Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS198136.asa
File:                     AS198136.asa (raw, json)
Hash identifier:          GvtwHp5NKK1rwVMt+11LwLToct1B8reEg37G2+dbOpo=
Subject key identifier:   75:60:F5:12:EA:11:26:E0:1F:38:42:ED:B1:50:B0:71:25:A2:3D:6E
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       5359BEE4104C8912E659D25F8EE58D3206C98DDB
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS198136.asa
Signing time:             Thu 28 Dec 2023 22:11:59 +0000
ASPA not before:          Thu 28 Dec 2023 22:06:59 +0000
ASPA not after:           Thu 26 Dec 2024 22:11:59 +0000
Customer ASID:            198136
Providers:                AS: 0

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:59:be:e4:10:4c:89:12:e6:59:d2:5f:8e:e5:8d:32:06:c9:8d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Dec 28 22:06:59 2023 GMT
            Not After : Dec 26 22:11:59 2024 GMT
        Subject: CN=7560F512EA1126E01F3842EDB150B07125A23D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:91:0f:a2:7e:25:4c:0e:d4:dc:94:e6:93:
                    60:94:73:be:05:a6:f4:c4:c7:c2:0d:b7:74:70:28:
                    9a:4b:a1:d8:4a:fd:7c:07:5e:93:ec:6d:44:f8:46:
                    1a:e6:c5:0a:6b:1e:44:04:67:54:cd:f7:e3:fa:75:
                    a8:27:97:8a:ab:5a:8b:1f:a4:09:30:36:53:8a:71:
                    a9:da:36:1e:12:02:f1:e5:c2:b6:9a:30:c9:14:99:
                    fb:fb:1d:f7:7b:df:45:fd:6d:75:52:53:b1:87:f0:
                    6f:bc:25:3b:54:94:65:1a:e6:5a:3c:42:8d:eb:07:
                    d5:5a:da:22:3d:95:52:8b:51:2f:31:d1:e1:16:43:
                    26:99:77:d6:96:50:45:b3:30:46:22:20:ef:dd:1f:
                    c4:f4:e1:5b:bd:a5:dd:8e:69:56:e7:9e:e2:14:24:
                    44:47:12:9e:af:75:e6:d9:36:d8:0b:6a:8d:d0:14:
                    95:66:85:6b:04:07:9c:11:19:d8:cb:a1:c5:c9:e9:
                    52:69:95:81:c6:1f:30:9b:87:7e:0f:0b:79:3a:38:
                    db:18:a8:17:29:39:fb:6a:ee:6a:6e:c6:75:cd:01:
                    5d:17:54:cf:83:c2:f6:97:89:df:d4:7d:69:a0:a2:
                    c3:ed:1f:f1:57:88:76:46:c1:f4:d9:cf:ad:c8:40:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:60:F5:12:EA:11:26:E0:1F:38:42:ED:B1:50:B0:71:25:A2:3D:6E
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS198136.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198136

    Signature Algorithm: sha256WithRSAEncryption
         26:21:7d:37:16:95:cf:db:63:21:08:dd:e3:dd:b5:73:1f:45:
         73:c6:41:b0:ee:c8:43:e8:19:d7:61:34:95:3d:0e:92:1d:73:
         37:3e:ac:3b:d2:f7:3f:bc:3b:c5:7b:7a:03:12:ac:93:f2:95:
         80:1f:64:08:a4:66:d2:56:94:0a:e7:67:06:c6:d0:df:f3:10:
         a7:04:12:15:82:db:5a:59:fc:8d:10:cf:5b:3e:7a:5d:c6:cf:
         6c:c8:b6:3d:62:bc:35:ef:d7:56:70:c2:3d:3a:3e:f2:7b:d6:
         6f:db:20:0d:0d:b9:f4:40:93:90:88:81:0e:ba:b9:77:47:a9:
         9a:78:80:a6:b8:f1:43:95:2a:2a:92:37:91:63:39:6b:f4:3a:
         2e:a5:b5:a3:f4:07:8e:a8:1d:46:3a:0e:c8:2b:2a:90:c3:49:
         20:9f:93:54:8b:97:10:1e:85:c8:84:16:57:20:d3:f9:b6:ac:
         07:fe:f1:39:b3:e7:e7:5c:87:c5:5c:99:37:b2:ba:81:63:c5:
         4b:d1:b0:cd:e6:1b:cc:58:5a:c4:bf:fc:e2:1d:69:bf:2b:84:
         a8:f9:30:aa:df:7c:97:49:f6:ad:d9:b5:70:49:cc:f8:79:c5:
         e3:d4:9e:29:f9:67:68:4a:62:d7:af:6f:1c:ca:27:1e:02:73:
         15:22:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:24:19 2024 by rpki-client on console-fra.rpki-client.org