Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/AS212245.asa
File:                     AS212245.asa (raw, json)
Hash identifier:          ZYHS7bw/60aIF+HAe417yzc3y3QWiUxfEiwvjxJbGvk=
Subject key identifier:   A7:0B:13:8C:6C:5F:DD:EC:5E:94:D2:8E:61:3F:D2:61:F6:87:DA:E5
Certificate issuer:       /CN=974f44dcd416495219413c1b0d69a1f87f507288
Certificate serial:       250D196CD721D942072B436F5D1FAA192C9EE5DF
Authority key identifier: 97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/AS212245.asa
Signing time:             Thu 13 Jun 2024 12:37:23 +0000
ASPA not before:          Thu 13 Jun 2024 12:32:23 +0000
ASPA not after:           Thu 12 Jun 2025 12:37:23 +0000
Customer ASID:            212245
Providers:                AS: 917
                          AS: 200242
                          AS: 212068

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0d:19:6c:d7:21:d9:42:07:2b:43:6f:5d:1f:aa:19:2c:9e:e5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974f44dcd416495219413c1b0d69a1f87f507288
        Validity
            Not Before: Jun 13 12:32:23 2024 GMT
            Not After : Jun 12 12:37:23 2025 GMT
        Subject: CN=A70B138C6C5FDDEC5E94D28E613FD261F687DAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:d4:32:aa:9f:03:68:74:9a:72:8d:27:a9:
                    9d:89:44:cf:02:92:94:8f:d1:c2:c8:95:88:7e:4d:
                    3b:f7:c7:2a:9c:8c:82:3f:35:33:57:65:a8:17:57:
                    37:1c:34:6a:4b:d9:ca:0b:4e:30:88:9c:8a:fa:b6:
                    ec:03:8d:3c:08:a9:0d:59:ef:63:5b:4c:29:b7:54:
                    d3:9f:db:be:00:45:de:4f:2f:5b:87:25:2d:df:fc:
                    aa:85:f9:c0:f2:e7:c2:dd:3a:c2:6b:85:4e:7e:92:
                    bc:5b:ed:2f:51:9a:7d:af:70:b1:63:2d:be:a4:37:
                    df:25:4b:fc:76:98:c9:01:46:51:52:fb:53:6b:0c:
                    5e:5a:5f:68:fc:08:6d:e8:3b:5f:d2:d8:84:8b:79:
                    f2:c2:ce:00:fc:98:c2:3c:92:82:93:87:0a:2d:0b:
                    de:fa:34:56:6f:2d:d7:d6:6f:45:2e:8b:cb:50:77:
                    eb:59:f5:79:21:18:d2:be:9c:7d:7b:2f:f3:de:28:
                    30:74:8e:1e:5e:09:b9:f1:24:02:4e:af:fa:d4:60:
                    3f:a4:cd:71:0f:25:6a:d9:9c:52:16:9f:37:b8:9f:
                    c7:c2:7b:6f:5f:3d:85:0e:dd:9b:89:f5:29:05:7c:
                    1b:0e:67:49:f1:5a:83:92:57:00:e5:ab:15:4b:47:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0B:13:8C:6C:5F:DD:EC:5E:94:D2:8E:61:3F:D2:61:F6:87:DA:E5
            X509v3 Authority Key Identifier:
                keyid:97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/AS212245.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212245

    Signature Algorithm: sha256WithRSAEncryption
         d3:a5:b8:d3:7e:6a:88:87:c1:3e:99:1e:74:d8:f8:08:81:3e:
         c0:b0:41:b9:35:39:67:e2:2f:0a:88:77:4b:2f:79:c4:84:ef:
         3d:a0:5d:ff:26:87:32:36:80:d6:d0:a5:d6:28:6b:ba:18:93:
         4e:c0:02:7d:c3:76:e4:ee:5a:49:b5:9c:eb:4c:bb:c0:1e:a5:
         f2:e7:92:7d:0e:95:a0:4f:5e:06:39:db:63:4b:d4:8b:24:81:
         1c:59:09:41:43:8b:67:83:65:19:c9:5d:c9:71:ec:9f:7b:3e:
         cf:04:d3:4a:fa:63:be:a0:0d:db:7a:86:c9:17:b1:59:27:7a:
         e9:9a:d8:50:c0:80:b5:3b:b5:60:54:16:91:ae:2a:3f:b3:bd:
         b9:d0:f7:7d:24:a5:d5:14:d5:06:7b:21:c9:a0:0f:80:4f:46:
         12:24:9c:7c:20:70:7b:20:b2:b3:74:c2:07:6e:96:35:cd:07:
         7a:62:e0:53:5e:b3:5b:ec:e6:fe:c0:ef:67:e5:a3:75:25:2e:
         22:c6:19:e5:32:52:06:a6:7a:ab:14:dd:b2:ed:94:07:25:23:
         93:39:ce:e3:af:64:5f:8e:be:f3:68:6c:1f:f4:58:bb:3c:9b:
         4e:a9:f3:f4:e9:93:65:67:86:e1:24:e3:0c:d4:1e:dd:42:85:
         b6:c9:6d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 13:31:44 2024 by rpki-client on console-ams.rpki-client.org