Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/0/AS47311.asa
File:                     AS47311.asa (raw, json)
Hash identifier:          x8dV5xtrQ0H5/4X6v/I42rHKUJWaPzWmid/vNAV1UOE=
Subject key identifier:   35:F9:1F:4A:86:7B:5A:15:43:2D:FA:22:E7:26:DC:02:16:17:2C:E4
Certificate issuer:       /CN=8781b66616778405ac017405e4b756c5b6556acd
Certificate serial:       4B36CC8B5F12F815822332391D42C4AB723FD873
Authority key identifier: 87:81:B6:66:16:77:84:05:AC:01:74:05:E4:B7:56:C5:B6:55:6A:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4G2ZhZ3hAWsAXQF5LdWxbZVas0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/0/AS47311.asa
Signing time:             Tue 09 Apr 2024 17:40:29 +0000
ASPA not before:          Tue 09 Apr 2024 17:35:29 +0000
ASPA not after:           Tue 08 Apr 2025 17:40:29 +0000
Customer ASID:            47311
Providers:                AS: 945
                          AS: 6939
                          AS: 8849
                          AS: 15353
                          AS: 34927
                          AS: 53616
                          AS: 58396
                          AS: 150279
                          AS: 400818

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/0/8781B66616778405AC017405E4B756C5B6556ACD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/0/8781B66616778405AC017405E4B756C5B6556ACD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4G2ZhZ3hAWsAXQF5LdWxbZVas0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:36:cc:8b:5f:12:f8:15:82:23:32:39:1d:42:c4:ab:72:3f:d8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8781b66616778405ac017405e4b756c5b6556acd
        Validity
            Not Before: Apr  9 17:35:29 2024 GMT
            Not After : Apr  8 17:40:29 2025 GMT
        Subject: CN=35F91F4A867B5A15432DFA22E726DC0216172CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:2d:bf:e2:24:59:9b:00:66:17:89:40:35:
                    09:2d:bd:0f:06:7c:64:c9:e6:c7:e6:ae:35:e2:0c:
                    fd:31:e1:50:b1:83:32:06:8f:e7:a3:32:d4:6f:83:
                    74:9b:e9:e6:1d:da:0b:e9:dc:6c:1e:7b:6e:06:11:
                    d0:3c:6c:f2:e6:e4:f5:c4:20:ba:54:6d:12:a0:0a:
                    6e:3f:ce:f8:b6:59:24:bf:d8:44:56:61:92:38:cf:
                    9f:aa:92:90:05:72:33:9d:d4:7d:d3:21:9e:81:18:
                    ae:79:4c:5b:df:0b:a1:fc:c8:18:ee:ae:32:4b:73:
                    19:ef:1a:10:59:38:28:36:1a:46:ae:ff:62:b3:9e:
                    42:22:d9:b1:0c:2b:59:7a:a4:81:63:98:c0:e7:b0:
                    c8:23:dd:96:fb:67:7a:fd:a0:24:30:bb:1e:3e:4c:
                    66:35:46:96:04:6d:ed:fa:3a:94:83:cf:7a:95:cd:
                    b4:48:f7:f3:ca:3e:03:ff:e7:66:47:92:6c:97:e3:
                    30:d1:06:e2:8e:0a:b4:c8:1b:08:e2:82:a2:32:62:
                    ea:af:74:5a:11:4c:6c:d0:b1:40:1b:4c:3a:77:c1:
                    0a:3a:4c:d6:b6:a8:38:13:0f:aa:45:0b:06:2e:10:
                    47:f1:e5:ff:48:e2:84:80:c4:6c:b2:36:39:de:19:
                    92:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F9:1F:4A:86:7B:5A:15:43:2D:FA:22:E7:26:DC:02:16:17:2C:E4
            X509v3 Authority Key Identifier:
                keyid:87:81:B6:66:16:77:84:05:AC:01:74:05:E4:B7:56:C5:B6:55:6A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/0/8781B66616778405AC017405E4B756C5B6556ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4G2ZhZ3hAWsAXQF5LdWxbZVas0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/0/AS47311.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47311

    Signature Algorithm: sha256WithRSAEncryption
         27:38:5a:76:d4:c8:fb:7c:c3:47:a5:74:f8:f3:8c:70:88:22:
         9b:b5:dd:61:d1:7b:06:e5:5d:36:24:88:66:c3:f7:64:12:d2:
         11:82:02:24:3e:f9:e8:21:1a:c8:f4:ce:df:1c:30:0f:af:45:
         92:07:e1:3c:60:42:b2:80:a2:31:b5:43:a1:5c:8f:e2:3f:52:
         e7:9f:f2:65:0d:c7:cd:63:11:e0:97:b2:1b:d6:d4:2d:6f:07:
         1b:44:09:fb:c2:0a:21:d1:e5:44:78:e1:34:13:5d:f4:ee:d8:
         f0:d7:71:3f:9f:be:26:b1:3c:7b:e4:cb:10:aa:0b:be:98:09:
         f6:0f:11:7e:ce:6e:9b:0f:0f:a6:31:cc:4d:13:c4:5a:34:7f:
         ad:1a:2b:a8:42:94:4c:cf:28:d5:8a:94:ca:04:2e:db:bf:ec:
         d6:6a:be:f2:dd:48:46:98:3f:4e:10:5f:a7:32:23:e4:e0:ac:
         da:3e:fe:4b:ec:cc:5b:47:8d:d3:1a:ff:79:59:b3:9a:9b:43:
         16:07:15:0a:ca:aa:57:ab:21:89:10:15:72:27:be:f6:dc:a1:
         ab:cc:1a:fe:47:e3:60:e2:b4:d6:da:2c:fd:fe:81:49:01:c3:
         a8:a1:28:4e:70:7e:5a:c5:b2:84:4e:41:f5:f4:a9:95:8c:27:
         cc:50:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:27:42 2024 by rpki-client on console-ams.rpki-client.org