Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/AS47272.asa
File:                     AS47272.asa (raw, json)
Hash identifier:          r0zTarU+kuXJRsYezBzGnrfCx9URXJttfE4KUuV9zss=
Subject key identifier:   6D:C3:0F:CF:AD:A1:41:80:52:39:BC:4B:1D:9C:78:44:37:09:3E:A6
Certificate issuer:       /CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Certificate serial:       14947BE5BF5F59D0775C8DF55FEB246C4FDB2C97
Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/AS47272.asa
Signing time:             Sun 24 Nov 2024 16:11:16 +0000
ASPA not before:          Sun 24 Nov 2024 16:06:16 +0000
ASPA not after:           Sun 23 Nov 2025 16:11:16 +0000
Customer ASID:            47272
Providers:                AS: 174
                          AS: 835
                          AS: 924
                          AS: 1299
                          AS: 6830
                          AS: 6939
                          AS: 20473
                          AS: 21738
                          AS: 25759
                          AS: 34927
                          AS: 35133
                          AS: 41051
                          AS: 48605
                          AS: 50391
                          AS: 50917
                          AS: 52025
                          AS: 52210
                          AS: 58057
                          AS: 210667
                          AS: 212514
                          AS: 212895

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Dec 2024 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:94:7b:e5:bf:5f:59:d0:77:5c:8d:f5:5f:eb:24:6c:4f:db:2c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e
        Validity
            Not Before: Nov 24 16:06:16 2024 GMT
            Not After : Nov 23 16:11:16 2025 GMT
        Subject: CN=6DC30FCFADA141805239BC4B1D9C784437093EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:90:a2:e1:12:5a:82:a4:ac:54:b2:e6:e1:
                    82:c5:79:f8:c6:fd:4b:8b:23:07:c7:fa:72:35:a2:
                    d8:79:d2:0e:ba:14:cb:a5:15:6d:17:78:2c:ad:7f:
                    4a:1e:51:cc:99:e7:41:a3:20:a8:e1:89:09:b3:2a:
                    0e:2e:19:38:be:62:61:97:25:74:63:37:3f:ed:df:
                    a1:23:85:03:1b:b5:a6:40:49:64:f2:5f:25:59:fb:
                    ed:9f:d0:c5:c7:aa:d1:55:38:e4:16:40:84:5d:00:
                    c9:38:a3:65:ad:37:ed:6e:dc:f2:33:a2:68:b4:41:
                    a5:b2:b1:a7:e5:18:a9:fc:88:b1:c2:da:0e:76:2a:
                    5d:d5:c6:0a:f2:7a:93:4c:41:5b:a7:79:6a:ac:bd:
                    1f:56:4e:f3:1e:3b:9c:71:d5:d1:05:85:b3:8c:7b:
                    29:10:3d:e1:43:02:2e:87:2a:9a:00:13:7b:7d:af:
                    89:a3:a8:77:f4:67:79:9e:a2:38:c0:ee:ae:bc:50:
                    a7:6a:d1:07:af:41:fd:82:d2:39:c3:05:cf:33:49:
                    1f:4e:10:68:a4:6e:09:71:db:e3:50:72:cf:77:ae:
                    eb:89:49:cf:b1:d9:4b:a7:15:01:a2:e4:6a:27:42:
                    24:cd:87:94:a8:87:9e:98:30:d0:d0:83:66:44:6c:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C3:0F:CF:AD:A1:41:80:52:39:BC:4B:1D:9C:78:44:37:09:3E:A6
            X509v3 Authority Key Identifier:
                keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/AS47272.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47272

    Signature Algorithm: sha256WithRSAEncryption
         31:3d:cd:f1:47:3c:93:e0:af:f5:84:56:47:b9:53:98:50:b5:
         b3:84:fb:85:f4:03:18:ea:9e:61:cf:12:b4:3a:4a:d2:3f:df:
         2f:52:74:89:5a:df:95:63:b0:8e:84:b4:8b:88:a8:3f:9d:99:
         a2:f9:46:a6:fa:db:e6:f3:07:f3:90:c6:77:6b:44:9f:56:1b:
         7d:e5:46:89:a8:bb:2e:43:fc:b5:76:9a:02:85:de:9e:ed:2e:
         31:21:94:9d:50:45:87:34:17:c1:86:9f:2b:63:b3:4f:33:52:
         0d:e9:04:22:f5:47:57:46:b7:2a:0d:ff:03:ff:84:1a:a1:9c:
         b5:be:f3:01:98:2a:c0:bd:0e:1b:9b:73:cf:07:aa:b3:f4:fd:
         f3:f4:9a:b9:f5:d5:02:16:67:d5:b8:a3:2f:21:d5:51:54:88:
         b2:37:11:3e:21:00:42:12:f3:80:ab:32:9d:b1:a6:e6:33:e7:
         e8:82:95:33:a2:26:a6:77:e0:fc:5a:f6:9b:18:3b:a1:59:a7:
         8b:9f:1e:0d:8f:ea:e4:54:8b:88:77:ef:11:79:54:8e:85:98:
         cc:ed:db:e0:1d:30:39:30:7d:81:2e:27:3f:e4:3f:59:a5:47:
         09:71:21:5a:c1:d4:53:24:69:e5:48:78:1f:e4:0f:95:d7:af:
         38:01:cc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 1 10:23:52 2024 by rpki-client on console-fra.rpki-client.org