Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AS200242.asa
File:                     AS200242.asa (raw, json)
Hash identifier:          gT09DOVmNan+pMvBy1JtIzU+QQDX1+iXRtrg79GZJws=
Subject key identifier:   F6:C7:BE:C5:03:DB:50:0F:02:2C:90:F5:88:38:45:5A:87:8F:2A:C4
Certificate issuer:       /CN=ad660e4b7c1d34b525ce765d04229d17310e71c7
Certificate serial:       1F4E3437B96F73F753F82F1F652BA59AF60954DF
Authority key identifier: AD:66:0E:4B:7C:1D:34:B5:25:CE:76:5D:04:22:9D:17:31:0E:71:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rWYOS3wdNLUlznZdBCKdFzEOccc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AS200242.asa
Signing time:             Mon 22 Apr 2024 19:27:08 +0000
ASPA not before:          Mon 22 Apr 2024 19:22:08 +0000
ASPA not after:           Mon 21 Apr 2025 19:27:08 +0000
Customer ASID:            200242
Providers:                AS: 835
                          AS: 6939
                          AS: 20473
                          AS: 21738
                          AS: 34465
                          AS: 34927
                          AS: 59678
                          AS: 210152

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AD660E4B7C1D34B525CE765D04229D17310E71C7.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AD660E4B7C1D34B525CE765D04229D17310E71C7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rWYOS3wdNLUlznZdBCKdFzEOccc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 May 2024 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4e:34:37:b9:6f:73:f7:53:f8:2f:1f:65:2b:a5:9a:f6:09:54:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad660e4b7c1d34b525ce765d04229d17310e71c7
        Validity
            Not Before: Apr 22 19:22:08 2024 GMT
            Not After : Apr 21 19:27:08 2025 GMT
        Subject: CN=F6C7BEC503DB500F022C90F58838455A878F2AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:49:e6:5a:1f:4f:1b:83:21:bf:9d:49:fa:
                    fe:7c:c6:d0:cb:6c:ca:bc:a4:e4:75:92:00:a0:9c:
                    e1:60:c3:ac:48:a2:63:12:1a:38:18:4d:70:69:ad:
                    1f:91:87:d1:3d:60:d6:5a:6d:ac:e0:ea:c3:01:22:
                    04:72:b4:7d:05:1a:0d:fa:5b:ab:c6:f2:fa:a4:54:
                    16:86:64:72:49:2a:5b:2b:dd:48:00:d9:81:f5:78:
                    92:ee:56:1b:4f:10:fb:c3:ce:71:d0:35:7a:fe:1a:
                    b2:4f:d3:11:8e:14:44:0f:08:75:bb:d5:70:84:0e:
                    10:3e:3a:fd:85:81:62:5d:c5:23:e3:fe:9a:af:d7:
                    c3:0f:d1:ea:d4:20:0b:2b:14:02:de:16:50:ac:08:
                    38:5b:95:f8:bc:df:13:f4:fb:8c:2e:74:e4:88:f8:
                    65:dd:76:d1:ec:c0:3d:28:e7:0a:34:2f:ff:59:fd:
                    ab:2c:05:f3:5c:cb:88:36:6b:32:c8:c7:db:44:6e:
                    d2:77:13:21:d9:1c:9d:fb:8e:9d:b2:3e:15:4a:e0:
                    3c:ac:79:92:0a:e0:be:21:3b:0a:d1:b9:33:c9:e3:
                    e6:df:c8:c8:e7:6d:66:1b:f8:d6:01:2d:e5:32:b8:
                    a5:d9:10:6f:0d:82:f3:05:31:65:b0:4e:a4:61:15:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C7:BE:C5:03:DB:50:0F:02:2C:90:F5:88:38:45:5A:87:8F:2A:C4
            X509v3 Authority Key Identifier:
                keyid:AD:66:0E:4B:7C:1D:34:B5:25:CE:76:5D:04:22:9D:17:31:0E:71:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AD660E4B7C1D34B525CE765D04229D17310E71C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWYOS3wdNLUlznZdBCKdFzEOccc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4344ff29-7184-47bd-9172-3609f59ce6df/3/AS200242.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200242

    Signature Algorithm: sha256WithRSAEncryption
         91:24:dd:9c:88:d8:9b:75:84:c2:35:f6:fb:3d:0c:72:28:4e:
         42:9c:8d:dc:93:e5:9b:07:08:04:36:e0:43:c4:68:d5:ac:a9:
         d7:d9:1d:b1:41:03:1d:90:99:da:80:e3:2c:5f:43:1e:8f:38:
         50:96:23:a5:48:67:6b:2f:1e:66:80:c6:77:65:1e:51:a7:cb:
         84:fb:f8:c9:9e:cb:b8:d9:35:91:c5:07:40:24:ed:4f:8c:02:
         7a:2c:32:a7:e4:1b:3c:f2:76:52:12:da:7b:ee:2b:e8:07:ce:
         25:4b:c3:9e:84:8d:54:15:ce:50:b8:42:cd:9a:1a:81:98:2b:
         81:ff:56:e7:16:6e:c8:26:17:d3:6e:eb:71:38:e6:37:40:10:
         2f:e6:28:7c:cd:65:03:e9:f0:68:62:40:36:db:38:06:12:ff:
         bb:45:57:ba:fe:3e:db:62:c7:f1:d4:1a:c5:c5:43:f6:45:62:
         c0:f5:e8:a2:6d:e4:75:7d:a4:ac:1f:71:5c:d9:b7:63:0f:35:
         65:07:ff:fd:eb:67:4e:d3:3a:65:91:81:66:fd:e9:b2:06:5f:
         89:c3:58:b7:83:32:11:84:4f:9a:f5:a0:19:9e:4a:18:1c:04:
         7c:ef:76:82:7f:ee:1c:a9:c5:10:66:9e:d9:40:55:a6:ed:ff:
         49:ba:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 06:15:35 2024 by rpki-client on console-ams.rpki-client.org