Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/AS202076.asa
File:                     AS202076.asa (raw, json)
Hash identifier:          Jlztg0528nmCbYVda1dVfuqysePPK1bc5kEbKCFdTCA=
Subject key identifier:   AE:81:57:64:35:A0:CB:EE:BF:EA:EC:D9:49:06:8B:13:3B:62:87:7F
Certificate issuer:       /CN=635199cdc46cb6919367127d69c22339e990ffda
Certificate serial:       02985FD889ADB8147CAE8A72430F5797C9B8C178
Authority key identifier: 63:51:99:CD:C4:6C:B6:91:93:67:12:7D:69:C2:23:39:E9:90:FF:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y1GZzcRstpGTZxJ9acIjOemQ_9o.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/AS202076.asa
Signing time:             Mon 23 Oct 2023 10:30:42 +0000
ASPA not before:          Mon 23 Oct 2023 10:25:42 +0000
ASPA not after:           Mon 21 Oct 2024 10:30:42 +0000
Customer ASID:            202076
Providers:                AS: 207960

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y1GZzcRstpGTZxJ9acIjOemQ_9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 Nov 2023 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:98:5f:d8:89:ad:b8:14:7c:ae:8a:72:43:0f:57:97:c9:b8:c1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635199cdc46cb6919367127d69c22339e990ffda
        Validity
            Not Before: Oct 23 10:25:42 2023 GMT
            Not After : Oct 21 10:30:42 2024 GMT
        Subject: CN=AE81576435A0CBEEBFEAECD949068B133B62877F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:f4:30:3d:97:c5:4b:2b:0e:c3:41:bf:a4:
                    da:a9:a5:cd:1d:90:b1:86:e1:71:13:20:6c:18:84:
                    a5:e7:7c:f9:ab:ac:ec:7f:e8:4a:35:e7:86:d1:05:
                    51:d1:c1:48:be:f3:0f:88:2b:b5:f3:98:df:aa:b5:
                    0c:53:c6:89:78:4a:eb:7b:e7:cf:d4:b8:8a:3d:38:
                    4e:d6:ba:31:c5:ed:3e:3d:f0:b9:fb:ef:af:b5:13:
                    84:bb:00:cb:63:f6:ee:03:e9:bf:60:08:a3:0d:e4:
                    0a:a0:90:bf:3f:77:ea:b6:63:54:61:f1:29:a9:33:
                    24:e7:28:f1:28:43:05:3e:98:30:61:6e:78:06:44:
                    27:a0:3e:d4:ae:54:41:07:6e:95:62:07:13:da:89:
                    a7:ce:12:d5:1a:a3:ef:f2:f4:ea:18:0d:10:99:04:
                    1e:d3:19:35:29:8d:6c:71:9a:95:4c:39:02:9a:11:
                    c1:e1:6a:ef:77:26:ac:00:4f:90:f7:24:38:44:15:
                    90:7e:e1:e9:11:2f:0d:70:d1:64:d1:79:ec:fd:0c:
                    24:03:90:0f:dc:55:12:8d:89:e2:2e:90:53:9a:fe:
                    de:d6:f4:db:fb:32:26:3f:90:f6:af:a3:4c:4f:4d:
                    28:e3:cf:fe:0e:ef:d5:df:e6:6c:d9:46:94:b4:ea:
                    5c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:81:57:64:35:A0:CB:EE:BF:EA:EC:D9:49:06:8B:13:3B:62:87:7F
            X509v3 Authority Key Identifier:
                keyid:63:51:99:CD:C4:6C:B6:91:93:67:12:7D:69:C2:23:39:E9:90:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1GZzcRstpGTZxJ9acIjOemQ_9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/AS202076.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202076

    Signature Algorithm: sha256WithRSAEncryption
         ad:9a:71:cc:ad:f4:bc:1b:c2:03:e3:f2:57:61:87:92:8c:6e:
         b7:34:d6:2a:1c:b5:81:eb:0e:ba:7a:47:a4:be:7d:4d:ea:ef:
         c9:1d:cf:1f:e9:d7:51:22:c9:15:ec:9d:9c:2e:f1:67:87:e6:
         29:17:5d:21:80:a3:fe:27:42:a6:31:f9:05:9a:74:73:df:e5:
         a8:8f:4f:17:f4:4c:5c:9c:63:6e:2b:a3:90:00:ee:ef:09:47:
         c3:7f:03:b1:a6:43:49:7b:af:55:2d:6f:5c:fa:6b:55:0d:4f:
         04:31:63:8e:4a:aa:47:8c:5e:cc:e9:02:e7:97:df:07:16:94:
         a8:a6:57:2d:fa:50:1c:40:02:2a:28:b1:8e:e7:9f:4a:b1:a6:
         78:ce:b1:af:82:33:64:53:9b:f0:1f:1a:7f:cc:4d:11:5b:09:
         ef:bb:e6:18:e4:10:e7:a1:3c:92:62:d6:51:54:37:45:f0:45:
         76:b9:6f:c6:07:98:b2:82:08:72:6e:7b:1b:21:ba:05:f3:8a:
         ad:9a:49:da:6c:e5:45:7e:83:b6:a2:f3:8c:85:26:87:5a:0b:
         41:29:45:91:61:86:4c:16:71:9c:a9:42:63:09:c4:d7:5b:02:
         48:29:54:51:fe:ce:ef:7b:04:ae:f8:88:58:09:b7:39:de:ce:
         18:a3:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 11 09:50:56 2023 by rpki-client on console-ams.rpki-client.org