Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2efd6faf-0200-4683-9e5b-fe66e6122a02/0/AS198590.asa
File:                     AS198590.asa (raw, json)
Hash identifier:          IZSEyn8QNwl1qrq6WGYRrTx6+wCXd2h+q79As1JW6vU=
Subject key identifier:   4C:38:F0:01:D2:CA:29:E9:00:19:9F:8C:D6:6D:E0:54:2A:9D:F1:90
Certificate issuer:       /CN=e2f7e47e3892b5f23baeac3c6e1a12cd27421034
Certificate serial:       46A9705479B888B08D51A57E8409ABC1188FDC7C
Authority key identifier: E2:F7:E4:7E:38:92:B5:F2:3B:AE:AC:3C:6E:1A:12:CD:27:42:10:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4vfkfjiStfI7rqw8bhoSzSdCEDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2efd6faf-0200-4683-9e5b-fe66e6122a02/0/AS198590.asa
Signing time:             Sun 31 Mar 2024 19:16:38 +0000
ASPA not before:          Sun 31 Mar 2024 19:11:38 +0000
ASPA not after:           Sun 30 Mar 2025 19:16:38 +0000
Customer ASID:            198590
Providers:                AS: 6939
                          AS: 34927
                          AS: 35661
                          AS: 41051

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2efd6faf-0200-4683-9e5b-fe66e6122a02/0/E2F7E47E3892B5F23BAEAC3C6E1A12CD27421034.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2efd6faf-0200-4683-9e5b-fe66e6122a02/0/E2F7E47E3892B5F23BAEAC3C6E1A12CD27421034.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4vfkfjiStfI7rqw8bhoSzSdCEDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Apr 2024 23:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a9:70:54:79:b8:88:b0:8d:51:a5:7e:84:09:ab:c1:18:8f:dc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2f7e47e3892b5f23baeac3c6e1a12cd27421034
        Validity
            Not Before: Mar 31 19:11:38 2024 GMT
            Not After : Mar 30 19:16:38 2025 GMT
        Subject: CN=4C38F001D2CA29E900199F8CD66DE0542A9DF190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:5f:fe:3c:55:d7:71:23:b4:5a:58:e4:d8:
                    ba:a2:70:77:1a:27:31:f7:bb:13:de:08:f9:4d:d6:
                    bf:66:d7:9c:0a:33:90:fd:0d:82:0f:d2:e8:0b:17:
                    4c:77:bf:1a:54:3c:01:2d:31:6a:e5:19:97:26:d0:
                    e0:a8:f8:ac:9b:b6:a7:49:47:06:1a:c3:31:a9:07:
                    d1:75:c3:92:9f:bb:34:55:1d:b8:4f:1c:d9:78:cf:
                    24:ba:46:7b:e0:f3:6c:a4:99:47:fe:ac:91:7a:21:
                    2f:bc:32:11:ec:0d:25:92:c0:5f:2e:4a:8d:22:45:
                    62:db:00:95:f1:6d:a0:93:42:a9:1d:4b:6c:56:30:
                    c1:d7:ed:44:de:25:3e:08:e0:c4:6e:7d:df:f0:b3:
                    67:5e:53:d6:46:cf:52:eb:d5:e3:0a:32:73:af:24:
                    e1:14:b6:4c:ed:fc:41:13:1c:2d:67:8f:d3:c5:a3:
                    84:1a:94:c2:05:3f:ca:67:4d:0e:58:d7:95:32:b5:
                    d8:b8:52:44:df:c6:48:33:f0:89:04:c4:a0:73:a5:
                    ab:48:e4:c1:11:a4:87:40:85:4a:e2:46:bc:5c:49:
                    a3:47:24:64:d7:67:2e:b1:55:3f:4a:34:38:e6:98:
                    ab:2b:da:6c:10:2a:be:67:9c:84:22:6e:3f:e0:46:
                    e0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:38:F0:01:D2:CA:29:E9:00:19:9F:8C:D6:6D:E0:54:2A:9D:F1:90
            X509v3 Authority Key Identifier:
                keyid:E2:F7:E4:7E:38:92:B5:F2:3B:AE:AC:3C:6E:1A:12:CD:27:42:10:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2efd6faf-0200-4683-9e5b-fe66e6122a02/0/E2F7E47E3892B5F23BAEAC3C6E1A12CD27421034.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4vfkfjiStfI7rqw8bhoSzSdCEDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2efd6faf-0200-4683-9e5b-fe66e6122a02/0/AS198590.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  198590

    Signature Algorithm: sha256WithRSAEncryption
         52:a8:2a:86:d7:d1:0a:22:fc:cc:1e:ac:71:9b:28:d6:78:24:
         95:14:99:44:4b:7f:59:ff:4b:12:30:b6:bb:65:32:49:67:22:
         51:e8:b7:72:d2:42:07:d4:dc:cf:e8:bf:a1:0e:cd:d4:f3:e2:
         5b:1f:d1:41:94:b9:7f:86:e2:d4:8b:01:24:2b:b0:0f:23:10:
         3c:0c:ec:32:0c:89:f4:00:a2:48:98:f5:b6:35:33:9b:2f:49:
         57:71:ef:bc:c8:0f:d6:cc:a5:4f:ec:81:c7:c9:64:58:a6:a7:
         ac:fb:fc:ba:49:2f:48:c9:95:31:4a:6f:40:49:b1:55:1a:2b:
         de:66:9f:b4:84:95:6a:3e:83:62:57:b4:3c:7d:73:8f:23:70:
         7f:f6:7b:0b:c4:c6:cc:6d:0b:75:71:25:3b:80:9a:c0:ea:56:
         be:d0:2a:37:a9:2d:90:45:9d:23:2d:ed:13:65:90:11:6b:99:
         d2:b2:11:0a:10:2d:98:01:d3:97:2e:a1:3d:61:65:59:f5:f5:
         d3:c7:67:8d:0f:91:37:48:79:56:3f:dd:03:0a:19:e4:64:9d:
         55:ee:e9:15:9c:04:09:f8:16:6d:f0:79:5d:09:82:d0:ab:be:
         65:44:a0:ab:ed:85:06:dd:1a:22:5e:95:d2:86:5d:8f:04:5b:
         50:c1:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 09:55:42 2024 by rpki-client on console-fra.rpki-client.org