Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/AS48070.asa
File:                     AS48070.asa (raw, json)
Hash identifier:          U7c8ZCx8U9BSDJIU+vDZcbf7Z0p/WbWB58jQYmSEAa8=
Subject key identifier:   0E:68:65:BE:1F:9E:37:3C:DB:46:AA:F0:10:AF:39:87:6F:AF:86:7B
Certificate issuer:       /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial:       19C534FDC36B39FB2C96DB8364A92F3F13B4D7ED
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/AS48070.asa
Signing time:             Tue 07 Nov 2023 11:49:05 +0000
ASPA not before:          Tue 07 Nov 2023 11:44:05 +0000
ASPA not after:           Tue 05 Nov 2024 11:49:05 +0000
Customer ASID:            48070
Providers:                AS: 174
                          AS: 1299

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c5:34:fd:c3:6b:39:fb:2c:96:db:83:64:a9:2f:3f:13:b4:d7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
        Validity
            Not Before: Nov  7 11:44:05 2023 GMT
            Not After : Nov  5 11:49:05 2024 GMT
        Subject: CN=0E6865BE1F9E373CDB46AAF010AF39876FAF867B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:78:7a:93:56:4a:0c:18:a7:2c:5e:1b:34:38:
                    fb:16:5e:ef:9b:eb:92:8a:97:8a:ea:38:ef:26:61:
                    d5:1b:16:c1:23:65:a2:b0:14:79:52:24:3c:67:8c:
                    72:20:6d:a7:17:eb:fb:4d:a8:c9:6d:c6:ea:3e:a0:
                    e6:13:f7:b3:04:6c:57:3c:c3:8a:9f:f7:4e:ef:37:
                    38:13:ab:36:a1:a7:b8:af:da:d9:64:a6:7b:54:3e:
                    d2:32:75:5f:24:bd:07:99:b3:48:af:68:cf:8f:e8:
                    89:39:dd:5f:48:f7:48:19:2e:e3:94:34:44:41:93:
                    36:a8:fd:24:23:23:cf:e1:db:3b:2c:e5:c5:72:d2:
                    36:a0:47:6c:99:6e:6f:51:f6:3b:cc:f2:47:85:d5:
                    ff:36:32:6a:9f:56:f3:9b:cc:70:15:f8:36:81:f5:
                    13:b4:e3:41:28:55:4d:51:49:d5:91:19:a0:38:8e:
                    42:bb:d8:15:41:34:72:16:2e:be:2a:0f:6c:4b:78:
                    90:86:96:55:54:9c:be:df:5c:ba:ca:b8:6d:0d:63:
                    b6:b4:b7:fd:5c:ad:9f:5e:96:3e:b7:09:30:2f:f5:
                    1f:43:98:66:64:60:d0:72:22:f8:01:28:2c:eb:77:
                    9f:d5:f5:94:d4:00:d5:a7:b1:71:43:03:8d:38:37:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:68:65:BE:1F:9E:37:3C:DB:46:AA:F0:10:AF:39:87:6F:AF:86:7B
            X509v3 Authority Key Identifier:
                keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/AS48070.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  48070

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:73:a7:51:3e:1c:d5:11:42:4c:5b:58:6d:49:d6:e8:88:
         02:fa:21:ae:26:b3:ab:16:e0:30:e1:b3:c6:58:66:22:51:84:
         6a:d2:24:fa:65:e0:01:fd:a3:ef:94:e8:1b:0d:a4:6a:3b:f1:
         81:58:0b:7d:42:c1:4b:cc:8d:da:5e:64:89:96:7b:1a:5f:c2:
         4b:24:f7:b7:b4:2e:74:ab:00:6f:57:7d:66:48:8b:1c:6b:c8:
         b1:57:a7:84:e9:17:52:23:6e:bc:53:11:16:f5:4b:c5:60:4a:
         28:59:91:33:e6:51:ff:26:45:d2:b8:dd:89:14:22:2c:ea:7a:
         5f:ad:b7:8b:90:e2:e1:f9:5b:b5:2f:ee:0f:5d:95:c9:e3:19:
         f3:2c:ae:ec:78:56:cc:0e:56:33:c3:dd:d2:95:49:84:a7:9d:
         cb:dd:8e:2d:79:10:71:3e:15:b6:81:9b:ee:f4:d7:ee:7d:46:
         dd:c9:45:d0:18:50:50:a5:18:83:56:93:a2:36:92:cf:db:16:
         41:ac:59:0b:ba:2c:a9:32:78:9f:42:8d:b6:de:c2:09:49:0d:
         8e:4e:40:d5:f4:2d:6a:7a:85:fa:bb:da:05:d8:32:d9:94:95:
         52:1c:b9:a0:af:42:e5:52:00:8b:bd:54:d4:70:1f:94:e0:b5:
         1a:24:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 11:19:00 2024 by rpki-client on console-ams.rpki-client.org