Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/AS213768.asa
File:                     AS213768.asa (raw, json)
Hash identifier:          R9ERvttyM23Nz4uP5cMSLIdDTei/lOmIkuEaLWi+d1s=
Subject key identifier:   D4:31:5B:AD:E0:77:8B:55:8E:EC:BD:87:EF:F6:F3:5D:45:35:A6:8B
Certificate issuer:       /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial:       110300A50B42D425A6C5B4994445623A883C0A
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/AS213768.asa
Signing time:             Mon 26 May 2025 18:48:10 +0000
ASPA not before:          Mon 26 May 2025 18:43:10 +0000
ASPA not after:           Mon 25 May 2026 18:48:10 +0000
Customer ASID:            213768
Providers:                AS: 34927
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:03:00:a5:0b:42:d4:25:a6:c5:b4:99:44:45:62:3a:88:3c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
        Validity
            Not Before: May 26 18:43:10 2025 GMT
            Not After : May 25 18:48:10 2026 GMT
        Subject: CN=D4315BADE0778B558EECBD87EFF6F35D4535A68B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:95:c7:cd:81:3b:05:00:77:01:fd:2a:b4:
                    b6:17:cd:92:97:6e:a5:7e:c5:fe:d2:08:1c:68:b3:
                    83:8a:6e:6a:1f:73:9c:35:40:b0:c0:17:76:62:92:
                    13:fd:cd:d8:66:9c:56:83:a6:98:53:40:e7:d1:cb:
                    ad:f6:14:74:92:ca:3c:ef:50:1b:00:9c:33:1c:9c:
                    0b:92:ea:07:12:76:40:31:71:20:59:6c:94:d2:8e:
                    d9:ab:f4:b9:20:be:cc:a1:02:62:70:ce:bd:f2:3f:
                    d4:7c:2b:3f:6e:34:79:82:2a:d7:3d:8c:fe:b7:3b:
                    77:de:f1:de:90:a9:49:35:a5:d1:5c:a6:bb:d3:47:
                    59:5a:b4:3b:85:b1:29:44:39:79:62:bd:9e:49:6d:
                    47:50:09:f2:6b:a9:07:97:d2:5d:e4:05:42:31:8f:
                    cb:e4:70:7e:bb:28:76:1a:81:8d:aa:78:27:f0:48:
                    18:89:ec:f9:54:83:90:71:3d:f3:3c:ba:28:60:7b:
                    b4:4c:28:7c:1f:41:a3:a9:8a:47:c3:90:a6:44:cd:
                    2d:42:fc:f1:31:bd:f6:1d:51:65:32:5b:9c:f6:8e:
                    c6:52:13:43:e8:90:15:a3:4e:22:15:0b:fd:80:ec:
                    e2:d4:c4:7d:21:2c:dd:ec:d5:79:c4:8d:7e:2a:6e:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:31:5B:AD:E0:77:8B:55:8E:EC:BD:87:EF:F6:F3:5D:45:35:A6:8B
            X509v3 Authority Key Identifier:
                keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/AS213768.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213768

    Signature Algorithm: sha256WithRSAEncryption
         ed:cf:64:e5:f5:34:49:21:7d:10:c5:68:95:f4:29:f0:bc:af:
         0a:8b:e1:62:22:44:df:7e:9b:48:55:aa:28:c1:00:f9:13:ed:
         25:ab:cc:2e:4a:34:4c:9a:f0:5f:39:e7:dc:ef:31:49:22:7e:
         7c:c0:fe:f3:5e:6a:2a:6a:d1:60:0a:ce:ea:17:be:48:53:4a:
         a4:2c:26:8d:de:a5:fd:7f:cf:51:16:15:c4:d5:98:8a:93:87:
         f0:6a:ae:0c:33:4a:67:31:6c:03:9d:7c:41:96:60:76:bb:c8:
         c1:e4:c2:6c:03:04:39:9e:6d:ac:8e:22:20:8d:4d:28:bb:c9:
         e2:b8:99:64:f3:82:a5:08:11:a9:2a:c4:66:b0:ce:ba:f1:99:
         3a:ad:fd:33:3d:c8:a9:76:46:ee:d2:66:4e:e2:bd:6d:61:4d:
         12:4c:ae:b5:e4:db:e4:ed:ae:03:d5:6d:e6:eb:ed:61:f3:f0:
         d0:fb:f1:91:2c:88:01:26:00:f6:25:74:f9:92:81:15:8b:43:
         2e:53:37:95:11:17:60:eb:cc:40:d2:d7:36:a2:7c:a9:e1:64:
         37:dc:42:10:ab:0d:16:5f:de:23:f0:06:d1:d5:f4:58:30:25:
         70:fd:bf:d1:73:55:2c:23:3e:70:cd:d8:d0:e5:fd:09:ed:d8:
         c3:13:ff:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:36:14 2025 by rpki-client