Autonomous System Provider Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/AS212245.asa
File:                     AS212245.asa (raw, json)
Hash identifier:          DGUAFcp4WkUm4wdBz3pS6D9mHIDNOZ14H1qCgstAzns=
Subject key identifier:   AA:3E:80:89:43:12:5B:16:23:D8:DA:17:27:01:87:C2:14:3F:6D:93
Certificate issuer:       /CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
Certificate serial:       60191701FAAA52B4EBFB15BD8E0F985B3010936D
Authority key identifier: 16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/AS212245.asa
Signing time:             Mon 08 Jul 2024 10:32:06 +0000
ASPA not before:          Mon 08 Jul 2024 10:27:06 +0000
ASPA not after:           Mon 07 Jul 2025 10:32:06 +0000
Customer ASID:            212245
Providers:                AS: 917
                          AS: 57695
                          AS: 212068

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 18:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:19:17:01:fa:aa:52:b4:eb:fb:15:bd:8e:0f:98:5b:30:10:93:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
        Validity
            Not Before: Jul  8 10:27:06 2024 GMT
            Not After : Jul  7 10:32:06 2025 GMT
        Subject: CN=AA3E808943125B1623D8DA17270187C2143F6D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ab:1c:6f:cf:d0:ac:88:bd:62:73:94:a8:0a:
                    a5:a2:02:7e:52:1a:96:82:8d:c6:ea:3a:55:24:a0:
                    d3:52:10:32:da:75:d9:3e:d5:b0:8e:5b:22:33:74:
                    74:78:d7:bf:39:6f:1b:14:4d:17:9f:43:39:b9:5b:
                    ea:61:31:32:18:82:9d:38:36:41:ad:d8:3e:2a:b8:
                    b8:af:b3:ff:35:d8:fb:1a:92:af:8c:5a:67:4d:8b:
                    dd:27:5d:dc:46:f3:c3:21:67:b4:d1:5b:23:22:19:
                    d5:d8:90:18:90:ec:aa:e0:04:82:ea:61:df:83:d6:
                    bf:5b:46:f5:0a:23:13:b2:02:57:04:ee:82:d6:ca:
                    dd:ea:e6:ed:65:59:08:46:96:a1:5a:f1:70:bc:e1:
                    35:eb:13:d9:d6:41:77:9c:24:4b:50:01:aa:e6:39:
                    cd:33:b8:67:47:e7:25:9b:3c:d6:25:d8:af:61:5e:
                    93:22:f4:21:7d:da:2c:29:12:5a:db:48:97:f6:6e:
                    98:e2:78:e5:27:d9:70:fc:a3:4f:65:89:f0:3e:86:
                    f5:1e:3b:08:d2:19:1b:9a:b3:77:d9:c5:00:03:20:
                    39:cd:2d:7f:7b:96:fb:a1:3e:fb:7a:01:3a:f0:b9:
                    7d:44:b5:cb:6c:f7:0f:fc:9a:ec:46:56:b4:97:34:
                    65:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3E:80:89:43:12:5B:16:23:D8:DA:17:27:01:87:C2:14:3F:6D:93
            X509v3 Authority Key Identifier:
                keyid:16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/AS212245.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212245

    Signature Algorithm: sha256WithRSAEncryption
         3f:bb:f0:a4:d6:86:f8:bf:44:68:75:f3:ac:f6:ef:2a:63:bd:
         0e:e4:9f:50:83:c8:44:1d:c3:2c:17:40:25:c2:d7:2f:47:5c:
         6a:e5:0b:fc:09:67:72:a3:67:ad:e0:bc:11:96:fe:11:fe:e4:
         7c:e5:ac:13:50:d7:62:cf:98:a3:04:98:01:19:c4:9d:28:8e:
         c8:94:b8:51:6b:1c:c1:35:5c:48:0c:79:f9:53:69:6c:1c:cd:
         83:e5:df:29:90:f3:9e:70:bb:fe:74:12:48:66:9b:f0:be:87:
         a7:19:99:07:cf:da:40:27:21:48:89:9e:7a:cd:63:74:64:f7:
         b2:49:f5:af:15:9f:6f:22:bb:14:28:a3:71:3f:d0:d9:88:01:
         ed:97:84:8b:0f:13:d9:8d:78:c7:ba:80:f9:71:5d:95:6f:1e:
         bc:b0:54:e6:88:25:1e:8a:df:2e:38:e8:d1:65:9c:11:24:61:
         44:b5:63:c0:86:80:09:2a:e4:83:24:05:52:42:09:04:e2:fe:
         b0:e9:19:41:82:80:12:09:6e:58:0c:4b:8f:01:bb:69:57:c2:
         6d:46:cd:cd:cf:c6:02:4b:cd:93:28:68:37:2a:1e:f6:9c:51:
         ac:b4:07:d9:9c:6d:8f:e2:19:db:c1:db:18:e8:80:92:6b:d7:
         e6:84:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:30:00 2024 by rpki-client on console-fra.rpki-client.org