Autonomous System Provider Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/1/AS200160.asa
File:                     AS200160.asa (raw, json)
Hash identifier:          ma1rVUSoax4QFVVTTAVkoDTcdSEWAsLsgs2UvNWq4+w=
Subject key identifier:   48:5E:AB:30:64:E6:22:82:E6:16:7C:60:96:6D:DD:F5:7B:5B:12:88
Certificate issuer:       /CN=8a4eac665a94798fd0ddea24176ee5e0c0b7743a
Certificate serial:       14D4DECEF12FCC8F6EF5116713812317F0A86DFB
Authority key identifier: 8A:4E:AC:66:5A:94:79:8F:D0:DD:EA:24:17:6E:E5:E0:C0:B7:74:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ik6sZlqUeY_Q3eokF27l4MC3dDo.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/1/AS200160.asa
Signing time:             Wed 17 Apr 2024 12:02:11 +0000
ASPA not before:          Wed 17 Apr 2024 11:57:11 +0000
ASPA not after:           Wed 16 Apr 2025 12:02:11 +0000
Customer ASID:            200160
Providers:                AS: 945
                          AS: 6939
                          AS: 15353
                          AS: 21738
                          AS: 29632
                          AS: 34465
                          AS: 34549
                          AS: 34927
                          AS: 36369
                          AS: 44817
                          AS: 48605
                          AS: 140731
                          AS: 150249
                          AS: 199762
                          AS: 203686
                          AS: 203913
                          AS: 210152
                          AS: 400304
                          AS: 400818

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.crl
                          rsync://rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ik6sZlqUeY_Q3eokF27l4MC3dDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 21:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d4:de:ce:f1:2f:cc:8f:6e:f5:11:67:13:81:23:17:f0:a8:6d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4eac665a94798fd0ddea24176ee5e0c0b7743a
        Validity
            Not Before: Apr 17 11:57:11 2024 GMT
            Not After : Apr 16 12:02:11 2025 GMT
        Subject: CN=485EAB3064E62282E6167C60966DDDF57B5B1288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:2d:3b:d7:37:cb:69:d7:73:c4:9d:50:fb:
                    b0:6e:d9:52:94:06:94:6b:ed:44:8a:01:89:a8:cf:
                    82:3e:1d:b4:97:d4:5e:34:66:a4:b8:26:17:12:31:
                    fd:f3:24:78:3c:6c:56:bf:14:d7:88:57:62:05:da:
                    a2:e0:23:66:d8:cc:78:14:23:11:82:f5:3f:59:71:
                    60:da:7c:0b:67:62:a1:86:69:f4:f5:e2:cd:8c:49:
                    85:2b:f2:32:c9:bc:9b:ca:4b:a8:5a:2e:f3:be:91:
                    ef:88:83:b5:5c:00:f2:ef:8f:ee:4d:72:f8:b2:fa:
                    9f:5a:08:a9:23:36:8f:16:cb:7a:21:57:01:72:62:
                    58:a3:d9:36:0b:47:64:b7:69:19:ff:b4:fc:95:9c:
                    b6:60:1c:93:44:1c:aa:ea:17:e3:b9:8a:ef:cb:95:
                    f5:b0:a9:53:15:07:8d:4e:94:08:a0:0c:87:fe:87:
                    cf:23:fb:24:ed:25:a0:d1:19:40:47:c3:60:3c:a2:
                    c7:0e:b4:2f:7e:25:2f:7b:a3:c1:89:c8:37:21:8c:
                    2d:59:02:a1:9d:5b:b6:d7:1d:73:73:0b:f2:2c:c7:
                    e1:f4:64:8a:d5:50:22:e1:e6:39:30:a0:1e:0f:3a:
                    4c:38:c6:9b:f1:45:af:6d:c5:87:b9:23:38:2e:2d:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5E:AB:30:64:E6:22:82:E6:16:7C:60:96:6D:DD:F5:7B:5B:12:88
            X509v3 Authority Key Identifier:
                keyid:8A:4E:AC:66:5A:94:79:8F:D0:DD:EA:24:17:6E:E5:E0:C0:B7:74:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/1/8A4EAC665A94798FD0DDEA24176EE5E0C0B7743A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ik6sZlqUeY_Q3eokF27l4MC3dDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/1/AS200160.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200160

    Signature Algorithm: sha256WithRSAEncryption
         22:8d:ec:a3:00:57:bb:54:b1:11:52:b2:73:f7:be:76:0b:a5:
         5e:3a:29:c3:ff:14:48:b0:c3:8a:93:1e:6d:ef:ba:fc:fc:a8:
         7e:47:98:c8:4b:e1:6e:a1:d0:b1:8b:1f:93:54:8e:f8:f9:8e:
         fa:df:61:ac:b6:d9:03:46:38:cd:4e:dd:0e:97:7b:34:8b:72:
         04:42:ee:a3:ba:d5:12:ad:b6:4f:5d:27:40:62:27:7a:94:3f:
         2f:87:c7:31:68:e4:1f:49:4a:5d:b5:84:5e:ba:60:45:a9:4d:
         93:f6:94:6e:f0:7e:9f:ec:0b:d8:64:07:b9:48:67:81:79:32:
         76:06:16:f2:be:70:4c:f0:bb:24:5c:e1:8a:b2:4d:a9:f2:6d:
         50:66:68:b0:de:3a:aa:3b:91:77:d5:e9:80:b8:8a:33:fc:75:
         20:cf:56:e9:bb:0c:dc:85:97:05:9d:57:ef:13:db:74:17:c5:
         16:fb:be:be:d1:8e:80:01:25:69:1e:6c:87:a8:a3:9a:75:7c:
         a7:b2:79:b3:d4:1e:0c:c5:5d:24:2c:6f:e5:d6:b6:0c:83:fa:
         a9:8a:f7:a5:76:59:90:4c:16:7e:a7:4d:15:68:83:f6:49:a0:
         57:f3:cf:98:fe:d1:7d:5f:a4:5f:1e:05:6d:e9:fe:67:aa:fb:
         d6:0a:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 06:33:02 2024 by rpki-client on console-ams.rpki-client.org