Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
File:                     AS215248.asa (raw, json)
Hash identifier:          pTUqZS2x9dQUc74NpwgDLC9vX7t70r7B83USY00u86o=
Subject key identifier:   F8:6E:E1:64:C9:C6:E9:57:D6:B8:40:28:E5:12:A3:01:14:A2:C5:23
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       72ADFA01A139889AB6D55A7D47CBB1D22F7FE4D0
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa
Signing time:             Sat 02 Aug 2025 16:20:37 +0000
ASPA not before:          Sat 02 Aug 2025 16:15:37 +0000
ASPA not after:           Sat 01 Aug 2026 16:20:37 +0000
Customer ASID:            215248
Providers:                AS: 924
                          AS: 5405
                          AS: 6204
                          AS: 8283
                          AS: 34872
                          AS: 34927
                          AS: 37739
                          AS: 41051
                          AS: 42093
                          AS: 47272
                          AS: 50263
                          AS: 58057
                          AS: 61049
                          AS: 64289
                          AS: 200132
                          AS: 208210
                          AS: 215664
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ad:fa:01:a1:39:88:9a:b6:d5:5a:7d:47:cb:b1:d2:2f:7f:e4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Aug  2 16:15:37 2025 GMT
            Not After : Aug  1 16:20:37 2026 GMT
        Subject: CN=F86EE164C9C6E957D6B84028E512A30114A2C523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:55:94:6f:86:cc:7f:7f:65:96:1b:fa:1a:
                    25:9d:50:fc:59:22:87:25:1e:85:96:e3:9f:40:94:
                    45:86:cc:6c:c6:43:b8:d4:23:47:10:be:d7:e2:9c:
                    28:0f:fd:af:f2:ee:09:6b:7b:6e:fa:e6:a1:c1:f5:
                    22:cf:a4:e9:db:20:87:df:32:bd:11:f9:97:c1:f2:
                    ad:ce:c2:96:ec:60:28:e6:23:b5:ba:23:6c:d7:08:
                    37:4e:37:3c:df:39:75:7f:a0:e1:23:1c:ba:7d:3f:
                    16:b0:08:42:a6:14:b5:e1:7d:89:03:c5:1d:73:4b:
                    3d:90:44:5f:72:7c:3e:e4:8f:cc:49:8a:af:55:c5:
                    de:89:c6:72:50:72:bb:ee:7a:2e:b0:99:87:2b:23:
                    da:ba:16:be:3a:a6:7a:e2:db:01:8c:f7:2c:54:22:
                    8a:32:ba:da:49:b6:85:e8:51:78:ff:36:89:e4:c7:
                    1e:38:71:5d:6c:22:7c:3a:97:29:41:fe:50:6b:4c:
                    95:d7:54:1e:3f:f4:28:c4:ba:21:55:25:2c:66:34:
                    4f:3f:5f:09:0f:97:5e:61:af:dd:06:9e:29:9c:a4:
                    77:52:e7:80:9f:32:7b:35:10:a1:07:0d:fd:14:35:
                    11:c6:cb:50:08:16:d7:ac:f6:f3:c1:df:07:9d:b5:
                    d8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6E:E1:64:C9:C6:E9:57:D6:B8:40:28:E5:12:A3:01:14:A2:C5:23
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/AS215248.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215248

    Signature Algorithm: sha256WithRSAEncryption
         aa:b9:b5:b7:12:7e:44:93:17:3e:15:4c:d9:47:89:f1:8e:50:
         52:30:4e:dd:a0:0b:63:5d:0c:27:df:1f:b3:d7:d8:19:ed:90:
         a4:29:53:bd:f5:4d:99:39:e3:96:4b:9e:78:dc:8f:fc:08:9f:
         dd:e5:1b:06:67:fc:f0:86:0f:bd:71:10:dd:9b:cd:b5:9a:cf:
         ae:09:80:c6:6a:ee:63:d8:93:d2:b5:0b:18:00:72:27:c6:72:
         be:71:62:55:f2:ae:5f:ad:50:8b:99:02:29:54:2f:1c:2d:8c:
         8e:2c:05:15:d9:82:ed:e4:8b:04:42:ec:a7:03:6a:82:cd:1e:
         bc:79:f1:d5:24:c5:90:b0:fc:4f:ae:62:37:37:a0:70:1a:89:
         13:fd:4c:bb:2d:06:98:d5:24:41:39:f5:6a:a0:75:34:0f:2d:
         8b:52:71:33:ba:a6:4d:ae:2a:5f:e5:b1:5b:d8:04:0f:4f:c3:
         78:4c:33:ca:a0:4f:e8:80:e4:d4:1f:77:cc:99:0d:05:eb:69:
         de:95:82:ad:c6:d0:2b:62:11:ce:b8:64:5d:cd:66:54:81:36:
         96:a9:45:a7:5a:8b:96:13:1a:ad:a7:b2:94:0a:69:26:43:a3:
         f7:1c:49:8b:b5:bf:f2:92:d9:74:20:32:39:f1:87:d4:17:6d:
         bc:4a:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:47:02 2025 by rpki-client