Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS202359.asa
File:                     AS202359.asa (raw, json)
Hash identifier:          BvLg7+gra3p6xGkB7EXxvc1iTYQMxUfNyqjM1CnRnbs=
Subject key identifier:   A9:E2:11:2E:FB:70:1C:52:F7:E0:E9:43:03:62:8C:FC:80:7D:3C:34
Certificate issuer:       /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial:       71384BEAC14FA60D76F6D6F333DA4742E486C121
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS202359.asa
Signing time:             Mon 23 Oct 2023 10:30:41 +0000
ASPA not before:          Mon 23 Oct 2023 10:25:41 +0000
ASPA not after:           Mon 21 Oct 2024 10:30:41 +0000
Customer ASID:            202359
Providers:                AS: 33920
                          AS: 41495

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Mar 2024 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:38:4b:ea:c1:4f:a6:0d:76:f6:d6:f3:33:da:47:42:e4:86:c1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
        Validity
            Not Before: Oct 23 10:25:41 2023 GMT
            Not After : Oct 21 10:30:41 2024 GMT
        Subject: CN=A9E2112EFB701C52F7E0E94303628CFC807D3C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:df:91:6f:50:60:4f:e1:78:ea:ea:ae:9a:ac:
                    12:cc:a2:8e:3f:92:49:9d:0e:e8:a1:d8:cd:e9:7a:
                    0e:36:ed:28:97:4f:0e:95:7e:85:a2:ab:08:d1:83:
                    5e:9e:44:d9:be:5a:05:8d:af:49:fd:39:04:3c:4f:
                    28:88:3b:45:8e:56:b5:0e:05:f1:a4:a4:99:72:ab:
                    37:1d:0c:55:63:1f:e7:3d:b0:f5:e5:b2:34:0e:27:
                    d7:0e:b9:88:3a:f9:a7:fb:fe:70:b8:fc:eb:30:c7:
                    b7:d4:76:b9:80:0e:0d:5a:44:b1:8b:0f:3d:1a:60:
                    de:0f:fb:fc:83:72:cf:21:4e:ba:89:59:e9:4f:f3:
                    d3:30:4a:9c:96:05:ed:f6:20:e0:3f:a2:41:77:dc:
                    c2:5a:7d:44:87:5e:30:8e:cd:b8:9f:51:8b:cc:52:
                    cf:55:8d:2c:52:57:cb:2c:ea:25:0c:9b:b2:c4:0b:
                    81:95:cc:b3:fb:07:95:24:35:aa:1f:02:6f:57:9f:
                    9b:ec:fc:3d:5a:ae:fc:68:f1:67:0e:b3:bb:8e:e8:
                    a6:0f:9b:f6:19:4d:bd:bd:b2:57:fc:7c:36:78:c8:
                    c6:6f:80:b8:65:cc:cb:ec:a1:75:04:71:6c:ce:de:
                    25:19:e2:ac:0b:f9:4a:26:58:35:38:d9:b6:0f:a8:
                    48:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E2:11:2E:FB:70:1C:52:F7:E0:E9:43:03:62:8C:FC:80:7D:3C:34
            X509v3 Authority Key Identifier:
                keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS202359.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202359

    Signature Algorithm: sha256WithRSAEncryption
         81:72:cb:ff:b9:19:14:d5:ef:86:e4:88:b8:ba:3c:ff:46:a3:
         23:d7:47:90:66:ad:a4:3d:8e:8f:b9:5d:c2:35:60:83:74:31:
         57:2c:7f:91:86:30:19:d3:20:0b:27:d0:65:06:ca:4c:89:f6:
         b1:cd:6f:14:74:ad:b5:b1:75:87:e6:48:9b:b9:f2:e0:3f:02:
         52:63:05:51:72:6d:c1:35:fb:6d:2b:80:90:fa:e4:47:db:2f:
         e1:2a:4d:02:f1:6e:cd:44:98:c7:64:a2:91:e6:f3:82:32:96:
         08:4d:c9:98:31:b5:14:86:cb:0a:1e:e7:58:f9:fc:2b:ae:70:
         50:e5:42:64:7e:57:9b:8a:fa:60:ee:4f:08:be:2f:3d:15:df:
         33:5b:b7:70:43:a5:2a:d0:2a:e4:66:07:6d:23:ad:07:02:74:
         49:2f:c8:af:be:e9:90:be:70:2a:a4:cf:ae:53:34:ac:1a:8d:
         d0:ac:e2:93:0e:f7:96:60:aa:a4:4f:36:f1:4b:e8:e2:bd:6a:
         0f:f9:2a:66:ae:86:bd:6b:bc:47:10:62:b3:64:f3:ac:3a:94:
         6e:16:08:d7:f8:e1:f3:66:cb:79:68:ea:34:40:20:97:ba:a3:
         f7:7e:b3:91:dd:ff:ea:05:7a:fc:c9:3b:5d:0b:7c:ce:bb:e8:
         f2:ab:a6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 01:23:39 2024 by rpki-client on console-ams.rpki-client.org