Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/AS202197.asa
File:                     AS202197.asa (raw, json)
Hash identifier:          Sq9izfmRcWaoTgeRyrc7rldozgdnpeb784owJd4Qt7s=
Subject key identifier:   2C:24:D7:8A:F8:8F:5D:D9:5A:C6:85:11:91:77:DE:0B:1D:22:B4:97
Certificate issuer:       /CN=49bff87337858f783807140b411f622360b146c2
Certificate serial:       252352091D11FDC8991575993352AA87EE8A670F
Authority key identifier: 49:BF:F8:73:37:85:8F:78:38:07:14:0B:41:1F:62:23:60:B1:46:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sb_4czeFj3g4BxQLQR9iI2CxRsI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/AS202197.asa
Signing time:             Thu 11 Apr 2024 00:46:10 +0000
ASPA not before:          Thu 11 Apr 2024 00:41:10 +0000
ASPA not after:           Thu 10 Apr 2025 00:46:10 +0000
Customer ASID:            202197
Providers:                AS: 945
                          AS: 39249
                          AS: 41051
                          AS: 48752
                          AS: 207656
                          AS: 216360

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sb_4czeFj3g4BxQLQR9iI2CxRsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 May 2024 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:23:52:09:1d:11:fd:c8:99:15:75:99:33:52:aa:87:ee:8a:67:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bff87337858f783807140b411f622360b146c2
        Validity
            Not Before: Apr 11 00:41:10 2024 GMT
            Not After : Apr 10 00:46:10 2025 GMT
        Subject: CN=2C24D78AF88F5DD95AC685119177DE0B1D22B497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:86:58:9c:d7:bc:6c:4b:ba:01:56:ac:1c:
                    6c:a7:a7:c9:c1:19:a6:5e:5d:b5:17:f7:af:62:a0:
                    98:f5:51:73:15:55:41:98:55:3d:b8:e1:c9:f5:10:
                    19:65:aa:4f:bf:a8:4e:c9:65:24:dd:9b:d2:54:36:
                    e1:78:cd:16:e5:60:7b:a7:d2:ad:7a:42:91:03:8c:
                    cb:f6:ec:44:16:e8:4d:1d:e0:de:95:26:07:38:64:
                    53:2c:b9:d1:f4:2d:31:92:ef:83:7c:a4:1b:d6:91:
                    a5:eb:12:15:31:79:a7:14:e2:be:a8:fd:70:43:7c:
                    de:49:e5:5c:8b:8a:ea:27:73:bd:4a:b3:f5:26:af:
                    99:81:b5:f0:c8:ea:c6:0c:25:8b:d2:87:37:a1:e3:
                    55:1e:07:50:cc:11:16:62:57:f8:45:f3:41:46:c5:
                    33:c7:1e:ba:a7:12:45:55:68:54:ec:2e:80:d5:66:
                    7b:a5:62:70:5e:aa:11:4c:05:8a:18:ac:b2:91:90:
                    d2:c1:29:5c:1a:b6:ef:13:a6:32:9f:53:60:5b:b1:
                    02:b1:af:1c:03:23:79:4a:5f:50:22:60:83:01:5b:
                    49:73:38:62:bf:dc:00:1d:a7:b6:04:b7:98:06:92:
                    d9:7d:af:32:a6:50:10:22:98:b5:f0:65:19:b1:85:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:24:D7:8A:F8:8F:5D:D9:5A:C6:85:11:91:77:DE:0B:1D:22:B4:97
            X509v3 Authority Key Identifier:
                keyid:49:BF:F8:73:37:85:8F:78:38:07:14:0B:41:1F:62:23:60:B1:46:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb_4czeFj3g4BxQLQR9iI2CxRsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/AS202197.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202197

    Signature Algorithm: sha256WithRSAEncryption
         67:fa:fa:01:c2:f9:de:6d:49:1a:be:90:4f:ef:30:70:2a:b2:
         9f:66:9b:bd:6a:b1:29:72:a4:8b:83:3e:b4:f7:08:d9:3e:21:
         32:33:e4:65:80:86:f9:0c:04:f0:ea:61:9a:5d:9b:bf:a2:39:
         a7:3b:9c:dd:5e:da:99:91:93:24:78:8b:99:e8:b0:89:8d:98:
         b9:83:cd:ae:8d:37:2c:83:a1:e6:b8:57:63:3d:fd:03:e5:62:
         43:27:a9:77:d5:2f:17:d7:e5:94:83:9e:a8:c1:36:27:be:23:
         7f:4d:9b:4b:b9:e2:a6:50:c9:ab:12:00:f0:b3:c2:8a:a5:d5:
         2a:77:19:60:38:3d:46:17:7f:06:69:e4:8f:a0:db:7c:25:43:
         3a:da:6f:0b:63:14:29:18:5c:d8:61:eb:ed:d6:c2:1c:c3:95:
         44:fd:10:7f:a0:42:76:da:4b:8d:b6:0e:67:78:b9:c3:12:17:
         6e:27:f6:56:cb:b8:41:72:a2:53:1a:f4:c7:ee:af:df:f7:5b:
         46:b5:0b:c3:12:3b:62:5d:36:1d:7b:0e:55:51:f5:ad:f8:00:
         b0:bd:e2:14:fe:d7:3c:09:6c:e6:c8:cf:b2:94:5f:9e:7a:5d:
         75:81:17:b4:ce:9c:dd:a0:6f:1f:c0:78:d6:5c:3a:f2:3e:5b:
         ff:87:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 08:17:21 2024 by rpki-client on console-ams.rpki-client.org