Autonomous System Provider Authorization

$ rpki-client -vvf rrdp.as214749.net/repo/as214749-paw/4/AS214749.asa
File:                     AS214749.asa (raw, json)
Hash identifier:          wpekWomZYfDa84TSKNusNzBIk/1TTrrEHTUGOFIyHMs=
Subject key identifier:   5D:91:1D:04:CC:43:20:9D:9E:99:4E:92:27:7F:EE:A2:36:99:7E:50
Certificate issuer:       /CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
Certificate serial:       4CB94D9C065C35ADB73CA2BB05AA1158FFC5339C
Authority key identifier: 35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
Subject info access:      rsync://rrdp.as214749.net/repo/as214749-paw/4/AS214749.asa
Signing time:             Mon 11 May 2026 18:10:51 +0000
ASPA not before:          Mon 11 May 2026 18:05:51 +0000
ASPA not after:           Mon 10 May 2027 18:10:51 +0000
Customer ASID:            214749
Providers:                AS: 6939
                          AS: 8849
                          AS: 20473
                          AS: 34927
                          AS: 47272
                          AS: 52025
                          AS: 207841
                          AS: 209533
                          AS: 212895
                          AS: 214915
                          AS: 215638
Validation:               OK
Signature path:           rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl
                          rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 10:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b9:4d:9c:06:5c:35:ad:b7:3c:a2:bb:05:aa:11:58:ff:c5:33:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=354e0070adbd32a2e4f8d9e22db60e5dec664585
        Validity
            Not Before: May 11 18:05:51 2026 GMT
            Not After : May 10 18:10:51 2027 GMT
        Subject: CN=5D911D04CC43209D9E994E92277FEEA236997E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:bf:f4:3a:27:c2:94:79:1d:a8:15:09:3a:
                    a6:ee:bd:f6:b7:cf:9f:54:9c:a8:1a:d8:fc:2f:77:
                    64:8d:df:dc:d1:a8:b7:84:ac:3d:1d:98:2e:a4:02:
                    0b:03:24:ea:06:2b:90:4a:a6:42:f0:c4:0d:12:f6:
                    2f:94:62:bd:46:6c:03:a0:1f:1d:71:9f:33:14:fb:
                    a8:ee:f7:23:19:42:30:1e:3c:92:4d:f0:2b:68:ab:
                    8f:18:3a:2c:15:76:01:6e:b8:f3:65:2b:3c:5f:12:
                    5f:54:63:f9:b8:7f:72:72:c2:76:75:e6:c8:d6:14:
                    0a:e1:09:41:32:14:8b:a9:f6:ec:76:8f:22:15:26:
                    83:49:be:10:ed:a8:9a:c8:67:1e:65:d3:f9:39:37:
                    4d:6c:f4:1c:31:2a:58:9e:3a:0a:2f:f6:78:96:97:
                    29:ff:60:15:ab:67:5f:7c:3a:b5:b0:70:9d:15:9f:
                    65:c2:5b:01:9c:93:37:81:d5:1e:4e:c6:36:35:22:
                    5f:74:49:82:a0:ac:b7:84:b7:84:7b:38:a0:0a:f6:
                    90:ea:88:57:0b:f8:c9:54:d2:97:b0:04:67:63:fc:
                    c6:25:9b:ea:a3:f3:2c:94:d8:3e:08:59:91:17:b6:
                    cb:eb:a6:ae:b8:f4:f3:18:41:5e:d5:30:84:47:74:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:91:1D:04:CC:43:20:9D:9E:99:4E:92:27:7F:EE:A2:36:99:7E:50
            X509v3 Authority Key Identifier:
                keyid:35:4E:00:70:AD:BD:32:A2:E4:F8:D9:E2:2D:B6:0E:5D:EC:66:45:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/354E0070ADBD32A2E4F8D9E22DB60E5DEC664585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NU4AcK29MqLk-NniLbYOXexmRYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rrdp.as214749.net/repo/as214749-paw/4/AS214749.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214749

    Signature Algorithm: sha256WithRSAEncryption
         3c:69:eb:89:13:07:75:f8:94:ab:4c:55:d1:c7:a4:c6:76:76:
         66:95:b6:8a:9e:7d:df:39:84:9e:55:df:90:9a:ec:00:5f:e8:
         79:dc:5a:15:87:f0:90:ab:d2:fb:bf:c8:5f:a2:b4:97:fe:50:
         8b:dc:e9:ae:4f:db:e8:a9:a8:9c:ad:59:0a:34:a0:2a:c8:79:
         e8:50:a0:c0:46:7c:be:b4:a5:a5:4d:dd:02:51:94:9b:e1:b2:
         0c:3b:a5:d0:f6:67:5d:23:4a:a8:3c:bb:b4:12:88:15:39:aa:
         5d:c4:98:11:aa:dd:38:0b:ab:f4:42:09:ca:dd:57:f3:ba:db:
         1e:a1:91:69:ab:9d:d6:c6:69:c9:4e:a0:72:fd:5b:a7:65:57:
         6e:cb:48:82:e9:05:45:a3:42:c4:83:02:48:e8:ef:00:93:6e:
         6f:80:7e:f7:72:15:24:80:8a:4a:0f:e0:ea:fc:94:f0:4a:84:
         f6:27:0d:0c:66:fb:e7:12:00:50:5a:5a:ab:83:8a:c5:d2:8d:
         0c:37:07:bc:d4:d2:52:94:e0:42:32:b0:74:62:d0:01:ec:f4:
         c0:53:23:3c:9b:0c:7f:ee:5c:1c:be:15:45:de:23:58:1d:4a:
         e0:6a:75:cf:21:d8:2b:db:cc:23:fc:65:ff:1d:6d:e3:b8:ae:
         08:d0:e7:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:29:54 2026 by rpki-client