Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa
File:                     AS215849.asa (raw, json)
Hash identifier:          WRilh/6hJb7kAkUd7i3j3vQPKdOIGwVbb9ZLfAC7rKQ=
Subject key identifier:   93:D8:55:F0:C6:EF:1A:B5:93:54:08:01:7F:97:B3:AE:EC:05:7A:15
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       365F208023D13FEDE5BDCBCA60FD3C4B1C09BE25
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa
Signing time:             Fri 23 May 2025 09:00:11 +0000
ASPA not before:          Fri 23 May 2025 08:55:11 +0000
ASPA not after:           Fri 22 May 2026 09:00:11 +0000
Customer ASID:            215849
Providers:                AS: 215828
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 06:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5f:20:80:23:d1:3f:ed:e5:bd:cb:ca:60:fd:3c:4b:1c:09:be:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: May 23 08:55:11 2025 GMT
            Not After : May 22 09:00:11 2026 GMT
        Subject: CN=93D855F0C6EF1AB5935408017F97B3AEEC057A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:88:a0:b8:cf:0a:db:d6:ff:15:c3:91:63:
                    b3:4b:8a:71:cd:05:71:a8:ad:4c:68:6e:71:ee:b7:
                    91:27:99:29:de:ab:0d:6c:09:6d:4f:79:a0:6b:07:
                    97:31:77:94:7d:7c:a6:22:1c:d5:53:02:b5:d9:4a:
                    d1:1a:5d:cc:d7:58:d4:5a:28:8c:8f:99:77:a4:02:
                    f1:52:8e:9d:45:16:a4:ed:32:55:98:8a:02:ed:a4:
                    9a:bc:53:f7:4b:37:71:bf:bc:af:84:8c:18:fd:d8:
                    c8:f4:69:91:29:70:9f:5e:af:4b:b9:1b:3a:8c:d5:
                    31:5c:5d:0e:38:52:74:2b:57:30:b5:ff:b4:38:2e:
                    4d:22:ba:2d:31:df:74:ff:a6:fe:f7:cb:fe:61:c7:
                    d1:51:bc:9f:aa:7c:cd:ce:fe:ea:07:d2:19:e0:cd:
                    10:15:06:c8:d4:b8:74:76:82:2b:6c:b4:f4:75:69:
                    bf:48:41:f4:1b:d5:76:32:be:af:8c:ec:ce:44:d0:
                    07:c4:35:fc:56:fb:fa:40:23:ae:77:d2:f8:eb:8b:
                    43:a8:f7:48:a7:89:c0:83:d8:b9:c9:b1:eb:9b:cd:
                    8c:dd:49:0b:4d:db:37:a9:3b:5a:6a:fe:94:a3:fb:
                    c8:d5:f1:05:89:75:74:ee:30:63:14:d2:54:d6:54:
                    da:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D8:55:F0:C6:EF:1A:B5:93:54:08:01:7F:97:B3:AE:EC:05:7A:15
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/AS215849.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215849

    Signature Algorithm: sha256WithRSAEncryption
         96:23:03:b2:6b:c9:49:44:ba:dd:a2:70:85:3b:ff:36:43:f3:
         03:ab:09:00:6b:76:58:cb:ed:e4:54:7c:35:58:fd:97:de:69:
         67:2d:56:40:7b:88:e1:c0:b2:4d:38:af:ed:c6:92:63:6d:c8:
         50:19:74:8d:8a:7d:aa:17:46:fd:ca:e4:39:93:3b:27:52:08:
         cc:75:5e:63:08:0b:7f:cb:5f:1b:83:ee:a7:e5:79:87:13:b4:
         dd:a4:af:e6:04:3a:af:5c:11:1a:3d:ca:9b:bf:43:22:aa:d3:
         1b:15:88:60:fb:45:a0:1a:4a:aa:63:02:ff:c8:0c:0a:b3:71:
         bb:e2:8f:f2:f9:7c:0c:27:39:82:42:d1:9a:62:3b:4b:57:e9:
         86:f9:24:36:79:4e:bf:88:16:1f:5c:87:22:4e:6f:f6:99:fd:
         ef:cd:4e:b8:52:30:79:9a:0e:44:c5:79:bc:b0:11:86:72:fb:
         7a:49:ed:85:88:be:c6:c1:4e:0f:e8:d2:7e:77:78:a8:55:b6:
         08:21:ed:82:ad:b7:75:bf:f8:fd:b0:77:95:f9:41:cd:ab:6e:
         a1:b5:bc:96:73:f1:db:dd:a2:fa:30:07:f6:33:33:7a:2b:73:
         61:93:2a:2c:ae:2c:44:cf:76:46:f5:ed:af:e7:80:c2:01:e4:
         3c:c4:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:16:57 2025 by rpki-client