Autonomous System Provider Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/0/AS60223.asa
File:                     AS60223.asa (raw, json)
Hash identifier:          VPtvQsfy9hkQtY+govFQjm42rosel1PjQ0Wya72Fbe4=
Subject key identifier:   8D:1D:C1:02:66:FC:9A:86:28:F9:12:6E:93:8B:10:A9:59:E3:EB:8A
Certificate issuer:       /CN=0a84fe2b350f74843fcd98aede0cb4fca22a4cd4
Certificate serial:       5EB0056859937D0856CE3E3983B3DF2B4819CD04
Authority key identifier: 0A:84:FE:2B:35:0F:74:84:3F:CD:98:AE:DE:0C:B4:FC:A2:2A:4C:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/0/AS60223.asa
Signing time:             Thu 17 Oct 2024 17:16:51 +0000
ASPA not before:          Thu 17 Oct 2024 17:11:51 +0000
ASPA not after:           Thu 16 Oct 2025 17:16:51 +0000
Customer ASID:            60223
Providers:                AS: 945
                          AS: 49581

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.crl
                          rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Dec 2024 15:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b0:05:68:59:93:7d:08:56:ce:3e:39:83:b3:df:2b:48:19:cd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a84fe2b350f74843fcd98aede0cb4fca22a4cd4
        Validity
            Not Before: Oct 17 17:11:51 2024 GMT
            Not After : Oct 16 17:16:51 2025 GMT
        Subject: CN=8D1DC10266FC9A8628F9126E938B10A959E3EB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:e7:08:6f:9c:41:7a:92:d8:71:22:64:b5:
                    2c:02:24:c1:23:6d:23:33:ea:61:44:c0:e8:01:17:
                    37:b8:46:cc:9e:66:93:66:1d:9d:06:2f:a8:79:62:
                    6f:2f:29:a1:3f:8c:1b:09:29:d3:30:83:54:9f:b0:
                    77:b3:8c:6b:f5:4e:44:50:81:80:cb:62:59:ad:29:
                    d1:cd:13:94:c6:82:17:e9:d0:16:c8:79:17:59:9a:
                    1c:df:ff:d8:7b:94:5a:45:aa:4a:8f:39:61:6c:5f:
                    e3:30:b2:e5:34:0e:93:02:bb:3d:51:03:90:05:82:
                    27:59:f2:8d:b5:4b:e2:4a:23:ba:3d:92:64:d2:cc:
                    25:2c:fa:24:5e:61:2c:59:64:78:6f:cd:2c:7c:78:
                    57:5f:31:2b:2d:6f:b0:4d:e8:51:35:a8:74:36:ff:
                    dc:a7:43:b7:83:3e:fd:72:40:86:78:d5:8e:bc:02:
                    48:99:05:df:bc:e7:60:8d:0f:e6:9e:15:c2:78:45:
                    7e:48:54:bd:06:86:26:ff:cf:1d:93:13:d2:e0:c0:
                    30:93:6c:a7:6e:17:34:04:a0:ce:36:06:41:09:f1:
                    57:83:f0:68:d9:ed:09:da:aa:73:5b:54:9a:e6:09:
                    23:e1:f3:24:d5:de:57:5d:a9:4a:69:09:61:55:6f:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:1D:C1:02:66:FC:9A:86:28:F9:12:6E:93:8B:10:A9:59:E3:EB:8A
            X509v3 Authority Key Identifier:
                keyid:0A:84:FE:2B:35:0F:74:84:3F:CD:98:AE:DE:0C:B4:FC:A2:2A:4C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/0/AS60223.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60223

    Signature Algorithm: sha256WithRSAEncryption
         af:b3:54:d5:43:18:6a:86:f5:46:12:b3:a1:41:4e:ee:77:cd:
         01:df:40:68:ad:b4:79:53:f3:5f:d9:bc:9e:76:02:73:5b:05:
         17:b5:1d:00:de:5f:42:76:b6:e5:5c:7d:90:96:9f:88:53:3d:
         2b:1e:56:68:86:f8:4d:da:05:aa:a3:4b:ee:61:e6:79:21:59:
         c3:d7:bd:ae:d7:0c:7d:80:b5:8e:4a:0e:29:9f:20:ed:3c:73:
         a9:86:fb:89:da:20:f3:ec:2f:c5:54:74:d1:e4:d6:53:52:ac:
         5b:8c:2f:a3:8b:2b:14:b6:fc:7b:66:a3:e9:5f:e2:36:72:1e:
         35:4f:e5:8d:bf:9d:4f:93:fe:0e:e3:1b:f1:6c:98:c1:78:86:
         63:8f:2c:2e:e4:58:e3:bc:d9:5d:a3:a2:f5:40:63:db:8a:8e:
         b3:a7:10:fb:46:84:56:b3:7f:57:bf:33:48:98:26:b4:00:7b:
         32:19:a7:d2:da:dd:28:5f:95:29:16:e7:95:ff:e7:66:a5:4c:
         b1:e3:36:f9:22:91:7d:21:5c:53:26:30:88:87:f1:da:ca:bd:
         c5:2a:dc:4a:c3:6f:0f:31:69:1b:81:02:2a:a7:ef:33:82:38:
         78:f5:67:28:5f:47:f2:b4:fb:82:65:17:dc:a9:30:4c:59:0f:
         50:be:25:48
-----BEGIN CERTIFICATE-----
MIIEnjCCA4agAwIBAgIUXrAFaFmTfQhWzj45g7PfK0gZzQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGE4NGZlMmIzNTBmNzQ4NDNmY2Q5OGFlZGUwY2I0ZmNh
MjJhNGNkNDAeFw0yNDEwMTcxNzExNTFaFw0yNTEwMTYxNzE2NTFaMDMxMTAvBgNV
BAMTKDhEMURDMTAyNjZGQzlBODYyOEY5MTI2RTkzOEIxMEE5NTlFM0VCOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhOcIb5xBepLYcSJktSwCJMEj
bSMz6mFEwOgBFze4RsyeZpNmHZ0GL6h5Ym8vKaE/jBsJKdMwg1SfsHezjGv1TkRQ
gYDLYlmtKdHNE5TGghfp0BbIeRdZmhzf/9h7lFpFqkqPOWFsX+MwsuU0DpMCuz1R
A5AFgidZ8o21S+JKI7o9kmTSzCUs+iReYSxZZHhvzSx8eFdfMSstb7BN6FE1qHQ2
/9ynQ7eDPv1yQIZ41Y68AkiZBd+852CND+aeFcJ4RX5IVL0Ghib/zx2TE9LgwDCT
bKduFzQEoM42BkEJ8VeD8GjZ7QnaqnNbVJrmCSPh8yTV3lddqUppCWFVb+MFAgMB
AAGjggGoMIIBpDAdBgNVHQ4EFgQUjR3BAmb8moYo+RJuk4sQqVnj64owHwYDVR0j
BBgwFoAUCoT+KzUPdIQ/zZiu3gy0/KIqTNQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh
Y2UvMC8wQTg0RkUyQjM1MEY3NDg0M0ZDRDk4QUVERTBDQjRGQ0EyMkE0Q0Q0LmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQ29ULUt6VVBkSVFfelppdTNneTBfS0lx
VE5RLmNlcjBPBggrBgEFBQcBCwRDMEEwPwYIKwYBBQUHMAuGM3JzeW5jOi8vcmVw
by5ycGtpLnNwYWNlL3JlcG8vTmV0aWZhY2UvMC9BUzYwMjIzLmFzYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDrPzAN
BgkqhkiG9w0BAQsFAAOCAQEAr7NU1UMYaob1RhKzoUFO7nfNAd9AaK20eVPzX9m8
nnYCc1sFF7UdAN5fQna25Vx9kJafiFM9Kx5WaIb4TdoFqqNL7mHmeSFZw9e9rtcM
fYC1jkoOKZ8g7TxzqYb7idog8+wvxVR00eTWU1KsW4wvo4srFLb8e2aj6V/iNnIe
NU/ljb+dT5P+DuMb8WyYwXiGY48sLuRY47zZXaOi9UBj24qOs6cQ+0aEVrN/V78z
SJgmtAB7Mhmn0trdKF+VKRbnlf/nZqVMseM2+SKRfSFcUyYwiIfx2sq9xSrcSsNv
DzFpG4ECKqfvM4I4ePVnKF9H8rT7gmUX3KkwTFkPUL4lSA==
-----END CERTIFICATE-----
Generated at Mon Dec 9 23:23:45 2024 by rpki-client on console-fra.rpki-client.org