Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/AS203843.asa
File:                     AS203843.asa (raw, json)
Hash identifier:          F+HMBcjmz5mvSkt4j5JllzBBJMZpssPv9EHY+o/ab7Y=
Subject key identifier:   24:73:CA:53:0A:31:C4:B9:BB:EF:7C:E2:A2:4D:37:ED:AE:D2:9B:29
Certificate issuer:       /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial:       73590620101A6936C4AF4E38DD7AD567C88A2C5F
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/AS203843.asa
Signing time:             Fri 03 Nov 2023 09:12:53 +0000
ASPA not before:          Fri 03 Nov 2023 09:07:53 +0000
ASPA not after:           Fri 01 Nov 2024 09:12:53 +0000
Customer ASID:            203843
Providers:                AS: 6939
                          AS: 20473
                          AS: 53667

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:59:06:20:10:1a:69:36:c4:af:4e:38:dd:7a:d5:67:c8:8a:2c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
        Validity
            Not Before: Nov  3 09:07:53 2023 GMT
            Not After : Nov  1 09:12:53 2024 GMT
        Subject: CN=2473CA530A31C4B9BBEF7CE2A24D37EDAED29B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:67:ed:e1:65:49:fa:24:3a:fe:88:3f:68:08:
                    5c:e0:ff:7f:18:44:27:ad:79:09:0f:69:de:93:d4:
                    f8:4c:84:5a:0d:70:44:21:75:f6:76:c8:6b:ce:ae:
                    f5:d2:3e:05:e7:0a:36:64:85:59:c6:45:d0:b4:a0:
                    79:ef:0a:89:8a:29:1f:53:e4:75:4f:bd:6a:cd:8b:
                    51:c4:6f:1a:7e:49:7b:8b:5e:bd:19:fb:0b:c0:2b:
                    df:77:1a:4f:c9:23:5e:9c:35:ea:6c:56:b5:32:58:
                    ea:c3:93:91:d7:90:e8:34:a3:4b:1f:f3:ee:42:9b:
                    16:24:db:6a:71:6f:93:dc:de:ec:cb:18:67:a5:a7:
                    84:71:12:7b:a8:70:e3:52:55:4d:62:ab:87:c4:f2:
                    80:e0:c1:ae:ec:5f:3a:7c:39:81:f9:b7:15:76:ca:
                    72:0a:10:47:29:0e:19:4e:c1:2a:35:83:bb:40:b8:
                    23:47:71:0e:4f:bd:25:8c:89:36:37:b8:bd:32:bc:
                    d6:09:21:8b:52:12:21:36:aa:4d:0f:dc:e3:53:b2:
                    a9:ec:46:b3:c4:d7:52:df:37:a6:b7:99:7e:30:71:
                    54:11:37:fa:ea:45:b6:19:f1:bb:14:4b:f8:0d:4f:
                    d8:7e:83:be:02:9b:4a:f2:7a:38:3f:42:aa:9e:d0:
                    16:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:73:CA:53:0A:31:C4:B9:BB:EF:7C:E2:A2:4D:37:ED:AE:D2:9B:29
            X509v3 Authority Key Identifier:
                keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/AS203843.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203843

    Signature Algorithm: sha256WithRSAEncryption
         cd:1a:2c:a8:7c:53:55:9c:56:7f:63:30:f7:c8:38:4d:f2:bc:
         7d:3a:54:8a:f9:de:3b:12:ce:b2:73:3b:c2:33:e6:4c:76:7f:
         e4:77:fb:c0:de:51:b4:7f:07:38:cf:b7:70:51:10:a5:d6:b1:
         9a:d9:4e:2c:a7:3d:df:96:62:e6:b6:ba:23:78:b4:5e:60:ae:
         a2:b5:64:fa:c1:b4:ac:88:6d:28:bd:3b:af:8b:3f:b6:58:f8:
         d7:9d:d7:f7:54:7f:6a:e1:f0:80:44:38:50:c6:39:3d:b7:fa:
         10:54:ea:35:f6:7a:44:ed:7f:f0:64:05:2d:0e:7f:76:6a:e7:
         74:99:81:99:3b:1d:1f:22:74:58:fe:99:7c:95:17:1d:e2:87:
         ed:a7:66:33:56:e9:46:a2:25:12:db:2f:83:c2:6a:5e:a7:5f:
         b3:6f:df:44:a4:09:76:23:e5:70:a1:bf:a4:2a:39:e5:00:95:
         c6:d7:46:2a:b3:e5:45:81:ec:90:72:26:29:86:d9:1a:e8:c8:
         91:3f:41:a3:f2:97:dd:6c:62:85:e5:ae:7f:24:61:11:58:c5:
         95:56:14:01:3b:de:78:00:27:6e:f8:f1:ac:b4:7c:e2:4f:15:
         5d:7b:66:49:17:0e:cf:e0:50:a1:59:ef:72:7a:67:6e:9d:b7:
         b6:fd:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:13:18 2024 by rpki-client on console-fra.rpki-client.org