Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS212068.asa
File:                     AS212068.asa (raw, json)
Hash identifier:          QXRqjvyIsgMa/j1rSS0BMDpCgwyMXqfuROfUKWSTiN4=
Subject key identifier:   F1:6E:B9:CB:7F:11:74:20:D6:1D:47:1C:63:31:EF:A4:52:63:61:D2
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       3823BC6C637B72237E6E22C57F6624E0781D354D
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS212068.asa
Signing time:             Thu 23 Jan 2025 21:21:17 +0000
ASPA not before:          Thu 23 Jan 2025 21:16:17 +0000
ASPA not after:           Thu 22 Jan 2026 21:21:17 +0000
Customer ASID:            212068
Providers:                AS: 6939
                          AS: 13237
                          AS: 62240
                          AS: 207960
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:23:bc:6c:63:7b:72:23:7e:6e:22:c5:7f:66:24:e0:78:1d:35:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jan 23 21:16:17 2025 GMT
            Not After : Jan 22 21:21:17 2026 GMT
        Subject: CN=F16EB9CB7F117420D61D471C6331EFA4526361D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8c:ae:e5:f0:ff:d1:34:08:12:41:8e:f2:82:
                    78:9f:49:84:f1:13:3a:0f:6a:59:64:68:5c:1f:bf:
                    15:e8:ad:60:b7:ae:8e:c1:04:78:f8:c5:f7:f3:97:
                    d8:58:b8:91:2f:f4:72:01:79:d7:ba:fd:a7:3d:e8:
                    7a:87:ec:ac:2d:33:2e:a9:97:76:2f:9b:31:af:0d:
                    9e:93:cf:9e:b9:34:05:86:dc:82:19:5c:8d:90:2d:
                    8d:97:52:bc:e0:df:9d:a4:1d:0e:35:64:d8:df:28:
                    d7:1e:fc:c4:b9:c0:b3:49:4e:df:f0:a4:01:92:b2:
                    4e:71:09:b0:4f:37:50:0a:82:1f:eb:91:6d:00:a3:
                    b3:29:78:8c:6c:8e:8a:2c:31:57:f0:41:1b:7c:84:
                    ba:d0:4a:15:a3:1d:63:1e:71:6b:15:3e:1b:ef:b3:
                    59:d9:3a:65:83:f2:3a:d0:3a:e3:72:b9:32:3c:24:
                    d5:69:da:f2:9d:6c:4e:20:e6:b2:49:9d:9b:ad:ec:
                    01:02:ba:59:4b:48:57:78:2c:26:f5:0c:84:91:fb:
                    ee:44:9e:c5:8a:e3:67:9d:0f:fc:b7:cc:7b:dd:cf:
                    b6:78:4a:18:7e:09:b5:fd:d2:3c:45:3d:8d:99:98:
                    81:e1:e8:a4:1a:90:38:b4:5b:72:b7:d8:58:e8:de:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:B9:CB:7F:11:74:20:D6:1D:47:1C:63:31:EF:A4:52:63:61:D2
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS212068.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212068

    Signature Algorithm: sha256WithRSAEncryption
         92:bb:58:a5:a5:19:98:21:9b:f8:a8:0f:ba:fb:45:62:a5:0f:
         2a:66:38:d7:b1:bb:ae:40:5d:0d:88:18:ce:00:4a:34:30:25:
         91:a4:36:7e:e8:a4:ce:7b:fd:4a:ad:0b:ba:7c:74:55:cf:6a:
         29:a8:41:64:3f:bc:47:9b:29:5a:83:42:87:6b:23:cf:0e:86:
         e5:79:cc:81:86:e0:fd:b5:7c:2a:91:42:77:a8:31:d4:13:a9:
         71:7e:bc:24:6d:b7:29:29:c1:a5:a2:c8:a7:43:d9:35:ec:b6:
         35:eb:ba:b0:f6:d0:4e:80:d6:af:ad:50:29:47:9a:15:ac:63:
         7a:c0:dd:1e:01:f4:9e:60:43:6a:b3:75:18:6c:53:47:33:43:
         df:42:13:c8:29:25:05:45:2d:26:70:f9:f1:4f:17:52:9b:91:
         0e:1b:d1:1c:e9:c9:78:5a:2a:8f:80:bb:5f:02:63:9c:81:95:
         90:e7:ec:97:50:ae:37:f9:7f:20:74:4b:af:a2:59:69:d7:c0:
         8f:6c:04:de:23:16:71:a5:ab:9f:f6:c4:7a:37:10:e8:ad:92:
         17:03:87:88:40:c1:d9:1a:ac:af:c1:c3:e5:d9:7c:af:6e:c0:
         0b:78:b5:7b:c0:ae:c5:5d:58:84:3b:8a:93:ae:33:44:16:24:
         2a:5c:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 08:34:28 2025 by rpki-client