Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/AS203619.asa
File:                     AS203619.asa (raw, json)
Hash identifier:          OkHneCEjcI+l0k8K7ep/hGiqXvdtOZD+HEEvRg4Q9KQ=
Subject key identifier:   3E:77:89:E5:89:62:9F:48:76:C0:73:B5:D7:CD:F4:80:29:23:D6:07
Certificate issuer:       /CN=677f663cdaa5996868019b05d109baad3558be3a
Certificate serial:       5932E25642A9792FEE81513A76F169D01ECA3C07
Authority key identifier: 67:7F:66:3C:DA:A5:99:68:68:01:9B:05:D1:09:BA:AD:35:58:BE:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/AS203619.asa
Signing time:             Tue 23 Jan 2024 15:01:38 +0000
ASPA not before:          Tue 23 Jan 2024 14:56:38 +0000
ASPA not after:           Tue 21 Jan 2025 15:01:38 +0000
Customer ASID:            203619
Providers:                AS: 200454

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:32:e2:56:42:a9:79:2f:ee:81:51:3a:76:f1:69:d0:1e:ca:3c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677f663cdaa5996868019b05d109baad3558be3a
        Validity
            Not Before: Jan 23 14:56:38 2024 GMT
            Not After : Jan 21 15:01:38 2025 GMT
        Subject: CN=3E7789E589629F4876C073B5D7CDF4802923D607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:c7:e6:29:98:81:8a:30:f3:8d:ec:ee:f7:
                    b6:97:a3:95:06:30:b1:a0:55:44:9d:c2:bb:a6:0f:
                    08:21:fb:0f:58:a7:c8:e7:b9:09:8f:1e:3e:05:04:
                    2c:ec:af:88:f8:24:44:15:dc:4d:86:d2:7c:f7:77:
                    a2:9a:45:0b:45:f9:a3:ad:fb:49:31:c1:27:3b:ee:
                    ea:af:be:3d:cd:34:d6:d1:8f:3b:7d:05:35:d2:51:
                    84:1b:1e:5e:bf:c5:8a:8a:20:dc:02:68:85:ce:3b:
                    70:e8:41:4b:a9:26:78:45:9a:46:74:59:21:df:16:
                    25:0f:3f:39:5d:3f:51:0d:bc:e8:a1:84:ba:25:25:
                    d9:29:f9:31:76:9d:5a:ee:f0:f7:fb:f9:0b:8b:5e:
                    01:17:c6:20:a2:1c:86:6e:b2:b5:b9:95:d6:e4:6a:
                    73:1f:0e:48:8e:0c:91:b5:2d:03:b4:f6:90:5f:08:
                    f0:7b:2c:51:07:9b:7a:9c:15:94:a2:3b:90:a4:07:
                    c6:0c:30:e7:9e:75:69:86:5c:a3:46:4b:33:f1:0e:
                    2b:8c:b7:34:44:75:07:78:c6:23:65:0e:3e:11:9c:
                    33:36:2b:89:4f:0d:68:e4:75:bd:62:0e:e4:80:ec:
                    d9:c1:bb:63:36:01:5b:1a:8e:54:ef:15:ba:53:74:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:77:89:E5:89:62:9F:48:76:C0:73:B5:D7:CD:F4:80:29:23:D6:07
            X509v3 Authority Key Identifier:
                keyid:67:7F:66:3C:DA:A5:99:68:68:01:9B:05:D1:09:BA:AD:35:58:BE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/AS203619.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203619

    Signature Algorithm: sha256WithRSAEncryption
         78:4a:1d:59:eb:f4:49:c8:48:23:49:89:35:75:dd:47:be:e9:
         ee:14:bb:94:13:15:d6:f4:fa:8d:d3:4a:c6:97:34:b4:d7:a3:
         d3:6a:c0:98:79:d3:b6:94:9f:d5:99:7c:b6:f4:02:f7:a2:7c:
         df:b6:24:3a:dc:c7:f3:91:39:31:fb:b3:1a:01:4d:be:7f:ea:
         d7:9c:fa:44:1e:9c:48:b7:73:ca:20:1e:cd:25:1d:44:cc:4a:
         ba:0f:21:93:5a:44:46:e0:37:be:03:72:dd:dc:19:7e:4d:fa:
         97:53:a2:ac:0a:1e:2c:1b:4d:e4:26:da:50:ca:00:a1:c3:1b:
         87:b0:8a:6e:5d:56:fd:dc:2e:33:f7:0a:15:28:53:68:a2:ce:
         0a:00:b3:80:b3:6f:8c:24:a1:14:03:83:c2:30:e3:3c:da:3c:
         c0:52:a7:80:e0:44:66:e1:9a:e1:83:e0:34:ce:84:4c:89:15:
         dc:4b:2f:7e:86:f4:c5:9e:da:a1:fa:da:cd:c1:16:98:bb:72:
         26:41:fe:47:f8:aa:60:d5:83:17:89:e6:e1:3e:cc:34:92:82:
         0c:c4:fe:ee:bb:75:70:75:1a:03:97:a2:29:7a:5c:5b:d1:99:
         01:2b:61:96:25:c4:01:9e:6b:40:18:bb:85:35:09:6e:8a:7d:
         32:e1:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 15:06:55 2024 by rpki-client on console-fra.rpki-client.org