Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/AS203843.asa
File:                     AS203843.asa (raw, json)
Hash identifier:          GwoeQKAfY1KoaOWObV0VEzXQzef4Ep/PlP4XQCkmW1c=
Subject key identifier:   7B:AF:BC:38:C3:59:43:11:EF:CF:79:1C:87:39:E3:15:E3:DD:E1:1B
Certificate issuer:       /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial:       710C0D7761A5FE64BD15C4D03E6BAB74AA2707BC
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/AS203843.asa
Signing time:             Fri 04 Oct 2024 09:55:36 +0000
ASPA not before:          Fri 04 Oct 2024 09:50:36 +0000
ASPA not after:           Fri 03 Oct 2025 09:55:36 +0000
Customer ASID:            203843
Providers:                AS: 6939
                          AS: 20473
                          AS: 53667

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Dec 2024 08:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0c:0d:77:61:a5:fe:64:bd:15:c4:d0:3e:6b:ab:74:aa:27:07:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
        Validity
            Not Before: Oct  4 09:50:36 2024 GMT
            Not After : Oct  3 09:55:36 2025 GMT
        Subject: CN=7BAFBC38C3594311EFCF791C8739E315E3DDE11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:92:d2:bd:11:69:b6:ff:47:f3:4b:44:fa:c6:
                    9e:d8:17:ae:bf:91:df:d1:22:05:47:9f:8d:b0:3e:
                    53:e0:42:9c:8c:00:24:80:62:2c:c0:72:7a:fa:b4:
                    1e:41:61:2a:e9:01:74:7b:e8:f7:f2:83:68:55:95:
                    c6:66:93:cf:aa:6c:f9:5f:95:f3:aa:59:d7:10:7e:
                    81:68:4d:18:ab:36:90:01:48:69:c6:5f:02:b1:67:
                    a6:04:cb:e4:1f:f9:10:93:db:a9:42:f0:91:33:db:
                    b2:2e:4e:43:f6:d5:5f:c3:51:9b:59:6a:17:d8:a5:
                    ee:e9:3c:1d:28:cd:b8:e7:62:29:d2:0f:87:d6:a5:
                    a2:78:73:5a:58:c1:b2:8e:25:df:8f:5c:0a:87:57:
                    6c:fe:c5:b8:f3:00:2d:bb:9c:1b:b4:dc:a6:0a:ce:
                    0a:39:25:79:1e:89:43:55:79:fc:0c:41:07:66:b5:
                    f5:e8:62:ef:4c:9e:5e:7f:7d:ef:b9:a7:d5:18:da:
                    6a:0c:0d:c8:3f:e4:ce:d8:10:30:f8:62:b8:07:09:
                    41:7e:89:ad:ab:d1:73:e2:0e:13:38:f8:ba:e7:72:
                    9d:c2:73:a7:02:7d:b9:db:d6:c7:57:be:ff:d4:ac:
                    79:0e:54:ee:89:ac:ec:6c:2f:e3:85:3b:d9:a3:13:
                    b2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AF:BC:38:C3:59:43:11:EF:CF:79:1C:87:39:E3:15:E3:DD:E1:1B
            X509v3 Authority Key Identifier:
                keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/AS203843.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203843

    Signature Algorithm: sha256WithRSAEncryption
         2d:21:6f:1f:51:6d:5e:82:72:37:b5:7d:5e:9a:46:0a:8a:9d:
         50:db:ef:5f:9b:c7:f2:07:72:d5:a7:a5:79:16:fb:98:55:e3:
         82:2e:57:41:62:3e:b9:67:de:55:28:ca:fc:ae:64:56:8f:da:
         fa:aa:6c:9b:45:1e:70:96:1e:f5:ba:60:4f:75:70:c9:62:c1:
         f2:64:28:b5:f8:34:1d:94:0c:b4:a8:1b:f3:5f:67:c4:02:3c:
         79:f0:58:4f:3c:81:c4:30:74:96:3e:df:e4:27:51:b0:e8:f5:
         88:c1:3c:e2:ff:32:2c:55:14:9c:96:d9:91:7a:34:c3:b9:fc:
         24:8a:af:ad:1b:07:80:1c:9f:ac:47:1e:6d:e7:92:df:9c:62:
         0d:de:3b:ce:6a:de:d7:26:d1:fe:68:b4:e6:82:c2:b2:9c:dd:
         0c:79:ce:a5:d4:83:7d:da:78:29:06:7f:80:17:e0:df:14:0c:
         9b:40:ab:ef:17:4b:79:91:53:72:5c:cf:07:45:9c:10:ac:eb:
         a9:88:f1:33:d1:75:4f:10:11:88:44:8b:9e:79:63:ad:bc:6c:
         1e:cb:ff:48:f8:ba:0c:b9:78:2b:e6:d7:8e:5f:39:5a:87:51:
         89:f3:b0:d1:4d:37:05:9c:88:44:1c:c6:58:8c:5d:97:5b:1b:
         0d:e4:f5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 14:41:41 2024 by rpki-client on console-fra.rpki-client.org