Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/2/AS59730.asa
File:                     AS59730.asa (raw, json)
Hash identifier:          5dd2w1DoUlnS+v8HPzoZW0NerU+R+zE1hMYBfLDrQLs=
Subject key identifier:   E4:24:D9:64:EB:3D:01:F6:73:54:29:6F:9F:E3:08:73:81:D1:F5:41
Certificate issuer:       /CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
Certificate serial:       5F566DA66D91453CAEB5F8991035A768A68D75A8
Authority key identifier: 3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer
Subject info access:      rsync://rpki.co/repo/AS202400/2/AS59730.asa
Signing time:             Thu 13 Apr 2023 15:54:58 +0000
ASPA not before:          Thu 13 Apr 2023 15:49:58 +0000
ASPA not after:           Thu 11 Apr 2024 15:54:58 +0000
Customer ASID:            59730
Provider set:             AS: 0

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl
                          rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 06:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:56:6d:a6:6d:91:45:3c:ae:b5:f8:99:10:35:a7:68:a6:8d:75:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
        Validity
            Not Before: Apr 13 15:49:58 2023 GMT
            Not After : Apr 11 15:54:58 2024 GMT
        Subject: CN=E424D964EB3D01F67354296F9FE3087381D1F541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:48:00:e6:7c:21:b2:8c:96:ad:8a:f4:2c:
                    ee:2e:db:83:ac:de:9f:08:81:03:da:05:01:6e:0e:
                    dd:65:91:c1:9e:5d:d1:9b:6b:c7:a1:35:4a:52:a1:
                    9c:46:78:41:7e:5c:c7:00:63:65:d3:f5:38:65:8b:
                    4e:6b:00:a5:1a:fc:00:1f:3f:d8:2d:fd:a1:f0:82:
                    b2:67:3a:ed:4c:f9:cd:c7:61:5e:3c:05:ff:86:99:
                    1e:f6:c4:7d:a2:7e:6a:e1:6c:59:a6:df:d8:ac:1a:
                    c0:40:ac:b4:2a:cc:62:bd:74:bb:f7:0c:88:30:e6:
                    4d:36:e3:d6:dc:6c:0d:5d:9b:d6:18:4d:8e:18:a4:
                    2f:ec:88:7b:23:61:dd:09:89:91:29:3b:68:52:3f:
                    66:97:a8:c9:7a:7b:c1:73:be:31:37:ad:54:c2:4b:
                    73:e5:bb:f8:4a:d5:ae:19:ff:eb:39:a3:38:0a:3e:
                    e4:18:13:c7:7f:eb:86:32:2e:a5:97:d1:83:4c:61:
                    15:8b:30:52:94:1f:08:86:50:ac:ca:d6:02:ae:73:
                    65:0a:60:10:a2:17:b3:a4:96:be:b4:f7:ee:ca:ab:
                    c8:20:d0:c2:c0:fa:25:a0:23:07:8b:08:7f:58:21:
                    a7:fe:c4:47:b6:02:4d:79:25:f2:e1:49:a2:e1:bb:
                    7e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E4:24:D9:64:EB:3D:01:F6:73:54:29:6F:9F:E3:08:73:81:D1:F5:41
            X509v3 Authority Key Identifier: 
                keyid:3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS202400/2/AS59730.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59730

    Signature Algorithm: sha256WithRSAEncryption
         3b:b4:bd:3f:0f:85:84:11:42:2b:ee:39:80:e4:ec:17:ea:fc:
         4e:42:9f:0e:d2:7d:0e:dd:c8:e6:30:4a:ac:f4:f1:df:96:2c:
         1b:ad:fd:0a:c7:37:dd:86:27:34:8b:96:84:9c:e7:b4:2b:b5:
         59:0e:d7:f9:2e:57:05:75:9b:02:06:77:b9:4d:df:9c:91:47:
         42:80:da:dd:bc:1c:db:9a:69:36:95:1f:5d:5f:38:8b:e2:54:
         43:7b:50:85:f1:8f:e3:3b:c8:be:fe:a4:55:f4:0a:ac:63:55:
         40:31:18:f8:bc:4e:4f:ac:5e:d8:1f:71:c4:73:f3:fe:b3:ba:
         c0:01:80:7a:6c:ac:26:9e:24:f1:08:02:23:28:26:85:75:f6:
         c5:f7:a6:0b:f3:95:23:04:cf:17:5e:d0:b0:df:d6:be:12:01:
         97:3f:c0:fe:cc:6d:36:1b:d0:58:e8:07:6a:43:a4:05:80:06:
         be:33:d7:5f:34:53:f4:db:84:2a:c8:77:ff:73:c3:af:9d:99:
         93:57:89:98:f6:58:63:da:58:95:aa:46:c2:ac:d4:12:4f:06:
         52:ad:a1:1c:57:7d:00:6a:81:11:03:6f:18:94:5d:65:77:cb:
         eb:0c:35:3f:b2:f6:0c:dc:d6:e9:74:e0:48:21:41:30:fe:a2:
         d6:33:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----