Autonomous System Provider Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/AS210561.asa
File:                     AS210561.asa (raw, json)
Hash identifier:          LFRkLGO5kdkIbzsnG+P+kJCcSIviAKeHqvBoO8sbQHI=
Subject key identifier:   8C:3D:F9:60:42:ED:E5:3E:4B:7E:42:CF:57:ED:63:D9:04:CD:1D:B4
Certificate issuer:       /CN=99a77347a7d39f37f04eb4f585fb6dfcdb2e6d26
Certificate serial:       4F11C0CC617A24E20B53CCB19701A28EC49E43FB
Authority key identifier: 99:A7:73:47:A7:D3:9F:37:F0:4E:B4:F5:85:FB:6D:FC:DB:2E:6D:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/madzR6fTnzfwTrT1hftt_NsubSY.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/AS210561.asa
Signing time:             Sun 07 Jul 2024 17:26:34 +0000
ASPA not before:          Sun 07 Jul 2024 17:21:34 +0000
ASPA not after:           Sun 06 Jul 2025 17:26:34 +0000
Customer ASID:            210561
Providers:                AS: 207960

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/madzR6fTnzfwTrT1hftt_NsubSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Dec 2024 22:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:11:c0:cc:61:7a:24:e2:0b:53:cc:b1:97:01:a2:8e:c4:9e:43:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a77347a7d39f37f04eb4f585fb6dfcdb2e6d26
        Validity
            Not Before: Jul  7 17:21:34 2024 GMT
            Not After : Jul  6 17:26:34 2025 GMT
        Subject: CN=8C3DF96042EDE53E4B7E42CF57ED63D904CD1DB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:06:c3:88:2a:6e:8d:81:02:7d:95:29:22:
                    46:28:12:8c:5b:32:b5:01:f7:d8:63:0f:e1:d7:bd:
                    7f:08:10:1e:d6:94:67:ca:31:e5:26:f4:5f:e0:4b:
                    ff:c5:81:dc:4c:02:78:1a:f6:86:0c:c5:a3:34:6f:
                    d5:f2:14:78:76:29:f7:1c:8d:e9:09:2e:2f:4e:38:
                    29:32:69:41:48:43:b1:59:b3:5f:84:dd:32:c9:a5:
                    ce:86:0f:7c:1d:65:61:1f:ca:ff:58:d2:ed:f8:c5:
                    51:da:d6:39:2a:00:77:1a:da:31:b7:45:28:36:d2:
                    49:c8:0e:73:78:8b:b4:0f:a3:67:da:f4:cf:75:20:
                    50:9f:9a:f9:17:7c:23:e2:fe:e6:30:b0:0e:86:42:
                    6d:7c:2f:fe:82:16:f1:b7:f4:1d:37:40:c7:dc:0b:
                    fb:49:18:30:f9:7d:f7:fb:3f:e7:56:f6:bf:ab:8c:
                    95:a3:9a:99:88:9c:b9:9d:9d:3e:10:37:0c:e9:fe:
                    32:13:4e:c7:79:a2:2f:07:a4:c6:ae:b6:34:58:e8:
                    25:05:0f:cf:13:5b:94:02:a0:85:32:09:0f:d5:e9:
                    fc:5e:b1:bc:bf:17:53:22:ef:8a:03:27:cc:d9:ba:
                    af:aa:9b:3a:e3:fe:38:4e:60:a9:bc:8d:5e:56:7a:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3D:F9:60:42:ED:E5:3E:4B:7E:42:CF:57:ED:63:D9:04:CD:1D:B4
            X509v3 Authority Key Identifier:
                keyid:99:A7:73:47:A7:D3:9F:37:F0:4E:B4:F5:85:FB:6D:FC:DB:2E:6D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/99A77347A7D39F37F04EB4F585FB6DFCDB2E6D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/madzR6fTnzfwTrT1hftt_NsubSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/1/AS210561.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210561

    Signature Algorithm: sha256WithRSAEncryption
         b9:69:31:00:81:c7:24:10:ad:7b:99:19:ab:17:86:58:50:a5:
         b9:29:dd:b3:5f:21:35:8b:13:09:fe:bb:ff:40:d3:dc:00:84:
         b5:2e:20:d2:89:c3:3f:b8:f4:ae:73:61:48:0e:8d:8e:0b:98:
         87:09:74:1d:8f:1a:fe:67:f9:70:bb:91:20:04:35:ee:b0:40:
         19:1f:19:03:07:7c:20:92:5e:38:aa:3f:3d:a1:ee:77:09:6e:
         c6:d8:4a:d9:5c:60:0e:0d:eb:59:7d:90:7a:34:b3:e2:bb:fa:
         7c:88:cd:cf:23:af:3d:03:0d:06:d1:82:c7:1e:72:83:26:80:
         40:bc:91:1e:cc:f0:70:d6:70:40:e4:f6:81:8c:0b:b7:2b:36:
         47:3f:cc:6d:5e:48:fe:d9:41:6e:c5:f1:84:f2:1f:ed:9c:38:
         e5:86:df:78:fe:8d:b5:75:af:12:58:3c:2e:33:ad:91:b0:f8:
         3a:20:1d:6e:b5:9b:d7:20:fd:9d:e2:64:04:2e:61:0e:89:ab:
         ca:be:6d:ab:3d:ab:3a:32:63:ac:34:bc:61:4c:d4:40:4f:31:
         5d:58:33:71:75:2b:3d:00:45:c8:59:93:0d:c1:f6:2d:cc:42:
         03:d8:59:15:85:25:d8:42:86:b9:28:9a:3d:0d:56:85:dc:b2:
         44:32:3f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 01:12:23 2024 by rpki-client on console-fra.rpki-client.org