Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/Yi/0/AS209557.asa
File:                     AS209557.asa (raw, json)
Hash identifier:          G4JztwvtApI4XJoDUN8pC9UctK5+XCbDNWxHv0AF5qc=
Subject key identifier:   D6:C5:65:1F:12:E4:31:53:AF:2B:BC:7A:C9:A4:3B:8C:96:1C:41:79
Certificate issuer:       /CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Certificate serial:       52377F25602D1A3B9D06F252592762CBE5F47FBE
Authority key identifier: 7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject info access:      rsync://rpki.co/repo/Yi/0/AS209557.asa
Signing time:             Wed 06 Dec 2023 17:10:37 +0000
ASPA not before:          Wed 06 Dec 2023 17:05:37 +0000
ASPA not after:           Wed 04 Dec 2024 17:10:37 +0000
Customer ASID:            209557
Providers:                AS: 7480

Validation:               OK
Signature path:           rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
                          rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Feb 2024 08:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:37:7f:25:60:2d:1a:3b:9d:06:f2:52:59:27:62:cb:e5:f4:7f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
        Validity
            Not Before: Dec  6 17:05:37 2023 GMT
            Not After : Dec  4 17:10:37 2024 GMT
        Subject: CN=D6C5651F12E43153AF2BBC7AC9A43B8C961C4179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:15:33:52:82:4f:5a:71:75:15:12:dc:4b:
                    aa:16:58:74:60:7c:3b:e1:5a:0a:f4:6c:39:76:1d:
                    f5:cd:9c:08:fd:5f:d6:43:ee:a8:2a:05:f5:19:b2:
                    e1:e0:27:a2:fb:78:d8:31:13:5a:8c:22:2e:8c:ea:
                    73:c1:0e:6d:13:f8:85:dd:4c:6e:5b:b9:60:3f:fd:
                    7b:c9:b2:c8:00:5a:f8:45:fe:32:2c:a6:42:f9:2f:
                    84:20:07:15:92:33:00:f3:d7:da:a7:94:d5:f1:23:
                    49:c8:6c:c1:bf:dc:27:e4:28:20:c4:b3:e9:fc:04:
                    e2:6b:5a:c6:20:76:a1:1a:41:b4:cf:fc:36:c7:13:
                    dd:76:8d:bb:8b:46:b5:70:36:03:84:0a:8b:53:a6:
                    75:a9:e2:e9:e1:5a:fb:52:13:d6:a4:dd:88:41:13:
                    62:dc:44:ea:7c:7c:bf:13:52:c2:58:f9:13:b5:47:
                    f7:68:ca:1e:f2:d2:68:76:6c:ab:32:06:c6:ed:30:
                    01:5b:2e:39:f9:d3:03:23:5c:25:56:48:e2:d0:ad:
                    c8:28:aa:93:51:c5:58:f6:26:fe:2e:10:46:99:a8:
                    9d:8c:74:1d:5f:e3:2b:8b:af:43:0c:cb:13:4a:01:
                    52:04:b5:ba:6c:a6:79:34:4b:8d:18:ff:55:34:a0:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C5:65:1F:12:E4:31:53:AF:2B:BC:7A:C9:A4:3B:8C:96:1C:41:79
            X509v3 Authority Key Identifier:
                keyid:7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Yi/0/AS209557.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209557

    Signature Algorithm: sha256WithRSAEncryption
         ad:70:15:e1:0a:cf:cc:1c:df:85:08:f8:dc:f9:53:25:51:09:
         25:c0:a0:7e:3b:5e:a8:f9:6d:72:9d:32:6f:e3:f0:6a:86:e4:
         23:ff:c5:35:44:42:d9:93:88:d4:6e:ee:50:60:1c:d2:4d:0e:
         9b:bb:27:e2:35:18:16:86:09:90:98:af:94:d0:97:36:b3:13:
         e7:8a:54:9a:70:cd:39:8e:b6:72:e9:38:fe:61:80:6f:4b:73:
         57:18:f0:51:41:16:b2:9d:fc:53:2b:66:a3:d7:cf:93:1d:b9:
         65:d6:bf:a2:3b:0d:bb:7f:05:47:46:e0:46:81:46:07:12:b3:
         e3:82:6d:48:1c:01:b2:aa:ab:a8:e6:96:ba:af:4b:e2:32:26:
         b3:8a:ca:cb:d7:9b:c7:2e:7d:09:f8:72:18:b1:53:4b:ad:82:
         16:08:ae:43:0b:eb:73:85:d0:24:e0:89:bf:16:88:41:01:f5:
         d5:56:63:ef:b1:14:d3:66:15:6a:11:45:12:af:5a:ce:5c:dc:
         68:87:a8:ac:37:da:08:6e:30:86:ed:c3:0e:36:3f:ba:69:37:
         84:10:c7:15:91:21:29:ac:bb:49:24:04:79:77:c0:62:fe:30:
         81:bc:d3:aa:51:2f:0e:32:ea:ae:83:48:4a:a7:6f:d4:81:60:
         12:bc:7b:b7
-----BEGIN CERTIFICATE-----
MIIEgzCCA2ugAwIBAgIUUjd/JWAtGjudBvJSWSdiy+X0f74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2RiODY5ZjNiM2M5MGRhM2IzNDU3YmIzODg5YTRmNjZi
NjQzMGQ4OTAeFw0yMzEyMDYxNzA1MzdaFw0yNDEyMDQxNzEwMzdaMDMxMTAvBgNV
BAMTKEQ2QzU2NTFGMTJFNDMxNTNBRjJCQkM3QUM5QTQzQjhDOTYxQzQxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wxUzUoJPWnF1FRLcS6oWWHRg
fDvhWgr0bDl2HfXNnAj9X9ZD7qgqBfUZsuHgJ6L7eNgxE1qMIi6M6nPBDm0T+IXd
TG5buWA//XvJssgAWvhF/jIspkL5L4QgBxWSMwDz19qnlNXxI0nIbMG/3CfkKCDE
s+n8BOJrWsYgdqEaQbTP/DbHE912jbuLRrVwNgOECotTpnWp4unhWvtSE9ak3YhB
E2LcROp8fL8TUsJY+RO1R/doyh7y0mh2bKsyBsbtMAFbLjn50wMjXCVWSOLQrcgo
qpNRxVj2Jv4uEEaZqJ2MdB1f4yuLr0MMyxNKAVIEtbpspnk0S40Y/1U0oPe7AgMB
AAGjggGNMIIBiTAdBgNVHQ4EFgQU1sVlHxLkMVOvK7x6yaQ7jJYcQXkwHwYDVR0j
BBgwFoAUfbhp87PJDaOzRXuziJpPZrZDDYkwDgYDVR0PAQH/BAQDAgeAMFcGA1Ud
HwRQME4wTKBKoEiGRnJzeW5jOi8vcnBraS5jby9yZXBvL1lpLzAvN0RCODY5RjNC
M0M5MERBM0IzNDU3QkIzODg5QTRGNjZCNjQzMEQ4OS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2ZiaHA4N1BKRGFPelJYdXppSnBQWnJaRERZay5jZXIwQgYIKwYB
BQUHAQsENjA0MDIGCCsGAQUFBzALhiZyc3luYzovL3Jwa2kuY28vcmVwby9ZaS8w
L0FTMjA5NTU3LmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMylTANBgkqhkiG9w0BAQsFAAOCAQEArXAV4QrPzBzf
hQj43PlTJVEJJcCgfjteqPltcp0yb+PwaobkI//FNURC2ZOI1G7uUGAc0k0Om7sn
4jUYFoYJkJivlNCXNrMT54pUmnDNOY62cuk4/mGAb0tzVxjwUUEWsp38Uytmo9fP
kx25Zda/ojsNu38FR0bgRoFGBxKz44JtSBwBsqqrqOaWuq9L4jIms4rKy9ebxy59
CfhyGLFTS62CFgiuQwvrc4XQJOCJvxaIQQH11VZj77EU02YVahFFEq9azlzcaIeo
rDfaCG4whu3DDjY/umk3hBDHFZEhKay7SSQEeXfAYv4wgbzTqlEvDjLqroNISqdv
1IFgErx7tw==
-----END CERTIFICATE-----
Generated at Sat Feb 24 13:08:16 2024 by rpki-client on console-ams.rpki-client.org