Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/AS216311.asa
File:                     AS216311.asa (raw, json)
Hash identifier:          K7m3KVo3vTMDgBc/83DKyhT7Azk3LWdIWk6sAr0WLFs=
Subject key identifier:   E8:DF:86:B9:5E:0F:73:60:9E:BB:E7:74:47:75:6B:30:42:12:A2:27
Certificate issuer:       /CN=5777980e886c29f0060c3a073b6e681a8a70574b
Certificate serial:       30615ED37864D8680EA09DC9A966580A62BD7DAA
Authority key identifier: 57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/AS216311.asa
Signing time:             Fri 20 Sep 2024 09:08:19 +0000
ASPA not before:          Fri 20 Sep 2024 09:03:19 +0000
ASPA not after:           Fri 19 Sep 2025 09:08:19 +0000
Customer ASID:            216311
Providers:                AS: 6939
                          AS: 13852
                          AS: 20473
                          AS: 34927
                          AS: 52025

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:61:5e:d3:78:64:d8:68:0e:a0:9d:c9:a9:66:58:0a:62:bd:7d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5777980e886c29f0060c3a073b6e681a8a70574b
        Validity
            Not Before: Sep 20 09:03:19 2024 GMT
            Not After : Sep 19 09:08:19 2025 GMT
        Subject: CN=E8DF86B95E0F73609EBBE77447756B304212A227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:dd:8a:d0:55:73:5e:03:8b:da:64:85:f9:
                    7e:93:98:01:b3:99:97:22:67:20:64:2e:80:e8:10:
                    77:9a:3b:e3:91:d3:f6:cc:9d:e5:b4:c6:81:9d:f0:
                    7f:c5:94:f3:c6:80:7e:74:53:82:85:92:27:5d:f2:
                    9c:99:83:38:14:4c:ee:88:1b:e9:48:05:7a:f5:73:
                    1e:d7:1c:b8:44:9c:4c:22:f5:c4:58:cf:7c:59:69:
                    52:c3:59:68:3d:c3:e6:42:67:3f:9b:06:2c:50:ef:
                    26:6c:76:ff:85:15:46:d0:2c:7f:bd:ca:e5:66:70:
                    c3:c0:27:4f:e9:95:19:b4:6a:51:0c:f5:98:e2:a3:
                    72:6f:18:a7:83:be:ae:a2:c7:24:4d:54:5c:59:64:
                    4f:f0:7f:27:30:d6:3c:49:19:58:f6:76:ba:8f:b1:
                    2b:aa:22:7f:5a:94:6c:28:d4:c4:7b:40:d3:27:82:
                    07:8c:a7:36:54:e4:4e:44:2d:22:0d:76:9a:fe:77:
                    5f:d1:eb:55:0d:34:bc:6f:90:39:4a:6c:a3:80:e0:
                    d0:82:c9:20:be:3c:ee:39:4f:fe:17:f6:7c:75:73:
                    a1:22:1d:be:e8:41:d3:ae:0a:d6:6f:f5:41:c3:7e:
                    24:3c:ed:18:ee:f6:ad:8c:02:15:a9:92:b6:28:9a:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DF:86:B9:5E:0F:73:60:9E:BB:E7:74:47:75:6B:30:42:12:A2:27
            X509v3 Authority Key Identifier:
                keyid:57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/AS216311.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  216311

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:44:61:fd:ac:58:6e:ac:08:0d:8b:82:93:11:90:76:82:
         86:17:9e:b5:9f:ed:1e:22:da:f6:54:84:54:9e:fc:e6:f7:8a:
         cc:41:8e:aa:28:20:42:1d:50:16:59:e4:4a:90:a2:d7:9f:ba:
         12:ee:75:5f:6a:c4:8c:95:02:b9:2e:15:3b:1e:0e:95:56:4b:
         4b:89:0a:40:76:7e:a5:8e:7d:33:de:58:e5:db:b9:27:45:31:
         d5:bc:60:7d:be:99:8c:06:03:d6:0a:2b:18:e3:15:b9:73:9c:
         2a:75:8c:f0:ee:12:0e:6e:f5:76:39:bf:f7:5a:5c:5d:e8:fb:
         a9:e7:1e:61:92:eb:8a:ca:39:f8:d0:84:90:8d:d5:ee:cd:1b:
         ee:95:a7:bf:05:c7:16:35:b2:26:2c:8e:ef:bc:90:ca:c1:31:
         df:4d:a0:e0:23:a2:a6:52:7b:e8:d2:38:38:e0:69:75:4a:50:
         01:0d:47:f2:c8:42:5f:d6:f9:a1:e6:6e:3f:0c:b1:52:63:58:
         35:ed:25:02:8b:fd:a5:80:3e:53:26:70:f0:cf:e3:f7:93:43:
         3e:57:19:99:18:15:5d:81:b9:bd:10:25:7f:9f:d3:3a:70:97:
         d1:86:b9:a8:02:ae:b6:77:46:fe:d9:7a:e2:07:98:80:c9:99:
         46:8d:ac:a3
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUMGFe03hk2GgOoJ3JqWZYCmK9faowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc3Nzk4MGU4ODZjMjlmMDA2MGMzYTA3M2I2ZTY4MWE4
YTcwNTc0YjAeFw0yNDA5MjAwOTAzMTlaFw0yNTA5MTkwOTA4MTlaMDMxMTAvBgNV
BAMTKEU4REY4NkI5NUUwRjczNjA5RUJCRTc3NDQ3NzU2QjMwNDIxMkEyMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQN2K0FVzXgOL2mSF+X6TmAGz
mZciZyBkLoDoEHeaO+OR0/bMneW0xoGd8H/FlPPGgH50U4KFkidd8pyZgzgUTO6I
G+lIBXr1cx7XHLhEnEwi9cRYz3xZaVLDWWg9w+ZCZz+bBixQ7yZsdv+FFUbQLH+9
yuVmcMPAJ0/plRm0alEM9Zjio3JvGKeDvq6ixyRNVFxZZE/wfycw1jxJGVj2drqP
sSuqIn9alGwo1MR7QNMnggeMpzZU5E5ELSINdpr+d1/R61UNNLxvkDlKbKOA4NCC
ySC+PO45T/4X9nx1c6EiHb7oQdOuCtZv9UHDfiQ87Rju9q2MAhWpkrYomrh7AgMB
AAGjggIFMIICATAdBgNVHQ4EFgQU6N+GuV4Pc2Ceu+d0R3VrMEISoicwHwYDVR0j
BBgwFoAUV3eYDohsKfAGDDoHO25oGopwV0swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5
M2U2LzEvNTc3Nzk4MEU4ODZDMjlGMDA2MEMzQTA3M0I2RTY4MUE4QTcwNTc0Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1YzZVlEb2hzS2ZBR0REb0hPMjVvR29w
d1Ywcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBjNzA0MDFjLTdmNDEt
NGE2Yi05NDM0LWNjODBkY2EwOTNlNi8xL0FTMjE2MzExLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNM9zANBgkq
hkiG9w0BAQsFAAOCAQEAmaREYf2sWG6sCA2LgpMRkHaChheetZ/tHiLa9lSEVJ78
5veKzEGOqiggQh1QFlnkSpCi15+6Eu51X2rEjJUCuS4VOx4OlVZLS4kKQHZ+pY59
M95Y5du5J0Ux1bxgfb6ZjAYD1gorGOMVuXOcKnWM8O4SDm71djm/91pcXej7qece
YZLriso5+NCEkI3V7s0b7pWnvwXHFjWyJiyO77yQysEx302g4COiplJ76NI4OOBp
dUpQAQ1H8shCX9b5oeZuPwyxUmNYNe0lAov9pYA+UyZw8M/j95NDPlcZmRgVXYG5
vRAlf5/TOnCX0Ya5qAKutndG/tl64geYgMmZRo2sow==
-----END CERTIFICATE-----
Generated at Fri Sep 20 12:50:39 2024 by rpki-client on console-fra.rpki-client.org