Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/AS215131.asa
File:                     AS215131.asa (raw, json)
Hash identifier:          VwG58DMBVe0JSSLsDooqpyl0bL54hGOcSKx6jhmgS1I=
Subject key identifier:   AB:7D:F1:BD:71:D0:C4:0C:D9:C2:42:DE:60:F5:84:12:12:65:45:FC
Certificate issuer:       /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial:       287C4034A9D19C8790C9E14C08EE9EFED665985E
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/AS215131.asa
Signing time:             Mon 27 May 2024 17:06:29 +0000
ASPA not before:          Mon 27 May 2024 17:01:29 +0000
ASPA not after:           Mon 26 May 2025 17:06:29 +0000
Customer ASID:            215131
Providers:                AS: 8283
                          AS: 34927

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7c:40:34:a9:d1:9c:87:90:c9:e1:4c:08:ee:9e:fe:d6:65:98:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
        Validity
            Not Before: May 27 17:01:29 2024 GMT
            Not After : May 26 17:06:29 2025 GMT
        Subject: CN=AB7DF1BD71D0C40CD9C242DE60F58412126545FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:74:02:1b:a5:6c:e7:3e:9a:c2:29:01:b7:59:
                    b6:0d:03:54:9c:e8:fd:5c:32:0e:a7:c3:af:78:c2:
                    61:a0:fb:2e:0c:6a:56:29:86:79:19:ce:ff:f7:a0:
                    98:7c:9f:2d:28:05:57:c6:7b:b9:6a:1e:9e:14:84:
                    73:c0:66:32:66:97:4a:8c:ef:83:7c:f0:af:cc:2f:
                    51:e6:a6:f8:4a:14:60:47:49:81:5d:dd:d4:2b:01:
                    06:48:35:0f:b7:4f:85:48:92:a2:4b:97:06:72:27:
                    6c:3b:9b:5b:0a:66:77:5f:d7:2e:82:3d:73:9a:5a:
                    ec:62:39:62:19:48:72:b5:b8:9f:e0:97:b4:90:55:
                    d3:99:76:70:21:75:66:40:d5:85:71:8d:49:dd:62:
                    31:3f:3a:78:62:57:f2:32:91:ad:f6:86:4c:cb:ed:
                    f2:58:f1:90:de:1d:fc:b4:25:43:63:a1:2c:2e:3b:
                    a4:7a:3f:41:96:91:72:55:3e:fc:b8:65:a6:02:a3:
                    16:0f:cd:d1:b6:bb:62:f3:ae:f1:3b:a3:0a:c7:aa:
                    66:d0:bb:a1:b9:80:0a:83:ca:e3:85:0f:e9:b6:2e:
                    18:5a:bb:64:0e:54:ae:d8:1c:6b:eb:01:7b:8c:3a:
                    4b:cc:8e:fe:d0:c3:77:b6:a9:85:dd:d2:c1:2f:85:
                    ae:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7D:F1:BD:71:D0:C4:0C:D9:C2:42:DE:60:F5:84:12:12:65:45:FC
            X509v3 Authority Key Identifier:
                keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/AS215131.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215131

    Signature Algorithm: sha256WithRSAEncryption
         b9:24:99:43:90:a5:92:3b:bf:05:11:76:c1:82:26:59:8c:5e:
         74:90:06:57:7c:c9:cf:58:de:98:3a:4a:77:bd:92:46:88:a9:
         c0:d2:71:70:1f:5d:16:b4:2e:48:d7:33:aa:98:22:a8:a1:5f:
         dd:fa:24:81:d3:6c:23:79:25:6e:58:26:e3:e6:c7:41:b8:45:
         22:e8:04:d9:bd:36:d0:fc:fb:1b:22:41:5d:b9:4c:fc:33:8e:
         3f:1f:b6:4c:7a:cd:2d:3a:82:0a:d6:87:69:63:da:4f:26:b8:
         6e:14:c3:1f:45:b0:42:8b:3b:35:2d:ca:c5:04:08:7f:e1:86:
         71:38:98:5e:5f:9f:c2:d7:cb:6c:73:e6:4e:29:c9:1d:69:29:
         c6:28:f3:5d:a0:a4:85:73:ed:ad:b1:86:00:f3:dd:36:a5:f5:
         03:69:12:b8:3f:67:8f:27:ff:fa:7d:0b:6c:50:40:cb:5b:8e:
         f5:67:83:72:af:ad:d3:64:1e:62:62:70:5d:43:d7:d8:0b:9a:
         39:50:12:2c:d2:73:57:ea:da:27:ed:d1:52:68:bf:97:ea:05:
         68:a3:9e:80:9c:83:48:36:09:45:2e:c7:82:d6:4d:34:c6:5b:
         83:e8:50:82:45:bc:5c:0f:6f:51:ed:33:5d:47:ff:2d:15:c2:
         c2:a6:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:25 2024 by rpki-client on console-fra.rpki-client.org