Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/AS205789.asa
File:                     AS205789.asa (raw, json)
Hash identifier:          fNyr4+ZO4lx/cmc26iGkkuevzba5LYLhJw1/6UROwOc=
Subject key identifier:   80:75:3D:A1:E1:A1:5A:99:5B:84:88:AE:E5:47:24:96:9A:0D:D7:3E
Certificate issuer:       /CN=119ce8e9e7c4d85eec64153b32ad2938118cf280
Certificate serial:       251C271007BA69A0F29BA477473CE09098FD549F
Authority key identifier: 11:9C:E8:E9:E7:C4:D8:5E:EC:64:15:3B:32:AD:29:38:11:8C:F2:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EZzo6efE2F7sZBU7Mq0pOBGM8oA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/AS205789.asa
Signing time:             Mon 23 Oct 2023 10:30:42 +0000
ASPA not before:          Mon 23 Oct 2023 10:25:42 +0000
ASPA not after:           Mon 21 Oct 2024 10:30:42 +0000
Customer ASID:            205789
Providers:                AS: 200242
                          AS: 207960

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EZzo6efE2F7sZBU7Mq0pOBGM8oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Nov 2023 02:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1c:27:10:07:ba:69:a0:f2:9b:a4:77:47:3c:e0:90:98:fd:54:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=119ce8e9e7c4d85eec64153b32ad2938118cf280
        Validity
            Not Before: Oct 23 10:25:42 2023 GMT
            Not After : Oct 21 10:30:42 2024 GMT
        Subject: CN=80753DA1E1A15A995B8488AEE54724969A0DD73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:4b:3d:b3:1e:77:2b:c5:38:13:2e:51:79:
                    45:6f:a2:bd:51:96:dd:e4:72:69:87:b1:43:c4:aa:
                    f9:b5:2e:f9:09:68:b8:75:2e:e4:c0:1b:1b:ef:37:
                    11:b0:55:16:7d:ca:fc:7c:0f:4e:9d:6e:bd:b2:d1:
                    55:4b:1c:03:65:8c:d5:1e:c2:6a:be:91:4d:e0:ed:
                    a7:d9:35:87:c2:a4:9d:2f:10:53:24:5d:22:34:10:
                    64:82:bc:27:b5:47:70:71:bf:3b:fb:af:4b:d8:2f:
                    f8:4b:f8:53:d2:33:5e:54:50:96:58:8d:f4:8d:96:
                    b1:b5:cd:e6:65:7d:d6:8c:e1:ef:d2:3a:be:ab:e0:
                    80:f9:53:e4:9f:26:ac:45:b7:44:e2:67:4b:a8:19:
                    48:6a:df:0a:4a:b0:0d:84:09:49:87:57:41:1f:4b:
                    c1:4c:c2:52:8b:4e:3a:45:e8:7d:df:e2:81:f1:2b:
                    62:f1:7e:d9:44:d7:8e:4a:76:78:37:52:41:7e:63:
                    ae:33:24:c4:73:76:54:e7:8f:43:a8:6e:f3:52:e8:
                    b0:3a:f3:08:ca:87:28:8c:fd:38:00:30:4f:ae:5b:
                    54:16:5e:8c:b2:a5:71:31:12:88:6a:28:bb:07:ff:
                    89:14:b1:b5:14:04:4c:f0:d6:db:11:98:8c:0a:0c:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:75:3D:A1:E1:A1:5A:99:5B:84:88:AE:E5:47:24:96:9A:0D:D7:3E
            X509v3 Authority Key Identifier:
                keyid:11:9C:E8:E9:E7:C4:D8:5E:EC:64:15:3B:32:AD:29:38:11:8C:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZzo6efE2F7sZBU7Mq0pOBGM8oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/AS205789.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205789

    Signature Algorithm: sha256WithRSAEncryption
         1d:73:de:43:ab:e5:6b:a6:b5:1b:46:50:aa:63:7f:7b:a2:33:
         7f:7d:4f:c5:29:5d:d7:3b:82:f6:e8:19:d7:e3:df:3e:a3:fb:
         0f:65:af:d4:db:c6:8c:a1:5b:bd:84:dc:cd:b4:3e:5b:b0:a2:
         ec:fc:82:2c:1e:49:27:37:cc:74:92:ea:05:76:1f:ea:37:55:
         a0:9e:62:07:46:e1:0b:27:2e:4e:be:44:02:0c:df:0c:84:18:
         cf:72:f0:9a:39:31:8d:a1:80:3b:81:a5:13:21:51:7a:e0:82:
         5c:79:50:06:91:cf:16:4c:35:a6:1a:21:45:ce:82:14:1e:4e:
         89:f7:59:c9:b6:a9:de:c1:32:f5:53:13:50:6c:33:98:85:01:
         28:15:46:0f:03:e6:d2:29:c0:dc:bc:8d:c6:80:09:30:a0:3b:
         99:f1:ae:2a:06:18:1d:3c:f5:a4:ab:a0:24:60:02:0f:09:15:
         27:27:68:4c:ac:2f:e8:fc:0f:3e:e6:d4:d7:d1:ed:5b:02:5c:
         fe:48:bf:0d:0b:d2:cd:50:ef:ae:f4:e8:be:91:8c:d3:c3:bd:
         89:8d:1e:99:78:7d:62:94:47:13:f3:7c:49:b4:32:f7:16:7c:
         38:ee:de:d6:9f:f8:f4:72:66:49:4e:12:ff:1c:a0:a5:90:39:
         ed:3b:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 08:52:05 2023 by rpki-client on console-ams.rpki-client.org