Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS212068.asa
File:                     AS212068.asa (raw, json)
Hash identifier:          B3ZUqxz38OM0d1AJg+LgnB7cw80/HkHXOni8GeSXIhs=
Subject key identifier:   E4:EF:54:2E:A9:BE:12:6B:C4:98:0C:AB:68:87:8A:88:39:05:3C:5A
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       3B6AA7D1222F31065CFD5E5B450F6268449B7335
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS212068.asa
Signing time:             Thu 22 Feb 2024 20:35:15 +0000
ASPA not before:          Thu 22 Feb 2024 20:30:15 +0000
ASPA not after:           Thu 20 Feb 2025 20:35:15 +0000
Customer ASID:            212068
Providers:                AS: 6939
                          AS: 13237
                          AS: 62240
                          AS: 207960

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Oct 2024 14:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6a:a7:d1:22:2f:31:06:5c:fd:5e:5b:45:0f:62:68:44:9b:73:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Feb 22 20:30:15 2024 GMT
            Not After : Feb 20 20:35:15 2025 GMT
        Subject: CN=E4EF542EA9BE126BC4980CAB68878A8839053C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:55:87:c5:96:1f:c1:8e:79:43:ab:71:97:
                    8b:8e:22:55:30:57:70:0e:9a:a2:a1:93:8a:5d:d1:
                    6b:11:3b:38:bd:f7:54:38:ca:fa:fc:45:01:d0:ec:
                    48:47:e1:6c:36:5c:0c:ff:26:42:8c:8d:75:a6:c4:
                    f3:48:8a:30:f4:db:7b:76:2a:7f:82:e6:99:68:6c:
                    ba:10:1a:03:02:33:80:26:a7:8e:73:ce:79:3c:48:
                    bf:17:ef:ee:cc:5e:de:1a:70:8e:bf:02:25:08:77:
                    22:db:55:d6:df:ab:ae:ae:4d:af:d5:88:19:a4:43:
                    03:3d:2b:23:21:5b:39:68:09:14:c2:75:95:d2:b5:
                    b3:9f:af:34:7a:8a:73:56:dc:3b:0b:f1:42:f9:c5:
                    8b:c9:46:9e:71:54:12:24:31:29:8a:d4:fb:54:61:
                    46:48:33:90:3d:f8:69:0a:2f:e0:ed:03:49:c9:00:
                    6e:f4:f2:4a:08:40:34:91:ee:70:d1:71:59:c8:2a:
                    a6:a0:fd:1f:d2:0f:c9:3c:42:25:35:c4:7b:7b:0c:
                    7a:c1:27:eb:aa:13:cf:83:2b:30:84:7e:f7:5c:54:
                    00:a0:cd:6f:59:8f:3e:21:28:91:ca:9f:c5:ef:dd:
                    8a:c3:80:74:9e:be:f0:b9:5c:dd:00:e6:2f:c0:18:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EF:54:2E:A9:BE:12:6B:C4:98:0C:AB:68:87:8A:88:39:05:3C:5A
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/AS212068.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212068

    Signature Algorithm: sha256WithRSAEncryption
         4e:4c:e2:37:a3:c7:f6:73:49:2a:23:c2:72:cd:45:be:94:b6:
         3b:b2:67:ed:bc:42:40:f5:9d:b9:a4:bd:be:4b:b5:05:89:fc:
         c8:52:15:6e:fa:02:ee:14:fe:92:88:af:20:74:36:48:37:75:
         8b:27:40:03:4f:32:14:13:ba:a0:4f:93:4a:31:98:38:19:6e:
         5e:e8:a1:84:e3:90:d2:15:32:cd:cd:aa:ef:24:a7:26:10:14:
         64:c0:8c:27:cf:db:a4:fc:22:30:7a:be:6c:b5:f5:b1:27:a0:
         44:05:9c:73:4f:b7:51:75:41:70:47:f4:b3:82:5c:68:ae:6c:
         51:f3:fb:57:56:26:bb:28:dc:d4:2c:42:69:e4:f0:53:c0:1a:
         ce:4a:d3:ca:dd:15:6b:94:22:64:64:2e:5a:c7:55:35:ee:ed:
         ef:ff:0b:4e:b7:f0:15:4b:33:1a:44:45:8b:25:61:06:e2:21:
         2c:c7:97:00:50:5d:02:47:38:4e:82:ca:15:e7:e9:c9:5d:ab:
         d4:30:f1:b9:4b:b3:ac:03:b0:e9:8f:03:02:9b:60:2c:c1:f3:
         b0:85:7d:13:37:dc:c3:96:3a:61:4a:31:2f:20:0b:dd:92:c7:
         57:47:7a:cb:5d:7c:3d:90:e9:ff:06:3e:dd:5e:e4:41:19:f5:
         40:ad:5c:01
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUO2qn0SIvMQZc/V5bRQ9iaESbczUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwNTc5MDIxMjg3ZWE2NDk1ZDdmOTM0YTZkZWQzMGVl
MmE1YmIzODAeFw0yNDAyMjIyMDMwMTVaFw0yNTAyMjAyMDM1MTVaMDMxMTAvBgNV
BAMTKEU0RUY1NDJFQTlCRTEyNkJDNDk4MENBQjY4ODc4QTg4MzkwNTNDNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0YVWHxZYfwY55Q6txl4uOIlUw
V3AOmqKhk4pd0WsROzi991Q4yvr8RQHQ7EhH4Ww2XAz/JkKMjXWmxPNIijD023t2
Kn+C5plobLoQGgMCM4Amp45zznk8SL8X7+7MXt4acI6/AiUIdyLbVdbfq66uTa/V
iBmkQwM9KyMhWzloCRTCdZXStbOfrzR6inNW3DsL8UL5xYvJRp5xVBIkMSmK1PtU
YUZIM5A9+GkKL+DtA0nJAG708koIQDSR7nDRcVnIKqag/R/SD8k8QiU1xHt7DHrB
J+uqE8+DKzCEfvdcVACgzW9Zjz4hKJHKn8Xv3YrDgHSevvC5XN0A5i/AGI7/AgMB
AAGjggIFMIICATAdBgNVHQ4EFgQU5O9ULqm+EmvEmAyraIeKiDkFPFowHwYDVR0j
BBgwFoAUYAV5AhKH6mSV1/k0pt7TDuKluzgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTk3OWYwMTUtMmQ2OS00OGYxLWJiNTItMzU4MWM0ZGY0
OGZhLzAvNjAwNTc5MDIxMjg3RUE2NDk1RDdGOTM0QTZERUQzMEVFMkE1QkIzOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1lBVjVBaEtINm1TVjFfazBwdDdURHVL
bHV6Zy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzE5NzlmMDE1LTJkNjkt
NDhmMS1iYjUyLTM1ODFjNGRmNDhmYS8wL0FTMjEyMDY4LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM8ZDANBgkq
hkiG9w0BAQsFAAOCAQEATkziN6PH9nNJKiPCcs1FvpS2O7Jn7bxCQPWduaS9vku1
BYn8yFIVbvoC7hT+koivIHQ2SDd1iydAA08yFBO6oE+TSjGYOBluXuihhOOQ0hUy
zc2q7ySnJhAUZMCMJ8/bpPwiMHq+bLX1sSegRAWcc0+3UXVBcEf0s4JcaK5sUfP7
V1Ymuyjc1CxCaeTwU8AazkrTyt0Va5QiZGQuWsdVNe7t7/8LTrfwFUszGkRFiyVh
BuIhLMeXAFBdAkc4ToLKFefpyV2r1DDxuUuzrAOw6Y8DAptgLMHzsIV9Ezfcw5Y6
YUoxLyAL3ZLHV0d6y118PZDp/wY+3V7kQRn1QK1cAQ==
-----END CERTIFICATE-----
Generated at Tue Oct 29 22:34:30 2024 by rpki-client on console-ams.rpki-client.org