Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/AS212245.asa
File:                     AS212245.asa (raw, json)
Hash identifier:          P4UVyE/FyLaBRJS5pK4w3QTRcW/z78Rk3l4g5Tmt+qY=
Subject key identifier:   C4:6B:44:2A:EA:1A:62:C8:D7:DC:F6:1D:01:42:10:32:FC:51:EA:1E
Certificate issuer:       /CN=974f44dcd416495219413c1b0d69a1f87f507288
Certificate serial:       28872C1D19675F0DE46E48094587F434148A0823
Authority key identifier: 97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/AS212245.asa
Signing time:             Mon 23 Oct 2023 10:30:42 +0000
ASPA not before:          Mon 23 Oct 2023 10:25:42 +0000
ASPA not after:           Mon 21 Oct 2024 10:30:42 +0000
Customer ASID:            212245
Providers:                AS: 200242
                          AS: 212068

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 May 2024 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:87:2c:1d:19:67:5f:0d:e4:6e:48:09:45:87:f4:34:14:8a:08:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974f44dcd416495219413c1b0d69a1f87f507288
        Validity
            Not Before: Oct 23 10:25:42 2023 GMT
            Not After : Oct 21 10:30:42 2024 GMT
        Subject: CN=C46B442AEA1A62C8D7DCF61D01421032FC51EA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:db:17:0e:e1:c4:4b:ed:2e:58:ff:5a:6b:
                    1d:82:db:98:8d:e8:f8:ae:78:3b:bc:09:f6:f2:47:
                    00:9b:32:20:69:d2:f6:a5:05:8a:31:74:3b:40:02:
                    c2:c7:c5:dd:cf:c2:75:cf:4b:fb:b6:c6:33:ee:27:
                    83:62:9e:d8:6e:7c:77:18:fa:df:3b:7c:bc:a6:01:
                    3e:53:02:ee:83:53:99:ca:17:f1:63:e0:7a:b1:bc:
                    9c:00:a1:ba:98:e0:30:ec:23:13:b3:7e:99:1a:49:
                    fd:d4:58:bc:fb:12:20:8c:e5:7b:55:dc:0a:1e:b1:
                    f1:d4:09:9c:b6:a9:ef:fa:53:b8:59:89:35:34:a1:
                    6c:54:a3:49:4b:e9:02:80:1e:cd:58:08:32:ee:5f:
                    7a:48:d7:fc:8a:02:6a:de:f1:c1:1e:d8:cf:77:02:
                    b7:4a:03:e7:da:c1:e0:91:62:b4:df:8e:e8:3f:a1:
                    2c:2a:58:53:31:f4:0a:0b:19:fb:9c:97:70:ba:df:
                    33:df:f4:8b:10:86:8e:74:57:dc:c4:43:28:5e:af:
                    ad:e7:72:30:b4:b6:97:a0:e8:a9:a5:ed:b9:d4:7e:
                    da:21:f5:af:93:12:13:de:46:7d:c3:9a:37:18:58:
                    58:db:aa:ae:0f:9d:e0:8e:66:ee:23:48:c9:5b:b7:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6B:44:2A:EA:1A:62:C8:D7:DC:F6:1D:01:42:10:32:FC:51:EA:1E
            X509v3 Authority Key Identifier:
                keyid:97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/AS212245.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212245

    Signature Algorithm: sha256WithRSAEncryption
         aa:cf:6e:c1:64:31:49:27:7f:64:b6:03:3a:d8:41:dd:06:1d:
         23:8d:f3:ab:0c:c1:f9:74:2d:94:08:19:ea:90:07:07:51:a4:
         53:98:df:e4:59:28:a3:82:eb:99:b3:0d:24:eb:42:09:47:95:
         c6:c7:66:f8:fe:47:0e:37:4c:81:4a:a4:6d:2a:95:67:b5:7b:
         c8:b7:c1:34:d5:69:8b:0f:f8:b9:af:ec:c5:33:7b:51:dc:f7:
         4a:35:5e:3d:51:44:15:34:b4:e6:c9:1c:b0:ea:6d:cd:27:e1:
         fc:85:51:25:e9:0d:88:24:35:e1:d8:41:dd:02:90:68:e7:fa:
         ee:2e:73:df:80:11:60:34:e9:0f:19:a0:e8:e9:38:cc:2a:6b:
         91:ef:9d:b8:9c:4c:a5:18:14:9e:88:8c:2a:af:19:a1:c0:8d:
         c5:70:8a:76:ab:c8:4d:7b:e0:9d:b3:47:60:d4:ff:cd:72:e3:
         98:0a:ed:86:22:60:99:92:6c:d5:fc:3a:63:b1:27:fb:10:3e:
         6b:d9:f3:41:1a:73:c5:65:35:09:36:7c:b3:00:53:5b:08:be:
         93:57:fc:26:6c:03:c0:1f:35:0e:12:88:48:31:da:af:9a:3f:
         bb:1a:bc:02:e0:0d:7d:7c:93:74:db:e3:5c:41:3c:ba:55:5b:
         f7:de:f4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:09:21 2024 by rpki-client on console-fra.rpki-client.org