Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS210631/0/AS210631.asa
File:                     AS210631.asa (raw, json)
Hash identifier:          3cLNQ0/r4CWfldWhiQfkN8PMWPeNesh0VPRlx9GihUI=
Subject key identifier:   08:2A:65:33:25:51:7B:6D:A7:F2:39:03:48:09:F6:89:38:53:B1:39
Certificate issuer:       /CN=75ebb209e9943c15ef8158450055a1a0715fe171
Certificate serial:       6FAA599B2E7F138831691E4DE680FD235BE9A9B3
Authority key identifier: 75:EB:B2:09:E9:94:3C:15:EF:81:58:45:00:55:A1:A0:71:5F:E1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deuyCemUPBXvgVhFAFWhoHFf4XE.cer
Subject info access:      rsync://rpki.co/repo/AS210631/0/AS210631.asa
Signing time:             Fri 12 May 2023 16:11:01 +0000
ASPA not before:          Fri 12 May 2023 16:06:01 +0000
ASPA not after:           Fri 10 May 2024 16:11:01 +0000
Customer ASID:            210631
Provider set:             AS: 6939
                          AS: 34927
                          AS: 50058

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS210631/0/75EBB209E9943C15EF8158450055A1A0715FE171.crl
                          rsync://rpki.co/repo/AS210631/0/75EBB209E9943C15EF8158450055A1A0715FE171.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deuyCemUPBXvgVhFAFWhoHFf4XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 May 2023 14:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:aa:59:9b:2e:7f:13:88:31:69:1e:4d:e6:80:fd:23:5b:e9:a9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ebb209e9943c15ef8158450055a1a0715fe171
        Validity
            Not Before: May 12 16:06:01 2023 GMT
            Not After : May 10 16:11:01 2024 GMT
        Subject: CN=082A653325517B6DA7F239034809F6893853B139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:81:25:85:14:21:c0:c0:19:7e:70:fb:76:
                    cd:69:71:90:c3:4b:b3:b4:5c:4c:c4:31:ff:6f:55:
                    a1:bc:e0:b0:34:bb:66:fc:3a:49:f4:03:a5:a9:6b:
                    b9:e0:a1:55:52:c9:5b:76:45:4c:ed:25:67:39:b4:
                    95:d1:6f:4c:04:46:da:f3:e3:13:6b:86:67:31:0a:
                    17:db:36:01:da:ae:f5:0f:86:1c:af:8f:cc:a5:30:
                    09:a7:a0:84:93:30:88:55:31:e8:5e:9f:93:06:c4:
                    0e:4b:3d:5b:b4:71:e4:da:3c:f9:9f:74:3f:8b:9e:
                    85:35:b4:b9:89:8c:82:a0:55:7c:d9:73:37:3e:34:
                    35:7b:2e:2a:00:f3:b8:95:a0:ef:f7:25:ef:67:97:
                    91:41:ab:d6:ad:1b:02:b6:4b:75:ab:dd:44:a5:9c:
                    22:48:77:fa:c9:94:9d:31:e3:f9:77:39:e5:1f:db:
                    67:66:31:44:30:e9:f8:ad:a1:79:f9:b5:e9:b5:f9:
                    df:ce:7d:2a:19:78:56:58:08:83:d5:6e:29:36:9f:
                    9f:09:b1:8d:09:fe:bc:d1:8d:4d:47:42:c2:00:8c:
                    73:01:2c:07:77:50:b2:bf:5b:1c:21:5a:2c:57:b2:
                    9e:99:4e:9b:d6:15:83:02:d3:62:31:b3:53:b8:ca:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:2A:65:33:25:51:7B:6D:A7:F2:39:03:48:09:F6:89:38:53:B1:39
            X509v3 Authority Key Identifier: 
                keyid:75:EB:B2:09:E9:94:3C:15:EF:81:58:45:00:55:A1:A0:71:5F:E1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS210631/0/75EBB209E9943C15EF8158450055A1A0715FE171.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deuyCemUPBXvgVhFAFWhoHFf4XE.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS210631/0/AS210631.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  210631

    Signature Algorithm: sha256WithRSAEncryption
         8f:c6:59:66:bf:2a:f8:09:da:93:95:b2:06:c2:ef:e1:d4:d0:
         20:54:42:f4:02:65:7c:37:88:2a:d7:ef:e1:19:15:46:4b:30:
         5b:30:97:af:44:aa:c8:be:ca:44:57:ce:1c:4e:74:e3:55:58:
         2c:ec:19:10:aa:36:5f:17:ef:47:95:28:ca:65:c7:b4:d3:71:
         ba:5b:f8:c3:05:df:ab:82:ee:b6:d4:f2:f7:c0:49:ba:52:81:
         97:83:cd:af:41:41:39:48:9c:2e:da:8e:68:94:10:84:d7:c0:
         bd:47:87:20:36:14:f7:43:b0:aa:8e:2d:ac:ac:af:8a:99:d8:
         1e:f4:da:d0:f7:51:ad:43:4c:e4:ae:ec:e4:f0:da:98:f9:d8:
         0a:88:2a:f0:37:e7:c0:9f:29:2e:e1:7b:97:bc:0d:7a:df:fa:
         53:0c:e7:f9:10:2d:ab:81:ef:37:f8:2f:4c:09:e1:49:8a:68:
         18:d3:11:fa:63:5a:b9:48:de:89:10:8f:ad:8d:7a:53:fe:e6:
         18:d3:91:71:3b:9c:54:9b:db:25:92:62:b2:4c:02:c3:3e:95:
         23:8f:bf:c8:a5:2e:d2:b4:3c:78:19:4b:9f:f3:46:e8:fc:ee:
         06:b2:8e:cc:8f:96:96:6a:6e:b8:72:dd:98:6c:1e:d5:6e:78:
         c7:6b:c9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----