Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/AS215131.asa
File:                     AS215131.asa (raw, json)
Hash identifier:          fdxXAZ8vlKpf5EccUmAW+hZmsZidklCajd1vBNkiavk=
Subject key identifier:   E1:8B:A8:C1:D0:21:79:D8:79:E4:6A:BF:8F:AE:AA:9D:76:88:00:F5
Certificate issuer:       /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial:       5EC2C54C2660A56A9BB6CB0EBA3C1634CFE662E8
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/AS215131.asa
Signing time:             Mon 25 Nov 2024 12:49:09 +0000
ASPA not before:          Mon 25 Nov 2024 12:44:09 +0000
ASPA not after:           Mon 24 Nov 2025 12:49:09 +0000
Customer ASID:            215131
Providers:                AS: 8283
                          AS: 34927
                          AS: 212477

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Dec 2024 22:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c2:c5:4c:26:60:a5:6a:9b:b6:cb:0e:ba:3c:16:34:cf:e6:62:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
        Validity
            Not Before: Nov 25 12:44:09 2024 GMT
            Not After : Nov 24 12:49:09 2025 GMT
        Subject: CN=E18BA8C1D02179D879E46ABF8FAEAA9D768800F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:93:10:8a:f1:58:8c:2d:a0:c7:09:b1:a6:66:
                    a1:19:b6:83:11:a6:fc:34:8b:52:4b:50:83:63:49:
                    24:55:1b:21:93:5b:db:f9:9c:4d:17:a4:7b:83:73:
                    b1:45:bc:a3:d3:c8:f4:66:d2:73:ad:a4:7b:e8:f2:
                    95:bf:34:03:f7:e9:55:6b:71:85:aa:0a:53:b3:fa:
                    a9:59:77:8b:39:b6:2d:e4:7b:b3:3a:d6:4f:9c:65:
                    94:85:b9:75:4d:b0:da:5a:e5:c7:e9:cb:d3:4f:3f:
                    7f:bb:e7:b7:28:aa:b4:57:a7:95:57:a5:8c:c5:be:
                    8e:c0:c3:d1:27:4a:b7:4c:a3:b4:a0:21:b1:da:fd:
                    26:5a:34:cb:ad:81:a8:d6:9d:f9:4b:90:31:8f:f7:
                    9e:3c:bd:83:0a:77:16:a8:fe:5f:aa:fa:f7:69:f2:
                    13:6c:5d:fa:20:d4:c8:ac:ca:c1:0e:c8:be:45:0d:
                    30:92:1d:d6:d6:c4:70:d3:89:fb:c6:cb:ea:9d:19:
                    14:ad:26:ce:0a:80:56:b2:a1:25:34:d8:5a:f6:9a:
                    df:bf:5b:e9:90:13:bc:87:f7:7f:65:fe:de:f3:cc:
                    a5:c4:46:03:4e:85:26:7c:ef:6e:53:95:bc:73:f2:
                    a9:3a:75:52:64:94:08:2f:aa:22:b0:8d:a2:57:d3:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8B:A8:C1:D0:21:79:D8:79:E4:6A:BF:8F:AE:AA:9D:76:88:00:F5
            X509v3 Authority Key Identifier:
                keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/AS215131.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215131

    Signature Algorithm: sha256WithRSAEncryption
         85:0e:91:31:06:39:be:72:2d:f5:ec:ea:62:8a:5f:f1:34:94:
         19:b7:33:a5:3d:d0:0c:f6:d6:fe:dd:98:aa:0d:22:8a:a2:23:
         d3:9c:11:22:7e:bd:ee:52:5d:b6:d3:ac:03:7f:33:2a:cf:11:
         00:bf:8a:53:fd:34:35:01:ef:5d:57:55:f2:3b:59:27:a9:b7:
         54:5b:99:92:00:0a:3a:16:17:9f:a9:33:77:2f:6a:5c:67:2c:
         82:bb:3c:61:b1:2e:2f:22:92:a4:33:d1:29:24:33:cf:b9:ff:
         d9:25:06:05:5f:04:b9:02:0a:b2:e2:86:fe:21:0e:d2:4f:50:
         27:ed:99:85:4d:a2:e5:8f:66:49:fc:ae:f6:aa:67:42:54:ab:
         e8:a4:73:54:23:de:9a:b7:54:4e:0e:09:b3:84:5e:c3:33:41:
         5b:a1:b5:a4:fc:2a:ff:fc:0e:36:8b:86:70:71:9c:e5:35:13:
         73:f9:e8:3f:99:b7:75:4e:49:6b:7f:b3:25:79:41:f5:0d:32:
         9e:2e:67:97:64:c3:3d:de:d7:19:70:80:e1:cf:10:aa:9d:a9:
         05:0b:20:36:37:d4:1a:db:c4:dc:f3:6d:40:10:8c:63:12:f2:
         09:9c:73:19:e9:1b:87:c4:a6:22:4c:7f:97:ae:a9:00:d8:ee:
         79:d7:e7:43
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUXsLFTCZgpWqbtssOujwWNM/mYugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTRiYTk4ZmMzZWJlODA2Yzc4MmU1ODlmYWY1Mjk1YzMy
NTkyMTJhODAeFw0yNDExMjUxMjQ0MDlaFw0yNTExMjQxMjQ5MDlaMDMxMTAvBgNV
BAMTKEUxOEJBOEMxRDAyMTc5RDg3OUU0NkFCRjhGQUVBQTlENzY4ODAwRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkxCK8ViMLaDHCbGmZqEZtoMR
pvw0i1JLUINjSSRVGyGTW9v5nE0XpHuDc7FFvKPTyPRm0nOtpHvo8pW/NAP36VVr
cYWqClOz+qlZd4s5ti3ke7M61k+cZZSFuXVNsNpa5cfpy9NPP3+757coqrRXp5VX
pYzFvo7Aw9EnSrdMo7SgIbHa/SZaNMutgajWnflLkDGP9548vYMKdxao/l+q+vdp
8hNsXfog1MisysEOyL5FDTCSHdbWxHDTifvGy+qdGRStJs4KgFayoSU02Fr2mt+/
W+mQE7yH939l/t7zzKXERgNOhSZ8725Tlbxz8qk6dVJklAgvqiKwjaJX0yufAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQU4YuowdAhedh55Gq/j66qnXaIAPUwHwYDVR0j
BBgwFoAU5LqY/D6+gGx4Llifr1KVwyWSEqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjY0MjE5MDgtNzVkYy00MzBiLThmYjktNzQ4Yzc1YmIw
MmMyLzAvRTRCQTk4RkMzRUJFODA2Qzc4MkU1ODlGQUY1Mjk1QzMyNTkyMTJBOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVMcVlfRDYtZ0d4NExsaWZyMUtWd3lX
U0VxZy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2I2NDIxOTA4LTc1ZGMt
NDMwYi04ZmI5LTc0OGM3NWJiMDJjMi8wL0FTMjE1MTMxLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNIWzANBgkq
hkiG9w0BAQsFAAOCAQEAhQ6RMQY5vnIt9ezqYopf8TSUGbczpT3QDPbW/t2Yqg0i
iqIj05wRIn697lJdttOsA38zKs8RAL+KU/00NQHvXVdV8jtZJ6m3VFuZkgAKOhYX
n6kzdy9qXGcsgrs8YbEuLyKSpDPRKSQzz7n/2SUGBV8EuQIKsuKG/iEO0k9QJ+2Z
hU2i5Y9mSfyu9qpnQlSr6KRzVCPemrdUTg4Js4RewzNBW6G1pPwq//wONouGcHGc
5TUTc/noP5m3dU5Ja3+zJXlB9Q0yni5nl2TDPd7XGXCA4c8Qqp2pBQsgNjfUGtvE
3PNtQBCMYxLyCZxzGekbh8SmIkx/l66pANjuedfnQw==
-----END CERTIFICATE-----
Generated at Thu Dec 12 04:15:58 2024 by rpki-client on console-ams.rpki-client.org