Autonomous System Provider Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/0/AS209025.asa
File:                     AS209025.asa (raw, json)
Hash identifier:          sK+1SvCMbKLwxd+JnzsAfr99AtEsCY5qj+W8jF+bnFM=
Subject key identifier:   6D:FC:F6:14:0E:FA:13:FE:03:C4:C9:BA:5E:22:4C:0E:D0:3B:00:F0
Certificate issuer:       /CN=05c96a1b8c43c6c35cae408d6c8c852923ddb1ba
Certificate serial:       5B47B8D531AAD6FA2A3E11395D7B1B8F609824D2
Authority key identifier: 05:C9:6A:1B:8C:43:C6:C3:5C:AE:40:8D:6C:8C:85:29:23:DD:B1:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BclqG4xDxsNcrkCNbIyFKSPdsbo.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/0/AS209025.asa
Signing time:             Fri 01 Dec 2023 11:56:49 +0000
ASPA not before:          Fri 01 Dec 2023 11:51:49 +0000
ASPA not after:           Fri 29 Nov 2024 11:56:49 +0000
Customer ASID:            209025
Providers:                AS: 199762
                          AS: 200160
                          AS: 203913
                          AS: 213086

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/0/05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.crl
                          rsync://rpki.nap.re/repo/pongery/0/05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BclqG4xDxsNcrkCNbIyFKSPdsbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:47:b8:d5:31:aa:d6:fa:2a:3e:11:39:5d:7b:1b:8f:60:98:24:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c96a1b8c43c6c35cae408d6c8c852923ddb1ba
        Validity
            Not Before: Dec  1 11:51:49 2023 GMT
            Not After : Nov 29 11:56:49 2024 GMT
        Subject: CN=6DFCF6140EFA13FE03C4C9BA5E224C0ED03B00F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:52:a7:39:f6:32:de:b1:1e:9b:99:a0:26:
                    34:95:e0:36:93:06:b6:6e:46:3a:d3:df:46:79:85:
                    cf:bc:71:cc:21:f5:9a:bb:5a:0c:38:6d:12:a2:62:
                    21:c2:6e:11:61:b3:9a:12:a1:d6:03:6c:d0:aa:12:
                    e7:10:b4:6e:7b:c8:9d:76:f5:d9:71:72:d2:96:ce:
                    b8:dc:de:55:34:ef:39:7b:4e:08:e1:8d:d6:e0:1c:
                    d9:b6:45:f9:23:99:69:f1:5c:d2:c6:6b:47:b1:a8:
                    9b:15:7f:d2:7f:16:3d:b4:15:ea:05:b7:82:fc:6e:
                    79:36:74:d1:43:7c:63:9c:27:53:22:e3:88:fb:c5:
                    9b:42:1e:2b:fd:86:ee:90:f0:37:6b:d9:95:5a:3c:
                    9f:9f:0d:62:fe:ee:7c:ba:82:1c:46:d6:63:21:8b:
                    10:41:af:41:26:b6:60:1a:a1:e9:f0:2b:76:80:96:
                    c3:bf:9b:0b:ac:b0:d0:e4:2b:4f:93:b2:2f:f7:9d:
                    f3:3f:1a:82:82:01:eb:c9:93:dd:3c:55:6d:0d:b3:
                    28:1d:cc:29:e8:05:09:b2:19:dd:f6:70:9e:28:83:
                    5d:42:95:5a:f0:87:79:36:b4:cd:a6:48:39:55:95:
                    7e:5b:b4:f8:3a:44:65:3f:7b:73:bb:bc:97:e2:02:
                    42:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FC:F6:14:0E:FA:13:FE:03:C4:C9:BA:5E:22:4C:0E:D0:3B:00:F0
            X509v3 Authority Key Identifier:
                keyid:05:C9:6A:1B:8C:43:C6:C3:5C:AE:40:8D:6C:8C:85:29:23:DD:B1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/0/05C96A1B8C43C6C35CAE408D6C8C852923DDB1BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BclqG4xDxsNcrkCNbIyFKSPdsbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/0/AS209025.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209025

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:75:a3:8e:65:6b:f7:9d:86:ef:e9:c1:d1:81:40:d6:59:
         2a:ca:eb:43:0b:79:b4:14:fd:b8:38:b5:5f:56:f1:7e:06:e2:
         a4:4e:ec:f1:ea:fc:48:9a:b1:b3:a2:07:f6:9d:ca:c4:5b:3e:
         fb:cb:cf:99:11:22:fa:3c:c5:75:a7:8e:ea:e1:1f:45:8c:2a:
         eb:e2:c8:af:43:20:a9:f2:5b:41:f7:e3:9b:94:07:49:ab:7d:
         4e:ae:44:ba:2e:ce:38:17:4d:08:5d:64:ef:f3:2c:6d:4d:a6:
         34:b9:be:a7:de:c1:49:65:d2:69:15:13:bf:3f:bd:e5:23:09:
         22:20:11:4e:26:91:d6:d2:85:c7:f8:d5:5b:16:e5:95:b9:0d:
         5b:97:d7:4e:aa:08:b5:74:f5:19:90:d7:dc:ef:3a:76:e8:b9:
         d1:6e:80:56:c4:10:cf:93:c4:39:17:68:2c:3b:b3:9d:46:97:
         b4:1c:8f:8d:28:23:9f:3a:0e:25:ff:0d:79:f4:f2:91:cb:5d:
         87:da:15:17:59:8a:1c:4c:8e:15:9a:76:92:98:bd:55:6f:ac:
         6f:1a:e5:ab:6d:2d:95:0f:f8:27:45:83:ed:ec:fe:cd:0b:55:
         a9:27:66:5e:ab:39:ff:a6:b4:70:04:89:15:80:dc:20:53:45:
         5f:ca:2a:28
-----BEGIN CERTIFICATE-----
MIIElTCCA32gAwIBAgIUW0e41TGq1voqPhE5XXsbj2CYJNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVjOTZhMWI4YzQzYzZjMzVjYWU0MDhkNmM4Yzg1Mjky
M2RkYjFiYTAeFw0yMzEyMDExMTUxNDlaFw0yNDExMjkxMTU2NDlaMDMxMTAvBgNV
BAMTKDZERkNGNjE0MEVGQTEzRkUwM0M0QzlCQTVFMjI0QzBFRDAzQjAwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLIVKnOfYy3rEem5mgJjSV4DaT
BrZuRjrT30Z5hc+8ccwh9Zq7Wgw4bRKiYiHCbhFhs5oSodYDbNCqEucQtG57yJ12
9dlxctKWzrjc3lU07zl7TgjhjdbgHNm2RfkjmWnxXNLGa0exqJsVf9J/Fj20FeoF
t4L8bnk2dNFDfGOcJ1Mi44j7xZtCHiv9hu6Q8Ddr2ZVaPJ+fDWL+7ny6ghxG1mMh
ixBBr0EmtmAaoenwK3aAlsO/mwussNDkK0+Tsi/3nfM/GoKCAevJk908VW0Nsygd
zCnoBQmyGd32cJ4og11ClVrwh3k2tM2mSDlVlX5btPg6RGU/e3O7vJfiAkLxAgMB
AAGjggGfMIIBmzAdBgNVHQ4EFgQUbfz2FA76E/4DxMm6XiJMDtA7APAwHwYDVR0j
BBgwFoAUBclqG4xDxsNcrkCNbIyFKSPdsbowDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS5uYXAucmUvcmVwby9wb25nZXJ5LzAv
MDVDOTZBMUI4QzQzQzZDMzVDQUU0MDhENkM4Qzg1MjkyM0REQjFCQS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0JjbHFHNHhEeHNOY3JrQ05iSXlGS1NQZHNiby5j
ZXIwSwYIKwYBBQUHAQsEPzA9MDsGCCsGAQUFBzALhi9yc3luYzovL3Jwa2kubmFw
LnJlL3JlcG8vcG9uZ2VyeS8wL0FTMjA5MDI1LmFzYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMwgTANBgkqhkiG9w0B
AQsFAAOCAQEAOg51o45la/edhu/pwdGBQNZZKsrrQwt5tBT9uDi1X1bxfgbipE7s
8er8SJqxs6IH9p3KxFs++8vPmREi+jzFdaeO6uEfRYwq6+LIr0MgqfJbQffjm5QH
Sat9Tq5Eui7OOBdNCF1k7/MsbU2mNLm+p97BSWXSaRUTvz+95SMJIiARTiaR1tKF
x/jVWxbllbkNW5fXTqoItXT1GZDX3O86dui50W6AVsQQz5PEORdoLDuznUaXtByP
jSgjnzoOJf8NefTykctdh9oVF1mKHEyOFZp2kpi9VW+sbxrlq20tlQ/4J0WD7ez+
zQtVqSdmXqs5/6a0cASJFYDcIFNFX8oqKA==
-----END CERTIFICATE-----
Generated at Wed May 15 17:51:22 2024 by rpki-client on console-fra.rpki-client.org