Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/AS60223.asa
File:                     AS60223.asa (raw, json)
Hash identifier:          IUyuKKGy1A+zHB8/nnZl/Kk8JB7QDIJPzkRLt9A79CY=
Subject key identifier:   19:5D:58:06:93:DB:00:0D:D7:47:AD:8D:8E:0F:0C:FC:9C:BF:08:C6
Certificate issuer:       /CN=1a0115b000226a5cc9f89dd6f1bd8ae2ac57cc46
Certificate serial:       0A17D7125AEF91CF9507F8576688EBA79674E737
Authority key identifier: 1A:01:15:B0:00:22:6A:5C:C9:F8:9D:D6:F1:BD:8A:E2:AC:57:CC:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgEVsAAialzJ-J3W8b2K4qxXzEY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/AS60223.asa
Signing time:             Fri 19 Apr 2024 20:36:10 +0000
ASPA not before:          Fri 19 Apr 2024 20:31:10 +0000
ASPA not after:           Fri 18 Apr 2025 20:36:10 +0000
Customer ASID:            60223
Providers:                AS: 835
                          AS: 6939
                          AS: 51396

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GgEVsAAialzJ-J3W8b2K4qxXzEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:17:d7:12:5a:ef:91:cf:95:07:f8:57:66:88:eb:a7:96:74:e7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0115b000226a5cc9f89dd6f1bd8ae2ac57cc46
        Validity
            Not Before: Apr 19 20:31:10 2024 GMT
            Not After : Apr 18 20:36:10 2025 GMT
        Subject: CN=195D580693DB000DD747AD8D8E0F0CFC9CBF08C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:8a:6c:60:da:83:ef:8e:1e:9e:bd:5b:e1:
                    c6:7d:73:7c:98:78:e6:46:d1:64:2b:fc:c5:84:fd:
                    78:64:ab:f5:13:a8:f1:62:2b:f7:1a:2a:93:aa:de:
                    fa:55:46:ff:b0:08:bb:55:b1:a9:62:ab:5c:8c:7f:
                    37:f7:76:c7:33:bc:e2:33:79:19:6a:b5:a1:b8:55:
                    80:75:bb:b8:fd:e9:6c:e2:2f:80:1c:e3:6e:48:9b:
                    b8:7d:42:13:85:dd:b5:00:c7:6b:8a:c3:39:f9:82:
                    4f:7c:7a:96:66:09:53:ce:a9:d9:64:ed:51:2b:24:
                    0d:46:52:ae:d7:df:a8:70:b1:4c:22:63:f7:05:30:
                    ab:f4:0f:63:db:72:14:0e:fe:07:ec:83:31:dc:16:
                    92:9c:b2:39:94:c4:80:c5:df:7e:fd:9c:73:c8:25:
                    fc:f7:76:00:89:26:5d:55:92:de:3c:11:f1:46:66:
                    e5:b7:4b:bc:72:7f:61:ee:eb:be:a9:4c:eb:c0:18:
                    05:95:c7:fc:9b:98:34:2e:c5:3d:85:c7:9e:b2:fb:
                    57:9e:29:fc:a7:65:62:e5:6d:a2:af:1e:c1:3d:b5:
                    03:10:3c:16:2e:18:e5:d2:7a:66:5b:2d:1c:59:f0:
                    f1:b3:20:3a:70:3f:0d:2a:8c:76:a8:82:48:81:58:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5D:58:06:93:DB:00:0D:D7:47:AD:8D:8E:0F:0C:FC:9C:BF:08:C6
            X509v3 Authority Key Identifier:
                keyid:1A:01:15:B0:00:22:6A:5C:C9:F8:9D:D6:F1:BD:8A:E2:AC:57:CC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEVsAAialzJ-J3W8b2K4qxXzEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/AS60223.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60223

    Signature Algorithm: sha256WithRSAEncryption
         62:35:1d:1f:95:d7:e8:cd:d6:f8:ca:2c:33:87:24:cd:92:9b:
         2c:d5:01:dd:4e:e7:4d:b9:1a:de:d7:68:c1:26:e5:25:d7:82:
         05:fa:70:55:cb:34:01:09:76:39:a8:5d:69:23:fe:ee:03:e8:
         62:36:9a:fe:0c:81:4d:9f:a8:78:a3:e8:c5:83:cd:51:ee:f9:
         14:ff:b9:ee:20:eb:ab:2c:4e:4b:04:1c:6d:5a:80:20:65:b9:
         b1:49:7e:41:00:e6:83:f4:28:bc:59:13:a7:d0:a6:e3:1f:49:
         50:f9:1e:31:96:5a:a7:98:20:1a:2d:7b:6f:37:78:d1:00:ba:
         f3:b1:55:15:1d:54:a5:c6:73:98:63:37:01:c7:10:f4:ee:c1:
         b5:19:78:20:dc:39:47:12:0b:62:89:5f:35:a0:b3:0b:ab:f6:
         49:c8:60:9a:e4:c2:6e:d0:c5:1e:ba:ad:c8:b9:de:d2:de:3b:
         42:6f:ba:cd:af:af:12:0b:67:10:72:53:c1:e2:07:82:fd:9a:
         9b:9d:47:b1:c2:a7:82:f3:2d:4b:46:c6:9d:63:bf:c9:c9:79:
         a4:00:f4:13:46:60:d1:f9:7c:39:57:5d:12:75:b0:a8:95:43:
         20:c6:e7:e4:aa:55:8f:b9:53:ca:3a:8b:db:cf:0e:b3:d3:26:
         39:62:53:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 14:14:09 2024 by rpki-client on console-fra.rpki-client.org