Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/AS200242.asa
File:                     AS200242.asa (raw, json)
Hash identifier:          2kHP6Juuqv9qZ2XOS6ctnoydYugC3Hor2Z6Wc5LQn6I=
Subject key identifier:   03:65:7F:02:66:7C:62:DB:44:3B:9B:BD:12:CF:C0:40:7A:D0:BB:AF
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       36B15EE165AB5E951E29EF189B05F49C37B06476
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/AS200242.asa
Signing time:             Sat 29 Jun 2024 11:29:41 +0000
ASPA not before:          Sat 29 Jun 2024 11:24:41 +0000
ASPA not after:           Sat 28 Jun 2025 11:29:41 +0000
Customer ASID:            200242
Providers:                AS: 835
                          AS: 6939
                          AS: 20473
                          AS: 21738
                          AS: 34465
                          AS: 34927
                          AS: 59678
                          AS: 210152
                          AS: 210475

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jul 2024 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b1:5e:e1:65:ab:5e:95:1e:29:ef:18:9b:05:f4:9c:37:b0:64:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: Jun 29 11:24:41 2024 GMT
            Not After : Jun 28 11:29:41 2025 GMT
        Subject: CN=03657F02667C62DB443B9BBD12CFC0407AD0BBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:22:88:68:10:5f:f6:10:d2:f7:4d:ec:3a:
                    fd:ae:8e:69:63:1a:06:68:bd:69:32:a5:43:5d:b8:
                    72:79:a1:bb:83:cc:42:06:be:fc:a0:7c:f3:3d:1d:
                    5e:18:0b:fc:01:ee:0d:36:04:bb:56:5e:5b:5a:2a:
                    19:b5:1e:dc:b1:c8:d7:b2:de:d1:e1:82:dd:35:82:
                    57:e5:07:a3:26:34:56:5a:c8:ee:06:b7:3c:c9:1c:
                    2a:8e:26:d7:1a:4f:dc:ac:20:a1:55:7a:58:2a:9a:
                    aa:46:09:0a:62:56:fc:cb:f1:14:f7:20:a3:66:34:
                    bb:19:49:0c:5e:2e:58:c0:20:f2:a8:33:b9:09:91:
                    29:25:76:ed:c1:07:c3:7a:ce:d3:15:b7:57:40:f7:
                    65:5b:57:09:ed:15:0b:5b:1c:17:a4:87:9b:ba:56:
                    79:66:0e:16:f9:8c:eb:27:dc:93:e8:f2:c9:ac:f1:
                    eb:cc:94:55:a6:31:a4:68:52:ad:b8:c9:b1:94:83:
                    35:1b:be:30:65:ab:b5:5c:9a:d4:bd:79:aa:f6:ad:
                    8b:5e:76:d0:ee:90:b4:14:af:e7:ef:0e:ff:8e:ee:
                    f1:0c:fb:9c:fa:fc:e0:b5:7a:b0:1a:e6:07:ab:18:
                    b9:24:be:8a:13:83:99:80:e2:51:c2:61:cd:98:8b:
                    d9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:65:7F:02:66:7C:62:DB:44:3B:9B:BD:12:CF:C0:40:7A:D0:BB:AF
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/AS200242.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200242

    Signature Algorithm: sha256WithRSAEncryption
         83:4e:97:5d:b7:89:ab:57:fb:c9:cb:4a:8f:75:9c:94:9b:ef:
         b8:cd:39:d4:e1:98:54:b0:56:0f:e9:9e:bf:fc:11:c3:54:b5:
         f3:45:5a:6a:4d:8e:75:34:f4:3a:1a:9d:8d:a0:1a:66:97:91:
         e3:1f:62:53:89:5f:3f:c3:5a:51:94:5d:53:04:dd:9c:c5:6f:
         7c:ee:8b:9c:bf:e4:52:d2:8e:3f:91:8b:91:72:fa:a5:88:da:
         1b:47:a6:12:d4:b1:2f:cb:43:9c:3e:30:3c:aa:3f:89:55:43:
         2d:98:40:18:ba:81:75:ec:04:0f:ad:01:5a:fa:5f:fa:43:62:
         a3:c1:2e:2c:88:cf:ee:08:f8:a5:cf:d8:4a:21:7d:64:c9:7c:
         9a:6d:ca:72:03:c9:de:2f:9d:1c:e0:b2:d5:1d:be:11:a7:be:
         ee:aa:38:39:c4:3a:d1:ac:23:89:61:10:51:bb:00:c5:60:fd:
         3c:7d:75:34:1b:fa:42:2c:aa:0c:17:3c:d7:f5:c8:e6:f9:84:
         c9:d8:2f:72:91:da:c2:c9:59:e2:6a:1a:ba:55:d1:39:2d:eb:
         c4:f8:24:dd:91:02:bc:cb:e5:2a:51:7f:6c:d7:51:85:d4:b2:
         12:32:42:da:ab:02:97:21:c9:ba:35:91:64:a6:7c:1f:c0:37:
         ca:a8:71:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 12:42:36 2024 by rpki-client on console-fra.rpki-client.org