Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS945/0/AS51930.asa
File:                     AS51930.asa (raw, json)
Hash identifier:          zS8LOeLMZDHmgFIiO5b9BNhhP2B6DmZSBzetjAC4DqM=
Subject key identifier:   33:AD:99:A0:EB:6E:50:05:10:0C:4D:B0:49:AA:8E:96:BA:54:4F:91
Certificate issuer:       /CN=4A208C7877CBF7D9680C15023B778994D27CBFBB
Certificate serial:       61ABDAF3E078A48B8F93E50BC13042C77D88DDEA
Authority key identifier: 4A:20:8C:78:77:CB:F7:D9:68:0C:15:02:3B:77:89:94:D2:7C:BF:BB
Authority info access:    rsync://rpki.co/repo/August/2/4A208C7877CBF7D9680C15023B778994D27CBFBB.cer
Subject info access:      rsync://rpki.co/repo/AS945/0/AS51930.asa
Signing time:             Mon 10 Apr 2023 02:55:16 +0000
ASPA not before:          Mon 10 Apr 2023 02:50:16 +0000
ASPA not after:           Mon 08 Apr 2024 02:55:16 +0000
Customer ASID:            51930
Provider set:             AS: 0

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.crl
                          rsync://rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.mft
                          rsync://rpki.co/repo/August/2/4A208C7877CBF7D9680C15023B778994D27CBFBB.cer
                          rsync://rpki.co/repo/August/2/B6085F402664C2DA1F05A478EB2382CDA6BFFA5E.crl
                          rsync://rpki.co/repo/August/2/B6085F402664C2DA1F05A478EB2382CDA6BFFA5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tghfQCZkwtofBaR46yOCzaa_-l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 05:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ab:da:f3:e0:78:a4:8b:8f:93:e5:0b:c1:30:42:c7:7d:88:dd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A208C7877CBF7D9680C15023B778994D27CBFBB
        Validity
            Not Before: Apr 10 02:50:16 2023 GMT
            Not After : Apr  8 02:55:16 2024 GMT
        Subject: CN=33AD99A0EB6E5005100C4DB049AA8E96BA544F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:04:b1:ac:0f:8f:16:58:18:2e:a2:17:dc:
                    d9:68:0c:16:84:9f:81:67:d4:ca:63:c0:11:0b:9f:
                    f3:9a:cd:16:a3:d2:6e:a8:58:8e:d8:dc:bd:0e:a5:
                    41:a7:f1:f9:21:10:60:fb:75:71:3e:92:0a:55:7e:
                    a4:c1:0b:07:d1:41:d0:20:5f:2d:5d:72:df:6d:22:
                    00:e4:a5:40:00:3c:76:eb:f2:79:44:9a:89:8f:07:
                    91:0e:55:c7:53:03:4a:08:dc:da:1f:35:25:d1:d9:
                    90:16:27:a2:4a:c9:44:49:eb:c4:84:26:9b:11:9f:
                    65:b8:4d:92:9d:f2:f6:f2:91:6d:08:d2:1a:6a:8f:
                    20:79:49:4a:82:43:ce:c9:8c:87:b3:44:10:96:86:
                    e2:bf:60:3f:05:4f:cc:6d:2b:28:71:33:a5:11:09:
                    9e:a8:22:ae:fe:d4:4a:28:df:8e:1e:c2:da:8b:7d:
                    01:0d:a7:6e:2c:1f:8e:87:5d:81:45:35:43:50:e6:
                    33:45:7e:30:58:11:5e:70:22:7d:d4:76:8d:d6:44:
                    5f:74:c2:2d:21:2b:63:0e:ab:db:85:1f:89:03:b6:
                    ce:87:89:e6:58:ce:a8:5c:a7:ea:a9:30:22:cc:f3:
                    1c:fe:b1:2f:2e:6f:be:19:f3:e2:e6:04:41:b2:3f:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                33:AD:99:A0:EB:6E:50:05:10:0C:4D:B0:49:AA:8E:96:BA:54:4F:91
            X509v3 Authority Key Identifier: 
                keyid:4A:20:8C:78:77:CB:F7:D9:68:0C:15:02:3B:77:89:94:D2:7C:BF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/0/4A208C7877CBF7D9680C15023B778994D27CBFBB.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.co/repo/August/2/4A208C7877CBF7D9680C15023B778994D27CBFBB.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS945/0/AS51930.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51930

    Signature Algorithm: sha256WithRSAEncryption
         1b:ed:a2:fc:83:b2:fb:b3:8f:c6:89:91:07:b2:09:70:83:b4:
         d0:ba:c6:5f:6c:92:9a:a2:cf:ae:eb:11:5c:35:5c:29:7c:e8:
         0a:30:a1:0e:ed:4a:9a:b3:85:f3:63:52:fe:c8:20:08:89:6a:
         c1:da:9d:fd:cd:99:74:32:aa:cb:67:97:9f:04:02:d8:61:1a:
         0d:3f:30:b7:a5:88:e7:cf:a2:69:e4:14:61:d6:71:39:c6:34:
         6c:a6:30:fa:38:6c:ae:c1:d9:e2:82:d6:f8:3f:3a:79:13:1f:
         a8:7e:5d:a3:db:cb:08:14:44:b7:a7:72:18:11:bb:14:dc:b7:
         45:f0:6e:83:f7:5a:aa:d6:ea:a6:5e:42:ad:74:39:f5:ba:c7:
         32:0b:21:a6:db:ff:d6:a3:07:d9:8b:4e:9f:4c:a3:cf:12:ef:
         44:b5:cd:71:ef:33:7b:fc:3b:11:98:0b:06:98:40:e4:97:a3:
         4f:1a:39:7a:93:6c:6b:60:35:5c:5a:31:3b:2a:ad:e1:47:64:
         dc:a8:2f:74:4e:2f:b7:43:41:0d:89:9b:2d:6e:d3:b9:c9:d9:
         fc:38:d7:3a:05:44:8c:3f:4f:d0:bb:94:f3:45:62:21:2e:43:
         e8:d3:be:e7:ef:e7:fd:b2:51:8e:fa:92:f5:fa:af:20:92:fc:
         47:f5:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 3 13:27:07 2023 by rpki-client on console-ams.rpki-client.org