Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS202359.asa
File:                     AS202359.asa (raw, json)
Hash identifier:          mxwxNs0m0UZrf7I6aQtsncScAS7f0XnqTdwlJa5RPLU=
Subject key identifier:   45:BE:85:7A:15:B4:08:92:BB:24:3B:A8:B7:14:79:EA:8B:C6:C0:F5
Certificate issuer:       /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial:       2AE669C9ED9E36793FFAB5980E77BA6121511025
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS202359.asa
Signing time:             Wed 24 May 2023 07:33:10 +0000
ASPA not before:          Wed 24 May 2023 07:28:10 +0000
ASPA not after:           Wed 22 May 2024 07:33:10 +0000
Customer ASID:            202359
Provider set:             AS: 33920
                          AS: 41495

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 May 2023 05:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:e6:69:c9:ed:9e:36:79:3f:fa:b5:98:0e:77:ba:61:21:51:10:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
        Validity
            Not Before: May 24 07:28:10 2023 GMT
            Not After : May 22 07:33:10 2024 GMT
        Subject: CN=45BE857A15B40892BB243BA8B71479EA8BC6C0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:46:a2:d5:ee:65:a8:64:3a:de:9c:06:e3:
                    25:b9:3a:7c:c2:12:ae:ed:24:de:22:0d:94:cc:c6:
                    77:a3:63:98:00:4c:b9:4e:f9:2d:f8:13:73:8f:17:
                    36:31:30:6d:fa:e0:f0:b0:10:1b:8a:67:23:e7:b6:
                    0f:0a:fe:ef:95:3f:e6:48:29:0f:37:31:9d:c7:cd:
                    4b:43:cc:94:02:76:80:46:28:12:4c:63:39:25:c4:
                    cf:cf:31:31:fa:04:fb:d4:7a:ff:b0:8b:d1:77:ff:
                    ff:93:de:1a:0b:f7:43:b2:cc:48:d5:ee:ce:f1:1c:
                    be:df:2a:8e:07:5f:03:2f:39:19:4f:7b:5b:81:51:
                    4b:5d:9e:84:1e:36:88:2b:95:35:61:d2:84:2b:9c:
                    35:59:0e:44:ee:f0:9c:4a:b5:9e:50:3a:4f:8d:e9:
                    ac:dc:c5:fb:2e:ab:53:23:19:52:68:93:44:11:24:
                    03:ea:ae:9a:c9:0f:de:07:b5:56:cf:74:84:31:28:
                    81:0a:0c:5d:a8:50:c8:22:39:6a:8c:95:aa:89:74:
                    8a:7c:0e:87:7d:5b:ad:e8:2a:62:b1:aa:be:45:1f:
                    e6:cb:ef:e4:13:a3:bf:bd:42:2a:46:a9:de:b9:d9:
                    37:9e:e6:18:11:79:f3:d3:b7:3f:6c:d2:44:00:1f:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                45:BE:85:7A:15:B4:08:92:BB:24:3B:A8:B7:14:79:EA:8B:C6:C0:F5
            X509v3 Authority Key Identifier: 
                keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS202359.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202359

    Signature Algorithm: sha256WithRSAEncryption
         47:56:0a:29:80:75:e1:65:24:47:06:0e:f4:5c:76:91:3b:40:
         0f:a8:6d:be:dc:26:5f:18:f3:09:c3:db:da:4c:d7:f6:05:47:
         9c:06:1b:1a:84:79:f8:0f:e8:6c:e6:ac:ff:32:b0:23:5c:0a:
         90:85:f9:36:e3:ad:46:3b:ce:d0:dc:a1:59:b5:62:f4:b7:32:
         c4:d5:35:0e:83:99:ad:67:1d:52:bc:ac:83:27:e1:e6:35:1a:
         a2:29:6d:73:b0:9e:eb:ce:7a:fe:64:d0:eb:10:de:eb:3d:b0:
         ed:18:22:6a:38:f7:ff:05:97:7b:4e:fd:66:1c:54:2e:22:bb:
         4d:51:9c:48:a2:7c:43:bd:c3:4f:df:2b:82:3f:f2:94:88:81:
         7e:93:89:89:ed:a8:1e:bf:7c:e4:dc:63:2e:cd:a3:d6:d8:bf:
         d9:64:bf:8e:73:fe:7f:d8:53:03:7f:2c:74:b8:1c:8e:6d:c5:
         20:eb:7d:a9:07:7c:c2:ae:e3:05:52:9e:ad:53:58:7d:de:0e:
         3b:ae:6c:d8:2b:e8:50:94:c5:e9:81:db:c4:12:c4:24:3d:45:
         9f:ce:71:8b:7c:d6:62:48:32:a6:0e:36:ae:4d:46:aa:10:74:
         48:50:a3:c3:1d:51:04:51:a6:62:98:1f:dc:a7:cc:8a:57:d8:
         93:49:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----