Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
File:                     AS215248.asa (raw, json)
Hash identifier:          nrWnsup/MJIC3SMKp1zza61PlhYs/6Ueoc+foma4Qbc=
Subject key identifier:   E8:8F:85:4A:13:63:72:A1:4E:E8:12:CE:97:C0:4F:8E:EA:57:54:93
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       6CE52D89313AE76972784B8D550721E0D4AECE03
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
Signing time:             Sat 23 Aug 2025 23:02:58 +0000
ASPA not before:          Sat 23 Aug 2025 22:57:58 +0000
ASPA not after:           Sat 22 Aug 2026 23:02:58 +0000
Customer ASID:            215248
Providers:                AS: 924
                          AS: 5405
                          AS: 6204
                          AS: 8283
                          AS: 34872
                          AS: 34927
                          AS: 37739
                          AS: 41051
                          AS: 42093
                          AS: 47272
                          AS: 50263
                          AS: 50917
                          AS: 58057
                          AS: 61049
                          AS: 64289
                          AS: 200132
                          AS: 208210
                          AS: 215664
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 15:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e5:2d:89:31:3a:e7:69:72:78:4b:8d:55:07:21:e0:d4:ae:ce:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Aug 23 22:57:58 2025 GMT
            Not After : Aug 22 23:02:58 2026 GMT
        Subject: CN=E88F854A136372A14EE812CE97C04F8EEA575493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:98:45:54:ce:76:b8:8f:2a:64:85:47:36:
                    75:2c:f4:40:10:2c:18:6f:d0:e7:ea:e3:3c:e7:54:
                    51:9a:40:e5:b0:b9:08:af:1f:55:05:8b:00:3d:18:
                    32:7d:69:48:8f:4e:3d:e5:5b:a2:e7:a8:02:35:72:
                    a6:e5:e2:be:07:00:58:3a:31:88:4b:e1:0b:ca:9a:
                    30:4d:90:f9:07:2e:c5:d2:4a:ab:c4:e8:e1:1b:aa:
                    f2:6c:f3:13:2e:62:61:bb:83:f7:33:78:cb:f7:13:
                    54:c9:11:63:cb:0f:4c:3f:1e:46:a2:8d:94:9a:6f:
                    f8:82:df:e3:91:4f:c8:25:5a:76:e7:53:21:b9:db:
                    c8:e8:3a:3a:4e:4b:80:98:74:21:36:b6:b0:b7:61:
                    ae:63:7a:3d:9c:e9:f2:ed:79:3c:87:d9:cd:0f:98:
                    4d:a8:7b:c2:b6:6f:97:50:10:fb:0d:2f:35:6b:fd:
                    63:c3:f7:98:02:79:39:bf:87:75:19:bc:d5:25:64:
                    96:bc:24:d6:c8:9f:44:f3:6a:1e:04:24:5d:36:b5:
                    ea:1c:d3:21:bd:85:a4:d7:ef:7c:ea:57:3f:59:0c:
                    55:83:c0:39:a6:d3:05:3c:f0:60:7d:7d:c7:7e:fc:
                    77:bb:6c:3f:66:e8:a4:a2:19:59:35:9b:13:d9:49:
                    26:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8F:85:4A:13:63:72:A1:4E:E8:12:CE:97:C0:4F:8E:EA:57:54:93
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215248

    Signature Algorithm: sha256WithRSAEncryption
         bd:2b:7a:ef:ee:36:50:1f:f6:05:77:be:78:b8:d6:bb:ac:ce:
         51:10:2d:3d:bd:88:43:83:9f:8f:cf:1f:0b:49:8d:a0:b7:a6:
         bc:5c:4a:0f:51:12:45:ae:d3:a8:f0:cb:f0:f3:b6:e4:5a:55:
         df:3c:d7:d5:8f:68:42:6b:22:e5:1d:00:79:07:86:fa:c5:69:
         c6:7b:1a:75:6e:2e:d2:db:fb:c6:52:a1:fa:9a:54:93:2e:40:
         5a:90:ad:63:9f:3e:b5:e6:2d:7b:57:4c:8f:73:0e:5e:11:5e:
         5e:a2:62:6f:77:d8:02:ea:77:67:e7:ec:e0:99:da:7f:e8:20:
         73:82:5c:25:c7:f2:a3:1a:4f:e3:2a:d6:13:20:b5:94:1f:04:
         be:8f:ba:c1:8d:33:6a:5d:13:de:17:da:fa:9e:f6:9b:79:86:
         ed:ef:73:f6:be:99:19:28:43:aa:eb:80:04:fc:d9:eb:2d:ea:
         2a:4c:7c:32:4a:55:c9:4f:d1:75:22:b7:59:d9:20:1f:04:5a:
         cf:02:82:fd:6d:c0:4f:f2:1a:66:65:45:5a:39:21:5e:f0:ba:
         ae:48:32:bf:7f:c5:63:3c:b8:27:f1:01:50:e4:b5:c4:6f:3d:
         bb:49:bf:e1:fe:2f:2c:ce:7e:a7:ec:54:c6:42:a8:6e:38:78:
         64:62:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----