Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/AS214701.asa
File:                     AS214701.asa (raw, json)
Hash identifier:          mqjMILltX1cHOmmoc9LZ52WIeChEFlk86IUmH66IejE=
Subject key identifier:   EE:A1:CF:59:D6:8B:49:D7:D3:3D:EA:6C:3F:88:AD:B3:C3:D4:4E:A1
Certificate issuer:       /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial:       78F038284A2524BA92C978E47241CF04456FDFC6
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/AS214701.asa
Signing time:             Wed 09 Apr 2025 17:45:45 +0000
ASPA not before:          Wed 09 Apr 2025 17:40:45 +0000
ASPA not after:           Wed 08 Apr 2026 17:45:45 +0000
Customer ASID:            214701
Providers:                AS: 20473
                          AS: 34927
                          AS: 39351

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f0:38:28:4a:25:24:ba:92:c9:78:e4:72:41:cf:04:45:6f:df:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
        Validity
            Not Before: Apr  9 17:40:45 2025 GMT
            Not After : Apr  8 17:45:45 2026 GMT
        Subject: CN=EEA1CF59D68B49D7D33DEA6C3F88ADB3C3D44EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:0e:a5:bc:5f:65:20:de:3a:94:7e:30:4b:
                    f4:77:e4:db:41:ed:74:0a:04:e4:a9:bb:23:8f:68:
                    0b:9f:ff:57:94:61:9d:79:55:e1:90:1f:23:ff:b0:
                    21:8a:eb:50:8e:00:07:7a:96:3d:fc:11:1e:c0:dc:
                    67:7b:93:19:1f:ff:73:7b:e3:30:c3:1b:ee:7b:6d:
                    c6:e0:05:11:25:57:5c:3f:fb:2a:4d:28:a8:35:f1:
                    89:81:7d:54:9b:35:a7:4b:c3:1a:9c:87:76:0c:da:
                    b6:fb:9b:de:ae:a4:a3:24:f9:48:44:cb:d2:a9:ac:
                    83:b7:c4:62:05:24:ab:12:3f:40:60:d5:c6:29:e1:
                    7b:21:73:33:99:e2:58:cb:a9:4d:4b:07:7d:5a:56:
                    e6:a9:fe:90:21:1a:d4:88:0d:42:ab:35:89:a5:cb:
                    df:62:cf:13:00:71:ed:ae:50:3b:47:20:53:1e:95:
                    7f:c4:b6:eb:6b:32:91:a3:e5:b2:8b:9e:f9:50:50:
                    f0:c8:8d:45:b1:4a:bf:dd:03:2c:18:51:6c:61:a5:
                    df:49:d0:60:51:45:e9:34:91:c4:19:d0:7d:50:c4:
                    ad:dc:10:3c:9a:1d:50:13:f9:68:6d:20:ad:77:a9:
                    a5:28:8d:98:1a:da:f2:d4:26:66:bf:46:2d:a4:ad:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A1:CF:59:D6:8B:49:D7:D3:3D:EA:6C:3F:88:AD:B3:C3:D4:4E:A1
            X509v3 Authority Key Identifier:
                keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/AS214701.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214701

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:ec:d7:01:82:64:22:4f:d6:b8:9e:af:7a:d1:4b:6e:f3:
         88:84:75:bb:f4:2c:9f:62:4b:3f:55:78:15:0a:32:5c:a2:bd:
         52:bf:d5:a1:a1:ec:a4:7b:a9:de:ce:2d:7c:7e:2c:a5:fe:7a:
         14:11:16:6f:1c:ac:8c:b7:72:23:55:dc:01:c0:49:10:c5:69:
         67:db:ab:cd:d7:95:18:d0:a4:73:0d:38:f5:3e:9f:2f:49:01:
         29:03:91:00:0f:6c:3f:cb:91:00:98:5f:f4:13:7d:55:90:be:
         cd:f2:90:f0:04:02:88:3b:60:6a:32:83:d7:46:9a:0b:f8:e4:
         33:95:d1:ff:7c:ee:ab:57:72:cb:45:98:82:38:d2:2c:85:6f:
         cf:03:1e:10:5c:89:76:62:17:a0:92:e1:be:a8:42:d9:02:23:
         02:59:79:02:05:01:67:64:30:f0:d8:ce:92:54:4c:81:bf:34:
         f5:39:bb:2b:b4:2c:9d:97:67:4c:35:cb:4d:a5:7a:66:cf:f0:
         aa:d8:05:d3:8d:75:25:99:20:cd:ae:cf:0f:08:94:b5:96:b2:
         e6:61:02:b7:22:a1:ea:23:96:2b:3e:0a:12:4e:f7:3c:6d:06:
         f3:e2:86:46:7e:84:fb:a0:14:85:fe:67:df:90:5e:ed:52:d5:
         83:a4:03:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----