Autonomous System Provider Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/2/AS213086.asa
File:                     AS213086.asa (raw, json)
Hash identifier:          6wae0R9X0pEiwh77/RTG8IiiTYGtW88ftuKBFIKqvBA=
Subject key identifier:   AB:49:49:DA:4A:04:F4:25:1A:49:36:8D:FC:FB:AA:0A:06:AA:B5:E4
Certificate issuer:       /CN=b0876e33a29b26f43f41b1f9ac5b4024c036e417
Certificate serial:       135ADD9DE16F3024DE04297697149F9FFA3417F3
Authority key identifier: B0:87:6E:33:A2:9B:26:F4:3F:41:B1:F9:AC:5B:40:24:C0:36:E4:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sIduM6KbJvQ_QbH5rFtAJMA25Bc.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/2/AS213086.asa
Signing time:             Fri 01 Dec 2023 11:59:16 +0000
ASPA not before:          Fri 01 Dec 2023 11:54:16 +0000
ASPA not after:           Fri 29 Nov 2024 11:59:16 +0000
Customer ASID:            213086
Providers:                AS: 140731
                          AS: 199762
                          AS: 200160
                          AS: 203913

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/2/B0876E33A29B26F43F41B1F9AC5B4024C036E417.crl
                          rsync://rpki.nap.re/repo/pongery/2/B0876E33A29B26F43F41B1F9AC5B4024C036E417.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sIduM6KbJvQ_QbH5rFtAJMA25Bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5a:dd:9d:e1:6f:30:24:de:04:29:76:97:14:9f:9f:fa:34:17:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0876e33a29b26f43f41b1f9ac5b4024c036e417
        Validity
            Not Before: Dec  1 11:54:16 2023 GMT
            Not After : Nov 29 11:59:16 2024 GMT
        Subject: CN=AB4949DA4A04F4251A49368DFCFBAA0A06AAB5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:79:63:4b:d9:d0:6d:11:6b:d1:0f:ab:1e:f6:
                    84:21:eb:6d:55:0c:65:6d:04:9c:7a:c7:b5:e7:8f:
                    70:05:0d:7e:c5:01:43:8c:48:70:9a:58:b4:a5:b9:
                    4f:d3:34:94:ea:be:5f:6f:9f:fd:97:d6:2f:5b:3d:
                    f7:8b:b8:59:41:26:7c:f4:18:e5:89:51:32:51:f9:
                    e9:79:ac:41:bb:d1:70:d0:a9:9f:83:9f:f8:df:22:
                    15:6c:3a:63:01:74:bc:b7:47:b5:4d:e2:25:e6:83:
                    83:25:32:4f:18:3e:32:d9:f0:41:35:ab:dd:67:4b:
                    e5:47:cd:41:bd:b0:35:1b:44:e1:27:34:c9:de:c5:
                    0f:50:ca:5c:06:e6:cb:d5:dc:54:38:ae:2a:e1:07:
                    e1:50:36:62:d4:5b:1b:df:97:c1:de:f5:83:26:40:
                    4b:a0:18:90:86:6b:90:ec:91:9c:7c:e2:15:5f:d7:
                    97:40:5a:9c:a0:30:43:7a:76:ef:70:13:c3:8f:47:
                    ea:12:e9:34:cf:a3:11:e3:90:26:c0:12:9f:0d:f8:
                    02:a9:17:07:84:cd:0d:ab:79:16:71:16:6e:a0:05:
                    08:16:5c:b8:e7:a2:67:7d:b8:aa:2f:b5:d1:81:00:
                    1e:e5:46:37:2d:3e:82:e3:a9:ae:e3:c8:37:be:e8:
                    47:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:49:49:DA:4A:04:F4:25:1A:49:36:8D:FC:FB:AA:0A:06:AA:B5:E4
            X509v3 Authority Key Identifier:
                keyid:B0:87:6E:33:A2:9B:26:F4:3F:41:B1:F9:AC:5B:40:24:C0:36:E4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/2/B0876E33A29B26F43F41B1F9AC5B4024C036E417.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIduM6KbJvQ_QbH5rFtAJMA25Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/2/AS213086.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213086

    Signature Algorithm: sha256WithRSAEncryption
         b0:2e:63:35:5e:8d:da:80:c3:e1:d5:3c:e5:ff:b5:97:1a:f6:
         f9:8a:22:27:5a:78:a4:38:bf:a7:d7:6f:f8:64:db:28:f4:80:
         93:c7:37:92:a8:46:a7:ee:77:47:b3:48:ed:87:67:75:39:f5:
         32:45:8b:da:dd:b7:86:87:6d:3b:cc:6b:d3:73:49:1d:6f:d2:
         fd:66:81:d5:91:bf:af:0f:5a:13:cc:0e:4d:7f:25:fb:a3:01:
         35:fb:66:35:8b:6c:a1:ed:08:ff:67:fd:62:01:05:7c:51:62:
         c0:5b:27:51:3d:71:4a:f5:29:0e:df:d7:3c:66:dc:e2:e0:9b:
         1c:f2:a8:05:36:3d:86:cf:31:c6:ce:0a:2d:db:ad:20:cc:c1:
         05:7f:1f:5c:17:af:ac:71:72:a9:07:0e:4e:7d:b1:50:9e:b8:
         ce:72:5e:1d:1c:08:60:11:bb:7e:7a:3b:8e:89:ce:c1:0e:a0:
         1f:93:44:de:52:83:0c:1a:a3:74:d3:e8:c4:af:2f:97:d5:51:
         e9:65:81:45:28:73:4c:fe:83:23:d6:23:76:98:77:68:0d:63:
         69:73:d7:5b:86:c9:5a:d2:5c:a8:82:59:58:3d:7a:09:76:41:
         5b:5f:20:fa:b2:48:a8:b3:86:cb:1e:b9:58:47:f7:02:a9:d7:
         24:55:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:40:28 2024 by rpki-client on console-fra.rpki-client.org