Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
File:                     AS215248.asa (raw, json)
Hash identifier:          GFt+WeOjsAQoZKjYNcrA7zUmVSH7b01JtVj28qjRWk8=
Subject key identifier:   0A:5E:F2:C9:11:E3:1E:54:F1:68:CA:86:65:29:CD:8A:58:F0:CF:9F
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       17F6C3CB28E0F26B32DE9BAB1B27858FD1F13367
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
Signing time:             Wed 25 Jun 2025 21:26:29 +0000
ASPA not before:          Wed 25 Jun 2025 21:21:29 +0000
ASPA not after:           Wed 24 Jun 2026 21:26:29 +0000
Customer ASID:            215248
Providers:                AS: 924
                          AS: 5405
                          AS: 6204
                          AS: 8283
                          AS: 34872
                          AS: 34927
                          AS: 37739
                          AS: 41051
                          AS: 47272
                          AS: 50263
                          AS: 58057
                          AS: 61049
                          AS: 64289
                          AS: 200132
                          AS: 208210
                          AS: 215664
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f6:c3:cb:28:e0:f2:6b:32:de:9b:ab:1b:27:85:8f:d1:f1:33:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Jun 25 21:21:29 2025 GMT
            Not After : Jun 24 21:26:29 2026 GMT
        Subject: CN=0A5EF2C911E31E54F168CA866529CD8A58F0CF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:af:77:60:8d:41:a1:a6:af:68:79:25:a5:40:
                    43:74:39:c0:3c:5f:dc:d3:f2:16:40:de:3c:46:63:
                    1f:e9:f9:a9:b2:2c:43:ca:73:fb:82:78:86:af:53:
                    2f:71:71:30:aa:2f:21:c7:ce:02:5e:36:7f:ff:f1:
                    5d:7a:97:09:cd:4f:57:89:89:06:1d:7d:62:5d:bc:
                    57:35:d1:73:1e:9c:15:0c:7b:ed:28:06:33:be:3e:
                    ec:c4:41:7b:15:b6:3c:20:20:6e:ec:31:1a:a7:da:
                    9c:44:87:d0:7a:b4:fa:45:75:0c:59:55:8f:bc:6f:
                    f2:2a:53:6f:c0:23:71:3e:62:98:6f:9e:61:5a:2f:
                    13:7f:59:0b:6b:a6:ba:be:3b:93:ce:c4:0b:31:05:
                    92:fa:e7:0b:60:1d:b2:de:ee:1c:37:ad:e3:e7:2e:
                    22:53:be:54:00:ac:1d:b8:a6:88:d4:eb:0a:89:92:
                    7a:70:b1:fa:ec:e5:00:c3:92:0d:84:cb:37:2a:2c:
                    39:72:11:2e:01:60:bb:02:58:11:16:2e:1b:80:82:
                    98:36:be:2b:2f:16:ff:37:82:3b:af:c0:6a:70:f0:
                    37:08:77:c7:f4:01:0a:53:c4:92:c7:02:27:8d:87:
                    f2:98:77:91:ef:18:08:44:96:f8:28:89:77:f1:9d:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:F2:C9:11:E3:1E:54:F1:68:CA:86:65:29:CD:8A:58:F0:CF:9F
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215248

    Signature Algorithm: sha256WithRSAEncryption
         d1:ae:b2:81:27:fd:7e:d8:f0:44:b4:c3:92:a1:2b:98:dd:7f:
         7f:24:8a:d3:55:d4:95:e3:f5:0d:e5:b0:e6:32:c4:ba:20:d3:
         a5:2d:17:16:40:54:58:1b:74:8d:a0:b9:38:8d:23:5c:e2:6f:
         2c:25:62:6e:a2:a1:e6:14:0d:94:b4:07:29:84:5f:5f:c0:1b:
         e4:5f:72:c1:95:79:cb:a9:41:73:f8:c0:25:0e:e2:19:eb:16:
         ee:70:e8:67:0f:0c:17:e1:56:98:37:04:0d:66:8d:3e:d6:c8:
         99:83:78:f7:a6:c6:a6:34:c6:d0:fa:c1:94:47:24:7c:12:ca:
         ef:b7:5b:bf:50:34:c9:0e:25:bb:4e:19:f0:70:6c:a9:f8:a0:
         ae:59:2f:ec:ef:f4:66:7c:c1:b3:98:32:14:4f:6d:dd:6f:53:
         6c:74:05:c7:3d:bf:2a:0e:af:95:85:81:7e:ef:bf:81:a5:98:
         f0:58:69:2f:72:d8:39:f6:bf:2b:34:04:47:53:18:78:ad:bc:
         df:71:ca:f0:e9:d9:dd:fb:94:71:01:07:ad:3e:00:c6:f5:94:
         b2:02:fd:e3:01:d3:d4:ab:5a:dd:52:48:85:f3:75:5b:3d:bd:
         1d:1b:92:61:7b:6b:dc:8d:17:64:b9:e7:2e:8d:7c:dd:99:04:
         22:dc:11:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:25:38 2025 by rpki-client