Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa
File:                     AS215147.asa (raw, json)
Hash identifier:          J2x/D/dp4X7UL/t56blYMubeUgQMJur/XGZvebo5ANU=
Subject key identifier:   11:F1:F7:7B:B0:EF:C1:86:12:95:11:B0:1C:6A:E0:C7:65:0D:9E:3B
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       5B53243E5FCAA6447490ECF0FBB2B5AC1A800C39
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa
Signing time:             Sat 12 Jul 2025 09:41:00 +0000
ASPA not before:          Sat 12 Jul 2025 09:36:00 +0000
ASPA not after:           Sat 11 Jul 2026 09:41:00 +0000
Customer ASID:            215147
Providers:                AS: 11967
                          AS: 47263
                          AS: 207252
                          AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:53:24:3e:5f:ca:a6:44:74:90:ec:f0:fb:b2:b5:ac:1a:80:0c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Jul 12 09:36:00 2025 GMT
            Not After : Jul 11 09:41:00 2026 GMT
        Subject: CN=11F1F77BB0EFC186129511B01C6AE0C7650D9E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1b:d4:ac:53:bb:5b:bf:3a:bb:42:99:23:ed:
                    6b:e0:ec:65:ed:4e:28:c7:ea:f5:68:b5:b0:6d:52:
                    a2:fc:9c:52:02:65:3f:4e:18:6c:59:0b:8b:ae:97:
                    08:8c:e7:e2:7b:7f:bd:ef:72:1a:1f:a3:de:32:2f:
                    b8:66:fe:68:55:c9:fa:6b:88:2c:80:1d:2c:98:a8:
                    11:bc:30:14:ba:87:ac:fc:50:3f:cd:d6:81:18:92:
                    b9:da:3b:22:db:89:8c:0d:97:8c:db:10:47:c2:46:
                    bb:4e:f4:58:bb:7a:13:83:42:a9:3c:31:61:54:d4:
                    81:87:fb:ff:26:80:f2:f3:2e:ba:f5:a8:34:d7:63:
                    75:7b:65:87:eb:92:58:de:8b:28:58:11:5e:71:b5:
                    e2:86:56:07:90:5d:35:c4:f7:c6:9a:03:12:84:a6:
                    e0:21:c3:46:ea:f5:63:03:8d:7c:d0:d6:97:a9:7d:
                    d2:9a:bd:87:ec:3d:6e:18:d2:f1:4f:8a:c7:4b:4f:
                    f7:50:d0:b5:18:60:7b:40:3b:d9:12:34:d0:04:23:
                    e3:2a:de:51:fc:34:c0:60:a5:8e:c6:c9:cf:a2:2f:
                    1f:bb:bc:7a:cc:ca:f9:a4:6b:de:d8:77:1e:98:e7:
                    c7:79:f9:61:4d:6f:be:31:6e:1f:f3:62:a4:a1:10:
                    7a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F1:F7:7B:B0:EF:C1:86:12:95:11:B0:1C:6A:E0:C7:65:0D:9E:3B
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/AS215147.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215147

    Signature Algorithm: sha256WithRSAEncryption
         21:c5:a5:a9:46:7e:9b:9a:4b:11:f5:90:86:12:9d:59:48:b9:
         92:38:b5:4d:3c:dc:4b:56:8c:07:7b:c0:4a:b6:e2:00:d9:f5:
         5c:6b:4c:a9:1e:8f:cd:e2:7b:1a:b2:4f:c3:35:6b:0c:4d:93:
         29:24:63:98:77:67:86:a6:ca:92:82:f4:d8:59:a8:82:18:18:
         be:cf:e5:48:34:82:4d:c2:fe:b0:96:55:4e:41:67:8a:e1:dc:
         e0:a3:07:78:83:28:58:f2:a5:cf:dc:27:71:c8:0d:c6:7f:42:
         00:00:0a:96:e9:da:70:b0:79:bb:15:cd:67:9d:d4:79:c2:61:
         dd:de:0b:f3:f4:2e:0c:d5:06:cc:28:46:c2:26:9d:8a:d5:df:
         32:52:a7:50:2b:52:b9:22:7c:64:8e:0f:e8:e8:dc:ce:2a:7b:
         71:90:bf:24:d3:3c:fe:c1:10:e3:12:69:b2:1a:ac:6e:ed:49:
         02:7e:e5:e0:c1:94:ef:56:66:b2:f9:cb:cb:d8:0a:ec:f1:4e:
         cd:5f:be:46:57:6a:3a:9c:13:f1:e3:00:a8:be:71:e1:d8:ed:
         e3:bf:9f:e2:89:a9:0e:44:56:05:f5:fa:1d:0f:12:4e:8d:1d:
         79:f5:46:b6:50:2a:9a:a9:ed:57:7a:28:20:e8:0c:22:bb:19:
         e0:ad:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----