Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/22/AS210561.asa
File:                     AS210561.asa (raw, json)
Hash identifier:          Qe8OgId1v9zZPPYOmwPt5/g//DFEmp21uLH15UzrDes=
Subject key identifier:   F0:74:87:C9:F6:2C:3F:21:E1:BD:09:8B:90:0C:BE:39:17:FC:17:7D
Certificate issuer:       /CN=48a8a0377d0e3283d7da89a9eec3ed81617b47a6
Certificate serial:       1B0B0B735E4BAE32542DD2AF5D99559C6D3FDD8E
Authority key identifier: 48:A8:A0:37:7D:0E:32:83:D7:DA:89:A9:EE:C3:ED:81:61:7B:47:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SKigN30OMoPX2omp7sPtgWF7R6Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/22/AS210561.asa
Signing time:             Mon 23 Oct 2023 10:30:41 +0000
ASPA not before:          Mon 23 Oct 2023 10:25:41 +0000
ASPA not after:           Mon 21 Oct 2024 10:30:41 +0000
Customer ASID:            210561
Providers:                AS: 207960

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/22/48A8A0377D0E3283D7DA89A9EEC3ED81617B47A6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/22/48A8A0377D0E3283D7DA89A9EEC3ED81617B47A6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SKigN30OMoPX2omp7sPtgWF7R6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 May 2024 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0b:0b:73:5e:4b:ae:32:54:2d:d2:af:5d:99:55:9c:6d:3f:dd:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48a8a0377d0e3283d7da89a9eec3ed81617b47a6
        Validity
            Not Before: Oct 23 10:25:41 2023 GMT
            Not After : Oct 21 10:30:41 2024 GMT
        Subject: CN=F07487C9F62C3F21E1BD098B900CBE3917FC177D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:0f:d3:0d:03:f1:78:48:d6:ac:c0:c5:03:
                    09:4e:ab:ec:16:36:d9:fd:2b:39:01:53:73:34:97:
                    57:ab:ac:f5:35:1e:7c:7f:2a:57:ee:e8:65:99:0a:
                    94:f8:b9:7a:8d:1b:23:ea:3d:5d:84:d5:d8:a2:45:
                    18:88:e9:42:7c:39:e5:85:35:73:fe:65:cf:77:b1:
                    d4:af:08:de:5b:e6:03:18:f8:17:07:8a:a9:a7:1f:
                    70:d5:f3:ec:7d:9d:6c:2d:d2:dc:6b:24:a8:2d:a6:
                    10:2b:a5:d9:9f:5d:a1:5f:95:1a:fb:b8:83:b8:1f:
                    c6:0c:0c:5e:3e:55:1e:a9:b3:cb:94:4f:8d:05:f9:
                    8e:38:c5:e5:18:25:62:16:75:e3:fb:f0:05:80:c7:
                    0c:9a:e8:6e:6c:ac:69:9c:83:79:6d:0f:5a:14:6f:
                    58:25:ee:de:55:c8:17:bb:ea:dc:14:a3:ac:f3:ce:
                    df:ae:d8:ac:28:0d:fa:e7:9e:b1:4a:e1:23:18:06:
                    6b:75:f0:b7:04:9a:28:64:4d:1b:37:22:48:ac:bd:
                    8e:0f:fe:5c:2e:c6:b0:1f:78:76:ab:ab:8b:09:66:
                    cd:0b:d7:c9:a9:e6:fb:f5:3c:ab:f3:16:0b:80:7f:
                    53:66:63:47:2b:31:54:63:80:0a:d9:19:2b:77:e2:
                    8e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:74:87:C9:F6:2C:3F:21:E1:BD:09:8B:90:0C:BE:39:17:FC:17:7D
            X509v3 Authority Key Identifier:
                keyid:48:A8:A0:37:7D:0E:32:83:D7:DA:89:A9:EE:C3:ED:81:61:7B:47:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/22/48A8A0377D0E3283D7DA89A9EEC3ED81617B47A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKigN30OMoPX2omp7sPtgWF7R6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/22/AS210561.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210561

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:32:ab:f9:cb:35:9f:88:3e:2a:ed:0b:ca:07:0d:3b:2e:
         a5:99:66:36:ef:81:0f:8e:2d:a0:97:45:8f:a2:21:ec:40:03:
         78:00:c4:5c:30:21:cd:83:25:89:10:22:54:f3:c3:2b:ba:aa:
         bd:ad:59:6c:6c:f3:84:a3:ce:4f:8a:ea:2c:77:67:9e:a3:db:
         ca:ab:25:9f:e4:59:87:38:66:a7:67:56:6b:b0:60:8c:61:cf:
         84:f0:8f:bf:4d:cd:3b:f5:4c:62:20:72:6a:70:a7:1b:7c:12:
         c9:99:83:1d:05:3b:bc:10:e7:f8:98:57:a8:02:c6:87:3f:70:
         a3:17:06:d7:a4:74:07:9a:43:4f:5a:bb:c1:e2:0b:01:72:1b:
         13:4a:f4:95:1e:eb:f7:83:28:d0:96:52:b0:26:40:5c:4f:2a:
         54:3d:f6:f0:28:e3:d4:25:15:8a:06:d3:47:a8:26:b7:79:55:
         a3:d8:75:55:a5:dc:29:5e:b8:bf:cc:08:c8:dd:3d:fe:f0:1b:
         25:4a:31:70:7f:10:6e:7a:4a:09:f4:fe:36:43:15:03:a1:f5:
         b0:65:8d:e1:bd:b4:c6:e7:ab:28:9c:96:79:86:bb:59:b3:2b:
         93:a6:13:04:1f:f2:51:b7:ab:11:c9:df:6b:f5:d5:23:17:8d:
         db:9e:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:09:21 2024 by rpki-client on console-fra.rpki-client.org