Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/AS211244.asa
File:                     AS211244.asa (raw, json)
Hash identifier:          xNnTD1Tj+LfyQOBmPw0zrM5lmL7GtYR6ihBeIqSa7i8=
Subject key identifier:   05:68:3A:44:BC:83:0E:D8:B2:16:C4:76:FF:C2:64:AD:A4:43:43:96
Certificate issuer:       /CN=80a23eac4d620dc2c1b1701f21e46ecca05e4dbe
Certificate serial:       7BA5529E82ECDF58F795C5139C39334BB77A91BD
Authority key identifier: 80:A2:3E:AC:4D:62:0D:C2:C1:B1:70:1F:21:E4:6E:CC:A0:5E:4D:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKI-rE1iDcLBsXAfIeRuzKBeTb4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/AS211244.asa
Signing time:             Sat 28 Oct 2023 12:02:25 +0000
ASPA not before:          Sat 28 Oct 2023 11:57:25 +0000
ASPA not after:           Sat 26 Oct 2024 12:02:25 +0000
Customer ASID:            211244
Providers:                AS: 34927
                          AS: 207960

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gKI-rE1iDcLBsXAfIeRuzKBeTb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a5:52:9e:82:ec:df:58:f7:95:c5:13:9c:39:33:4b:b7:7a:91:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a23eac4d620dc2c1b1701f21e46ecca05e4dbe
        Validity
            Not Before: Oct 28 11:57:25 2023 GMT
            Not After : Oct 26 12:02:25 2024 GMT
        Subject: CN=05683A44BC830ED8B216C476FFC264ADA4434396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:a3:2b:10:9e:6c:2a:21:1a:46:ac:5d:d0:
                    0b:fe:b0:56:6d:b0:18:c5:f3:cf:c3:6e:f0:ae:d5:
                    ad:08:d8:e4:22:bb:ab:25:f1:b4:e2:fa:cd:be:4f:
                    c2:5a:67:19:c7:a8:5c:2d:47:7d:8f:a0:24:9a:de:
                    dc:a4:86:12:ab:ee:46:59:d6:b8:55:56:81:fb:b7:
                    34:27:29:a3:76:cf:1e:82:de:dc:89:06:6f:8a:42:
                    a9:fb:12:f1:cf:38:80:53:89:46:f2:ca:8e:eb:27:
                    ec:34:83:6e:ef:cf:da:29:c5:a1:b0:0e:66:f5:59:
                    42:ab:36:90:a7:a6:b3:7d:19:b5:34:9e:40:1f:b6:
                    7f:b2:a7:a4:42:db:0b:c8:de:9b:da:e3:74:80:28:
                    33:d2:b7:89:26:ed:cd:72:b7:79:08:7e:bf:bf:cd:
                    8b:77:f2:5e:29:8e:87:25:3f:e2:ca:f8:44:f5:8b:
                    05:cb:a4:d4:4a:90:cb:64:8d:bc:d8:20:3c:60:9d:
                    bf:cb:b0:d7:51:0b:dc:15:f0:31:3e:be:7d:90:7e:
                    d9:fe:c6:ba:97:b8:37:63:76:bd:fc:74:da:5c:da:
                    cb:92:ff:a6:b1:2f:26:80:8c:4f:2a:72:15:c9:87:
                    66:d0:89:c0:c6:ca:30:d2:8a:d3:2d:02:70:4b:90:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:68:3A:44:BC:83:0E:D8:B2:16:C4:76:FF:C2:64:AD:A4:43:43:96
            X509v3 Authority Key Identifier:
                keyid:80:A2:3E:AC:4D:62:0D:C2:C1:B1:70:1F:21:E4:6E:CC:A0:5E:4D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKI-rE1iDcLBsXAfIeRuzKBeTb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/AS211244.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  211244

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:ab:37:45:69:1c:87:06:7d:39:ee:9a:0b:f8:20:01:2e:
         a5:58:27:8f:7f:71:e4:22:cc:92:07:5c:0c:5f:2c:c0:f5:66:
         e8:05:41:5b:73:f1:6b:50:8c:e2:fb:ff:f5:f0:fd:0d:74:7c:
         b2:e9:4f:1d:65:47:d7:d3:c3:25:97:e8:70:ae:0f:72:1b:cb:
         d8:12:e0:00:c3:02:b8:3c:5e:8e:13:06:a4:c4:2a:66:d5:ca:
         6a:c1:0e:39:0b:da:4c:e5:51:09:56:04:19:b7:a1:9d:e0:2d:
         5e:c0:98:a8:0f:9f:b0:f6:b4:e7:8c:3b:e8:35:08:d9:4a:4e:
         1c:b2:de:67:c6:93:66:9f:8a:9f:e1:ad:c7:f2:16:d9:47:d2:
         d1:d1:78:db:03:30:e6:3e:5f:4d:90:c5:af:aa:d9:60:e4:63:
         92:77:61:18:7d:a4:ab:77:ce:83:22:ac:1e:65:c0:de:4d:23:
         a1:37:be:e5:2f:af:d5:a0:b9:aa:97:2a:39:cd:de:91:d9:d4:
         f3:ee:6f:73:67:e9:59:90:4a:a9:af:cb:a3:15:ce:ba:e9:10:
         72:83:cb:b4:3c:57:56:d2:b0:62:4c:8f:13:ba:bb:59:14:cb:
         9d:d2:50:46:a8:94:fe:bd:b8:22:b0:15:78:5e:ec:ee:49:cd:
         fe:79:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:27:44 2024 by rpki-client on console-ams.rpki-client.org