    4f:b7:cf:bd:6f:9b:b6:1f:17:43:d7:c4:d8:eb:c1:
                    45:86:e8:b5:5d:fe:63:2a:6b:0c:52:db:ff:15:4c:
                    af:03:d0:71:4e:90:58:78:62:f9:fd:c9:e5:bd:a7:
                    5f:28:d6:14:e1:0d:7a:35:94:1e:12:b2:7e:de:83:
                    cc:c1:d5:59:22:98:c0:fa:34:ce:5f:fb:30:76:1a:
                    9b:72:77:3d:fc:39:ef:46:e2:9b:10:72:d8:47:32:
                    01:5a:26:b6:99:ab:ea:10:ed:8a:f6:4f:b3:55:7c:
                    d8:dc:a3:2d:e0:be:e3:aa:7a:ef:4a:81:c9:6d:42:
                    98:0f:61:29:ec:4e:9b:be:2e:59:04:89:34:0f:8f:
                    35:cd:92:99:94:26:13:7f:5f:ca:4f:2d:4e:c0:6e:
                    49:4e:41:ee:76:71:ad:39:7e:31:43:97:91:dc:4a:
                    43:da:71:bc:af:59:94:32:31:91:be:54:dd:6c:f9:
                    ef:6a:c3:cf:d7:70:fd:87:fa:64:f0:e7:0b:5d:a4:
                    1d:68:3c:ee:a7:74:d6:85:d4:e9:20:2a:39:af:32:
                    eb:21:f1:19:ba:03:fc:1b:86:85:48:b5:8f:1c:76:
                    74:91:59:de:39:ea:0f:32:49:47:a5:b5:aa:13:13:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:05:75:05:2B:49:0E:48:FC:CD:AE:CF:5B:50:2B:09:2D:86:8B:83
            X509v3 Authority Key Identifier:
                keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/AS215131.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215131

    Signature Algorithm: sha256WithRSAEncryption
         13:1f:8a:e8:58:61:fb:7b:8f:9c:52:1c:26:c5:25:80:89:11:
         d1:3d:cf:db:e3:cd:9d:cd:80:e9:c5:e7:97:20:78:c3:45:cf:
         01:64:de:66:67:fa:4b:4f:21:ed:5e:77:33:e8:d7:5f:5a:dd:
         de:df:fa:cd:bb:5a:bd:f0:98:15:81:c7:de:21:67:91:d7:d9:
         16:59:6f:93:7d:7f:ef:30:65:33:23:53:76:3a:4d:1e:a9:00:
         19:23:1c:ef:14:33:14:33:19:c5:a2:a4:c4:af:9a:9b:3a:79:
         44:2d:07:4d:d1:08:0e:7d:89:8a:01:28:2f:21:75:4e:ee:54:
         bb:af:5f:1d:74:78:1d:a0:2e:1b:d0:3e:85:b4:4a:7b:6f:70:
         d7:82:47:4e:db:96:76:b6:9b:50:94:87:6d:92:ce:3c:0a:9b:
         e3:19:77:f0:c0:b6:ca:cf:b9:0e:b2:32:e9:0b:df:04:c8:3e:
         bc:2a:cb:de:02:88:be:be:bb:45:eb:8d:34:da:4d:19:22:16:
         d2:52:ac:dd:09:a4:b4:b3:bd:91:fa:fa:e3:6e:f0:1f:21:19:
         f5:4e:c7:37:6d:10:3c:2c:15:69:dd:d7:39:94:1a:88:e4:c8:
         8c:f3:f0:e6:bb:b3:82:d4:e9:b4:62:ca:80:53:2c:75:b3:dd:
         97:49:b6:c9
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUdQlqWKeoBG4tmHPudVtr30L136QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTRiYTk4ZmMzZWJlODA2Yzc4MmU1ODlmYWY1Mjk1YzMy
NTkyMTJhODAeFw0yNTA3MjUxOTQzMzdaFw0yNjA3MjQxOTQ4MzdaMDMxMTAvBgNV
BAMTKDFDMDU3NTA1MkI0OTBFNDhGQ0NEQUVDRjVCNTAyQjA5MkQ4NjhCODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWt2nuYdHM9ShPIbIVWE+3z71v
m7YfF0PXxNjrwUWG6LVd/mMqawxS2/8VTK8D0HFOkFh4Yvn9yeW9p18o1hThDXo1
lB4Ssn7eg8zB1VkimMD6NM5f+zB2Gptydz38Oe9G4psQcthHMgFaJraZq+oQ7Yr2
T7NVfNjcoy3gvuOqeu9KgcltQpgPYSnsTpu+LlkEiTQPjzXNkpmUJhN/X8pPLU7A
bklOQe52ca05fjFDl5HcSkPacbyvWZQyMZG+VN1s+e9qw8/XcP2H+mTw5wtdpB1o
PO6ndNaF1OkgKjmvMush8Rm6A/wbhoVItY8cdnSRWd456g8ySUeltaoTE/znAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUHAV1BStJDkj8za7PW1ArCS2Gi4MwHwYDVR0j
BBgwFoAU5LqY/D6+gGx4Llifr1KVwyWSEqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjY0MjE5MDgtNzVkYy00MzBiLThmYjktNzQ4Yzc1YmIw
MmMyLzAvRTRCQTk4RkMzRUJFODA2Qzc4MkU1ODlGQUY1Mjk1QzMyNTkyMTJBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVMcVlfRDYtZ0d4NExsaWZyMUtWd3lX
U0VxZy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2I2NDIxOTA4LTc1ZGMt
NDMwYi04ZmI5LTc0OGM3NWJiMDJjMi8wL0FTMjE1MTMxLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNIWzANBgkq
hkiG9w0BAQsFAAOCAQEAEx+K6Fhh+3uPnFIcJsUlgIkR0T3P2+PNnc2A6cXnlyB4
w0XPAWTeZmf6S08h7V53M+jXX1rd3t/6zbtavfCYFYHH3iFnkdfZFllvk31/7zBl
MyNTdjpNHqkAGSMc7xQzFDMZxaKkxK+amzp5RC0HTdEIDn2JigEoLyF1Tu5Uu69f
HXR4HaAuG9A+hbRKe29w14JHTtuWdrabUJSHbZLOPAqb4xl38MC2ys+5DrIy6Qvf
BMg+vCrL3gKIvr67ReuNNNpNGSIW0lKs3QmktLO9kfr6427wHyEZ9U7HN20QPCwV
ad3XOZQaiOTIjPPw5ruzgtTptGLKgFMsdbPdl0m2yQ==
-----END CERTIFICATE-----
Generated at Thu Jul 31 06:47:03 2025 by rpki-client