Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS198136.asa
File:                     AS198136.asa (raw, json)
Hash identifier:          W+U8FE8wW4IM5Quak0Mq8eROawTLthMCIEUtXh+wJqE=
Subject key identifier:   95:ED:08:58:28:99:FF:5A:ED:33:F5:B6:EF:64:65:5B:F6:F7:E4:A3
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       32243A9BC2FE0023C81C62603A48ECFFC8CE0F70
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS198136.asa
Signing time:             Thu 28 Nov 2024 22:50:31 +0000
ASPA not before:          Thu 28 Nov 2024 22:45:31 +0000
ASPA not after:           Thu 27 Nov 2025 22:50:31 +0000
Customer ASID:            198136
Providers:                AS: 0

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jan 2025 15:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:24:3a:9b:c2:fe:00:23:c8:1c:62:60:3a:48:ec:ff:c8:ce:0f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Nov 28 22:45:31 2024 GMT
            Not After : Nov 27 22:50:31 2025 GMT
        Subject: CN=95ED08582899FF5AED33F5B6EF64655BF6F7E4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:2a:8e:1c:65:32:9e:a0:d6:a7:20:69:01:
                    97:15:ff:52:bd:c6:a6:6b:9b:17:78:ae:6f:5b:52:
                    5c:53:97:32:98:2e:24:46:c3:12:c3:02:9f:53:50:
                    9c:c9:04:73:3e:8d:9c:06:93:68:25:62:fd:61:f8:
                    e2:50:e1:2d:ed:53:e3:53:1c:cb:dd:89:3a:73:dc:
                    cb:a0:1d:f2:eb:f7:ff:d5:9f:0c:de:d4:6f:bf:72:
                    a3:90:4c:03:ae:1b:11:2a:ba:be:d3:22:37:9b:6d:
                    aa:4b:a0:4e:8d:dd:3b:66:a1:e7:b9:85:52:35:9f:
                    8e:2a:40:b5:6e:95:df:8a:25:ac:9a:21:21:e2:3c:
                    d6:25:22:a2:9a:72:1f:01:f3:59:5b:99:49:4c:57:
                    2f:78:25:96:e4:a9:89:be:f3:72:a3:56:d9:8d:b6:
                    53:f1:88:60:56:25:74:5d:4e:12:84:f7:38:67:2b:
                    f0:37:f4:71:51:f9:53:49:6f:48:a3:5d:9f:7c:8b:
                    b3:af:fc:dd:3b:1a:29:bf:12:67:f9:75:39:b5:fb:
                    bd:55:2d:d5:c1:f1:5b:ce:04:19:a3:f1:2e:86:d0:
                    6d:52:44:e4:8a:db:19:85:4c:fc:1b:88:c7:44:77:
                    78:41:4d:b7:bc:fd:28:0e:bd:27:6b:3a:75:24:50:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:ED:08:58:28:99:FF:5A:ED:33:F5:B6:EF:64:65:5B:F6:F7:E4:A3
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS198136.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198136

    Signature Algorithm: sha256WithRSAEncryption
         46:0c:a8:be:d8:99:7d:7f:c2:82:f5:04:ce:d9:85:e0:48:55:
         c5:1f:1e:81:f0:d6:86:79:47:33:24:83:a6:de:22:d1:1a:15:
         d9:37:12:cf:55:e3:50:9e:e6:94:2c:85:ec:fd:13:93:81:14:
         0d:4a:ea:68:ef:a9:f0:ef:08:55:fe:85:25:f4:91:94:5d:77:
         a3:55:14:84:6a:f0:65:5b:85:c3:d5:17:09:3b:35:5a:07:6e:
         5a:19:31:a6:6b:ab:d7:1b:2e:18:61:78:25:58:02:dd:a1:cf:
         f3:d2:03:9c:64:fd:da:00:02:31:78:80:7c:57:01:13:06:b7:
         05:85:19:5e:dd:69:65:46:ef:bb:11:c4:58:8e:a2:25:4e:a9:
         0d:a2:c8:fe:a9:92:4d:dc:c5:c1:50:80:88:09:1c:b6:ba:f1:
         fa:78:40:00:78:90:95:e1:55:55:6b:20:fb:a9:48:06:9e:f1:
         26:fb:e2:75:f8:b3:7d:4c:e9:de:7f:69:54:98:37:ad:f8:7d:
         23:7d:22:c5:70:60:63:b4:6c:31:9f:a2:3d:2a:7c:29:8d:42:
         96:e1:80:63:69:62:63:50:74:d7:61:cc:e2:2e:5e:fa:db:9f:
         98:3e:5f:2e:57:49:7b:ff:a7:a5:c5:c0:7b:9f:29:02:f5:84:
         6c:ed:e1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 21:44:19 2025 by rpki-client on console-fra.rpki-client.org