Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/AS215375.asa
File:                     AS215375.asa (raw, json)
Hash identifier:          LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=
Subject key identifier:   D6:52:02:6E:AE:66:F1:05:90:36:1D:23:A7:9E:8F:36:69:FA:6F:E8
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       6D4B40C88FA1DA01192C82E59501398D656D6B8F
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/AS215375.asa
Signing time:             Tue 03 Jun 2025 06:52:29 +0000
ASPA not before:          Tue 03 Jun 2025 06:47:29 +0000
ASPA not after:           Tue 02 Jun 2026 06:52:29 +0000
Customer ASID:            215375
Providers:                AS: 214138
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4b:40:c8:8f:a1:da:01:19:2c:82:e5:95:01:39:8d:65:6d:6b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Jun  3 06:47:29 2025 GMT
            Not After : Jun  2 06:52:29 2026 GMT
        Subject: CN=D652026EAE66F10590361D23A79E8F3669FA6FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:76:22:2a:e2:1a:a2:1b:37:0e:f6:76:8a:
                    a0:6b:f5:5e:2a:63:85:50:c6:c7:43:96:94:79:6b:
                    9f:33:a9:d4:df:10:f9:46:e3:2b:9f:20:56:5a:27:
                    2f:0f:b0:f5:27:5f:88:61:c4:84:c3:d9:39:1f:e7:
                    20:cb:fe:bb:a2:38:87:e7:8c:3d:b4:df:2a:70:ba:
                    52:de:05:12:47:95:f7:87:0f:e9:59:b9:7c:7d:0b:
                    dd:22:cb:66:5b:19:14:fb:6f:a6:14:7e:a6:36:6b:
                    9c:0f:64:64:3e:29:69:05:de:56:64:13:d0:40:06:
                    a4:f4:57:6b:42:e3:96:33:3b:39:8b:48:c7:9b:2b:
                    08:fe:f4:b6:01:70:bf:60:4d:07:c1:71:1c:4c:fd:
                    9e:57:af:24:61:bf:26:d1:7e:fa:83:59:1f:3c:0b:
                    90:d5:e3:6a:a9:99:49:81:c5:87:c1:10:cf:1b:55:
                    2e:35:85:51:bc:f0:93:94:bb:31:ee:42:d2:86:55:
                    fb:df:2c:18:2c:6b:fa:1d:c6:e8:59:11:21:da:91:
                    4a:ad:b2:39:f9:11:a1:a0:99:af:79:47:2b:2f:28:
                    ad:12:81:af:24:62:56:c0:51:db:35:47:b1:cf:57:
                    7d:71:98:64:e1:e1:d9:65:ba:0a:05:fc:e3:db:00:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:52:02:6E:AE:66:F1:05:90:36:1D:23:A7:9E:8F:36:69:FA:6F:E8
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/AS215375.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215375

    Signature Algorithm: sha256WithRSAEncryption
         52:cd:c4:bf:cb:12:ba:6c:c2:53:19:c7:ed:a2:62:60:02:ac:
         57:ca:c7:8e:d8:20:17:5a:8b:fa:5d:1e:07:91:e7:43:27:8e:
         3d:ac:c3:53:fc:1d:0d:b4:9e:06:95:56:e9:df:15:34:65:11:
         06:85:d2:09:88:cc:8b:dc:76:e7:dd:5c:67:39:a7:f9:be:27:
         30:9c:01:9f:61:a8:b3:67:b8:dd:db:a2:59:a1:ad:58:5c:ed:
         17:be:c4:6d:08:69:65:25:cf:c5:77:8d:1a:e9:a0:db:fc:c0:
         04:ff:4f:35:b7:e1:1a:23:69:a9:26:92:aa:77:70:9c:c2:ac:
         a0:de:04:bf:62:90:5c:6f:f0:10:23:ab:0e:84:71:3f:8d:a4:
         06:a8:85:50:a7:f1:7c:79:18:ec:f7:e6:33:df:ff:9a:dd:27:
         0d:07:4b:c1:c7:03:6f:fe:51:ed:03:e3:0a:6a:c8:3d:9b:6e:
         22:7a:94:50:79:c7:d0:58:5a:0e:4a:d0:e1:f7:8e:04:3d:31:
         de:73:a3:ba:21:ee:a1:51:72:aa:78:f9:bf:ac:0d:48:08:63:
         27:1c:e2:bc:f0:65:71:33:c2:77:e3:71:de:a3:41:7b:c9:4e:
         e4:00:bf:97:a6:79:96:92:cd:16:7c:ae:9d:d3:2e:96:86:b1:
         17:8e:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:51:53 2025 by rpki-client