Autonomous System Provider Authorization

$ rpki-client -vvf rpki.xindi.eu/repo/XINDI/0/AS39002.asa
File:                     AS39002.asa (raw, json)
Hash identifier:          hEB8BBdYVlo72zx+ljFUNEeMeK+wTDG+bdunzLzWuR8=
Subject key identifier:   4A:A1:D1:72:E6:A6:65:6E:8B:E7:E3:FE:89:EB:DB:57:53:84:C9:3A
Certificate issuer:       /CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
Certificate serial:       6B2E0775226DA1569E17695960BDBB14F90C33F8
Authority key identifier: 60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
Subject info access:      rsync://rpki.xindi.eu/repo/XINDI/0/AS39002.asa
Signing time:             Fri 24 Jan 2025 18:18:35 +0000
ASPA not before:          Fri 24 Jan 2025 18:13:35 +0000
ASPA not after:           Fri 23 Jan 2026 18:18:35 +0000
Customer ASID:            39002
Providers:                AS: 0
Validation:               OK
Signature path:           rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl
                          rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Feb 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2e:07:75:22:6d:a1:56:9e:17:69:59:60:bd:bb:14:f9:0c:33:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60183287eb08ece0c65fa49a3f45621c612ddbd1
        Validity
            Not Before: Jan 24 18:13:35 2025 GMT
            Not After : Jan 23 18:18:35 2026 GMT
        Subject: CN=4AA1D172E6A6656E8BE7E3FE89EBDB575384C93A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:a0:af:3f:eb:49:54:b8:29:98:38:cc:69:
                    89:6b:6c:45:a0:e8:83:8a:47:e8:4e:fd:78:89:da:
                    f2:97:c2:71:e9:ec:ea:44:5c:ed:a8:58:b2:e7:bf:
                    a5:b4:54:1d:63:9a:6a:59:6d:36:cd:c9:03:6a:4b:
                    3f:2e:78:f6:07:58:5c:21:46:08:dd:8e:94:6d:93:
                    89:b8:15:da:a2:c9:e5:3e:9c:27:68:e3:a7:41:9d:
                    8b:c4:71:45:13:4a:56:bd:3d:42:ac:61:63:bf:18:
                    a9:81:b1:23:fb:b0:2c:2e:6a:fc:3a:31:ec:e0:78:
                    11:38:98:5e:4b:dd:c5:5f:73:ca:80:dd:73:c7:8c:
                    70:a7:ba:72:e3:f9:70:e9:04:bf:61:a3:56:29:e1:
                    db:ef:3c:77:f7:84:65:49:80:d7:2a:a6:15:88:d2:
                    e6:ac:b8:ea:06:41:17:69:67:c3:d4:32:9b:2e:3a:
                    06:30:47:2c:9f:25:ea:0d:09:6a:46:a2:c3:a5:d1:
                    c2:fe:8a:24:31:aa:f7:ac:e2:e6:e6:db:c9:a3:8c:
                    41:bf:ab:78:14:14:a1:ae:f2:c7:d5:92:3d:0b:91:
                    4a:eb:89:69:f3:3f:24:2d:53:7a:5e:8f:a5:24:06:
                    90:26:81:a8:d9:a3:6e:6d:0b:bc:af:74:6b:e4:f0:
                    e5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:D1:72:E6:A6:65:6E:8B:E7:E3:FE:89:EB:DB:57:53:84:C9:3A
            X509v3 Authority Key Identifier:
                keyid:60:18:32:87:EB:08:EC:E0:C6:5F:A4:9A:3F:45:62:1C:61:2D:DB:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.xindi.eu/repo/XINDI/0/60183287EB08ECE0C65FA49A3F45621C612DDBD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBgyh-sI7ODGX6SaP0ViHGEt29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.xindi.eu/repo/XINDI/0/AS39002.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  39002

    Signature Algorithm: sha256WithRSAEncryption
         02:19:01:fa:38:11:91:38:37:2d:bf:21:b9:dd:f9:06:39:5a:
         ae:72:eb:b3:9f:ad:da:16:df:71:b8:32:42:49:e9:40:5d:a1:
         8f:c9:41:35:b9:cb:58:a8:4d:32:2e:c2:39:be:99:f5:fd:6a:
         ca:5f:7b:85:6a:23:4d:fd:1f:c0:8b:33:75:ce:01:c9:6f:cf:
         ad:1c:66:ac:78:0f:96:dd:57:c0:1d:09:29:e6:cc:d4:3e:f5:
         71:74:dc:aa:10:fc:e3:3f:e9:fe:0a:0f:1f:13:b5:e6:ac:cd:
         80:27:a7:3f:3a:7f:dd:fb:47:1b:1b:9e:7f:b3:37:1b:43:bc:
         57:4f:6f:bc:b0:2e:6d:88:21:b1:33:cc:c2:5d:4a:7d:1c:1d:
         b1:eb:6e:ae:57:71:15:fe:6b:e4:0c:f4:3b:62:93:32:fc:1c:
         dc:b8:ac:23:1a:3d:5b:d9:fa:b5:e7:b9:d9:cb:f6:24:82:4d:
         4b:e5:6f:e3:c1:6f:dc:d5:5e:1c:c3:c8:8f:61:38:5f:ad:a0:
         b9:03:73:58:dc:ef:b4:c9:68:ff:e4:73:be:89:5d:f5:98:79:
         31:2c:ca:81:cf:b8:3b:3f:58:f2:e3:93:67:8f:bb:02:c3:5d:
         57:e4:df:a5:a8:76:e9:7b:2e:d1:15:d9:8c:c5:0d:8e:05:a2:
         f7:22:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 15:20:20 2025 by rpki-client