Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/AS210440.asa
File:                     AS210440.asa (raw, json)
Hash identifier:          L6hX91RHlKwU8hF4k9+bWVhjFiv/BsluV774UWo1Fx8=
Subject key identifier:   CC:E1:7E:CC:6A:90:1A:5C:F0:D7:07:03:17:E6:6C:8D:1A:3E:FF:B3
Certificate issuer:       /CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058
Certificate serial:       64710C3C01D1F13CF86A4374ED6D95E346489AA4
Authority key identifier: 6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/AS210440.asa
Signing time:             Thu 14 Aug 2025 12:00:58 +0000
ASPA not before:          Thu 14 Aug 2025 11:55:58 +0000
ASPA not after:           Thu 13 Aug 2026 12:00:58 +0000
Customer ASID:            210440
Providers:                AS: 20473
                          AS: 53808
                          AS: 213605
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:71:0c:3c:01:d1:f1:3c:f8:6a:43:74:ed:6d:95:e3:46:48:9a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058
        Validity
            Not Before: Aug 14 11:55:58 2025 GMT
            Not After : Aug 13 12:00:58 2026 GMT
        Subject: CN=CCE17ECC6A901A5CF0D7070317E66C8D1A3EFFB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:c7:27:b2:16:0f:56:4f:be:ea:73:65:64:
                    77:ed:30:53:c6:d4:8d:74:5b:a4:f3:0a:44:b0:4a:
                    7a:1c:16:0e:d5:80:b4:dc:ce:e8:e3:fd:fd:e4:57:
                    6d:a4:e8:1d:58:1b:5f:60:28:ff:35:a5:64:f2:90:
                    0c:5a:a7:3e:dd:94:69:8c:8d:d0:97:26:05:d3:e6:
                    85:d2:7f:7a:0d:64:1c:56:05:e8:32:8f:0a:29:18:
                    76:97:20:81:58:fc:80:98:cb:a0:e4:b7:97:4c:6c:
                    64:eb:f3:67:bc:60:5b:b6:72:4a:04:6d:11:c1:a3:
                    3c:f2:78:24:07:61:9f:1d:ba:55:13:0d:a6:03:a9:
                    e2:93:df:a4:c8:f0:9a:7c:58:6d:91:b8:48:94:26:
                    48:ae:fd:c3:ff:fd:04:7a:ea:e1:86:d2:6f:35:80:
                    86:96:82:97:37:53:4d:b0:7f:10:f1:9b:09:a1:1e:
                    5d:ad:8a:9c:20:b1:fa:f8:5f:81:94:08:e8:87:13:
                    06:cb:6d:bb:1c:29:95:6f:3f:7f:2f:ee:4b:88:1e:
                    c1:0f:e5:1e:62:f8:5a:a4:f0:f9:df:ab:55:be:d1:
                    0d:7d:cd:a6:e0:c8:2d:56:a0:b4:9b:51:d4:33:07:
                    d7:8d:bb:1e:1f:63:cd:03:a8:53:77:33:d7:3c:0e:
                    45:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E1:7E:CC:6A:90:1A:5C:F0:D7:07:03:17:E6:6C:8D:1A:3E:FF:B3
            X509v3 Authority Key Identifier:
                keyid:6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/AS210440.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210440

    Signature Algorithm: sha256WithRSAEncryption
         59:4a:18:10:51:85:bd:ad:48:50:8b:b0:24:39:ee:ed:fa:0f:
         6f:0a:9a:7b:8f:e3:70:aa:36:0b:3c:2f:8b:cb:88:8c:cb:83:
         8d:ba:09:6e:5a:c6:e5:9c:ce:e6:ae:a7:0f:5d:93:a5:09:bd:
         49:a9:da:0b:d6:02:ab:5c:9c:ae:9c:50:9a:44:4e:41:ad:5b:
         bb:98:93:0c:7f:b7:4d:51:63:6f:ac:b0:00:e2:de:90:56:e3:
         6a:19:a5:77:94:6e:9f:6e:47:21:66:ee:b3:ac:79:a7:9b:0e:
         96:61:5f:1b:70:d0:7b:b7:35:81:cd:e8:2e:3c:d1:98:53:71:
         7f:58:71:cf:4f:aa:e0:77:1d:eb:9d:c3:fc:be:cf:6f:26:46:
         87:ad:f1:06:27:67:d0:fe:19:2f:82:97:d2:16:7d:e0:06:7a:
         7b:c3:c5:00:bb:b3:de:db:ff:f8:e2:3b:2a:9c:db:d0:fc:9e:
         35:5c:6b:6f:df:0f:f3:c9:58:54:bc:dc:98:3e:1f:7a:1d:4a:
         b8:56:8b:27:7a:a5:2c:c2:4c:c6:bb:4a:ca:fb:cd:34:dc:03:
         cd:e3:a9:a2:d4:cf:93:f6:e1:32:7d:67:a4:8f:78:71:fc:f8:
         d1:a6:b8:92:c5:87:78:7f:82:02:07:ee:4a:6c:01:b5:ed:01:
         12:cd:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:05:25 2025 by rpki-client