Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/AS47272.asa
File:                     AS47272.asa (raw, json)
Hash identifier:          5A4hGWi51Dr3GUKz0JreZKxqqUyPHxsLuzlsoM4jakU=
Subject key identifier:   94:7F:B2:22:CB:B3:76:0C:21:69:61:23:92:EC:B0:DB:84:73:D1:D1
Certificate issuer:       /CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
Certificate serial:       3ED668A8A5B747AAD2554AAA60CBFBAA657DE2B8
Authority key identifier: 75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/AS47272.asa
Signing time:             Fri 27 Jun 2025 16:10:00 +0000
ASPA not before:          Fri 27 Jun 2025 16:05:00 +0000
ASPA not after:           Fri 26 Jun 2026 16:10:00 +0000
Customer ASID:            47272
Providers:                AS: 174
                          AS: 835
                          AS: 924
                          AS: 1299
                          AS: 3257
                          AS: 6939
                          AS: 20473
                          AS: 34927
                          AS: 35133
                          AS: 50917
                          AS: 52025
                          AS: 64289
                          AS: 212514
                          AS: 215638
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d6:68:a8:a5:b7:47:aa:d2:55:4a:aa:60:cb:fb:aa:65:7d:e2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
        Validity
            Not Before: Jun 27 16:05:00 2025 GMT
            Not After : Jun 26 16:10:00 2026 GMT
        Subject: CN=947FB222CBB3760C2169612392ECB0DB8473D1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ae:3f:6c:6d:c8:67:df:7f:f4:7b:a5:67:98:
                    e7:5a:89:94:36:72:ea:12:29:66:2d:27:73:ce:78:
                    a2:14:f8:0e:4e:47:af:10:98:a5:23:75:70:e0:16:
                    2e:7f:e5:6f:8a:70:e4:8d:31:02:f9:38:0c:59:c9:
                    ed:a9:77:2e:0f:04:02:6b:2f:79:24:18:cc:ee:d3:
                    da:5b:27:2b:83:cd:d8:b9:5f:36:7f:4a:62:67:f4:
                    fd:19:17:6a:a5:38:c1:90:43:72:17:ce:c4:72:c1:
                    f6:69:b3:09:13:1c:06:70:a8:a7:ad:e9:3e:1e:97:
                    ec:8e:29:dc:44:7d:4b:66:a1:60:d1:26:a0:64:4e:
                    b8:88:bb:a1:f0:53:06:8b:ab:18:8f:ac:5a:12:71:
                    f6:77:15:7c:bf:82:aa:29:aa:d5:d7:6c:79:d3:06:
                    16:5e:eb:3f:ac:02:56:83:ba:2c:08:f5:22:cd:b8:
                    55:70:ca:7e:56:b6:b4:cc:bf:c2:f0:49:75:42:41:
                    5e:99:95:e1:a5:4c:9e:f2:71:80:21:2f:e4:34:54:
                    c7:33:7b:a4:7c:a5:3d:01:e0:07:8e:b8:24:6a:b5:
                    ff:49:91:3e:d9:8c:3f:23:a1:5c:87:b2:b3:15:8b:
                    9b:db:0b:df:af:63:25:ff:42:a2:47:be:63:45:8e:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7F:B2:22:CB:B3:76:0C:21:69:61:23:92:EC:B0:DB:84:73:D1:D1
            X509v3 Authority Key Identifier:
                keyid:75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/AS47272.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47272

    Signature Algorithm: sha256WithRSAEncryption
         91:7a:fa:64:f9:30:2c:a5:c2:ea:96:e5:34:a3:ed:0f:f3:de:
         07:89:90:7d:22:d8:04:ad:2a:92:f2:ec:8f:7e:70:e6:a3:8c:
         88:c6:c7:ad:09:00:78:2a:d3:85:ed:a0:8c:f3:d8:af:9c:b1:
         58:3c:66:6d:2a:ba:fe:13:78:dd:ee:96:92:5f:3e:c4:da:d8:
         3c:e7:25:6a:11:ab:1e:13:e0:d3:81:c9:c0:43:35:61:78:82:
         1c:8f:cb:cc:df:7f:ae:06:6d:fe:7c:07:a5:d0:31:3f:08:51:
         5c:d1:8d:d6:81:74:36:4f:80:26:8d:a9:85:5c:82:42:fc:64:
         c5:c2:80:26:2f:bb:4f:78:8e:3d:73:bc:48:36:21:a0:0f:69:
         93:7c:f7:e4:67:53:2a:85:b0:dc:15:05:24:b6:53:a8:50:e9:
         39:c9:07:63:74:0c:3a:cf:30:a1:ea:74:40:06:a2:b9:ad:dd:
         d5:1e:69:c7:d9:21:28:f8:47:19:bf:d2:78:26:cc:3b:71:f5:
         df:b1:0f:3b:dc:ce:5c:6f:80:23:11:29:cc:9d:39:35:54:ad:
         42:65:4e:19:3c:53:19:c3:a8:a0:97:5b:e6:38:1c:c0:18:db:
         2b:2f:92:c3:d8:17:52:8d:98:1b:c6:a9:99:2f:a3:2e:a2:43:
         82:7f:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:51:37 2025 by rpki-client