Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS207960.asa
File:                     AS207960.asa (raw, json)
Hash identifier:          VWdcdizohXUZxiHTfoz7B4VB9jJRzxmvzrGGXyGhyos=
Subject key identifier:   31:15:5B:77:F1:5D:65:A1:B3:02:BC:78:88:3C:29:DD:76:3A:A6:BD
Certificate issuer:       /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial:       24919D17C021F2B18E28386C639BA43A4440B7FF
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS207960.asa
Signing time:             Wed 24 May 2023 07:31:02 +0000
ASPA not before:          Wed 24 May 2023 07:26:02 +0000
ASPA not after:           Wed 22 May 2024 07:31:02 +0000
Customer ASID:            207960
Provider set:             AS: 6939
                          AS: 34854
                          AS: 34927
                          AS: 60371
                          AS: 136620
                          AS: 207968

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 May 2023 05:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:91:9d:17:c0:21:f2:b1:8e:28:38:6c:63:9b:a4:3a:44:40:b7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
        Validity
            Not Before: May 24 07:26:02 2023 GMT
            Not After : May 22 07:31:02 2024 GMT
        Subject: CN=31155B77F15D65A1B302BC78883C29DD763AA6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:15:af:1d:0c:10:38:92:85:66:db:6c:f5:
                    bf:78:a2:13:ea:30:f2:ff:b5:9a:4b:c3:11:2d:40:
                    cd:32:d0:1a:0b:dd:3d:ff:a5:35:ec:7e:68:6e:43:
                    b2:e8:59:c6:31:66:0a:13:4f:f4:78:9f:a6:95:43:
                    5f:f4:a8:69:6f:c8:ec:e4:63:3d:40:cc:55:77:8c:
                    9e:e0:00:d7:e1:4f:8f:79:d5:8d:c2:00:66:4a:aa:
                    2e:79:ac:49:b7:be:36:3d:bc:a7:c9:a3:e3:96:16:
                    2e:4d:bc:aa:9e:fb:f7:42:36:4b:e1:bf:2e:36:98:
                    74:bc:5c:39:c5:f3:85:61:97:a7:33:be:bf:54:6b:
                    3d:8c:c4:21:7a:35:a4:65:2a:62:1c:7f:ff:70:29:
                    b0:71:e3:e4:57:16:3a:7c:60:74:3d:43:ac:31:4e:
                    c6:f4:47:bc:f3:b6:48:b3:42:1c:cc:00:24:3b:ef:
                    2d:4c:07:1a:c4:55:12:c9:4e:ba:97:98:8a:1c:eb:
                    dc:3b:e1:64:2b:fd:66:3f:72:19:6d:ab:65:45:bb:
                    e0:cb:57:87:fa:c3:6f:cc:3a:45:f4:96:fd:83:b8:
                    af:07:15:63:f5:de:c7:2f:84:32:a8:93:3d:40:e4:
                    2b:2a:b7:cd:35:ff:2a:2f:04:b4:9a:79:61:97:19:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:15:5B:77:F1:5D:65:A1:B3:02:BC:78:88:3C:29:DD:76:3A:A6:BD
            X509v3 Authority Key Identifier:
                keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS207960.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207960

    Signature Algorithm: sha256WithRSAEncryption
         39:a7:0d:ed:73:90:d4:07:3e:90:1c:15:e9:c4:85:b1:0b:dd:
         bf:c5:bd:41:92:12:a4:4d:f1:3b:25:0e:3e:2b:e9:65:b6:09:
         e5:d1:a7:92:c0:8d:f3:a2:3e:2a:9b:0d:da:70:2b:51:4a:fb:
         1b:f0:5e:a4:2c:ae:37:db:b6:f3:64:66:4f:5a:b0:8b:5b:55:
         86:16:b2:f0:f6:0a:af:db:6f:d6:d7:2b:f9:cc:bf:95:e8:e2:
         e6:38:f9:65:9e:41:b7:e8:a4:6b:92:37:59:f9:4f:b3:14:d5:
         92:0e:62:06:8a:e1:35:93:b3:36:e2:79:7d:9d:5b:61:e4:5e:
         f1:54:19:47:33:bd:14:a3:50:19:6c:31:4a:88:12:a7:64:a8:
         8e:10:ec:1d:97:05:be:c9:37:88:d3:59:cb:2e:77:d0:9d:f4:
         f2:7d:52:42:41:29:45:de:e7:1f:a8:e1:68:92:20:22:be:16:
         58:c6:39:41:12:b1:95:ea:a4:3f:fa:02:49:3e:89:37:86:0e:
         2e:6e:1c:2e:53:52:9f:fa:71:ff:f7:08:6f:34:2f:8f:0a:9f:
         59:9f:3c:fe:51:39:92:8d:e3:b8:70:a0:bd:fa:6f:7d:74:42:
         ba:49:09:41:c4:54:ba:c3:df:de:96:e2:b7:5f:ee:e4:74:46:
         83:95:df:4e
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUJJGdF8Ah8rGOKDhsY5ukOkRAt/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFhZDQ5YzQ3ZTJkMGU0MGNmYzliMzZhMmJkMmM1MTRl
MmE2MjY3YjAeFw0yMzA1MjQwNzI2MDJaFw0yNDA1MjIwNzMxMDJaMDMxMTAvBgNV
BAMTKDMxMTU1Qjc3RjE1RDY1QTFCMzAyQkM3ODg4M0MyOURENzYzQUE2QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QRWvHQwQOJKFZtts9b94ohPq
MPL/tZpLwxEtQM0y0BoL3T3/pTXsfmhuQ7LoWcYxZgoTT/R4n6aVQ1/0qGlvyOzk
Yz1AzFV3jJ7gANfhT4951Y3CAGZKqi55rEm3vjY9vKfJo+OWFi5NvKqe+/dCNkvh
vy42mHS8XDnF84Vhl6czvr9Uaz2MxCF6NaRlKmIcf/9wKbBx4+RXFjp8YHQ9Q6wx
Tsb0R7zztkizQhzMACQ77y1MBxrEVRLJTrqXmIoc69w74WQr/WY/chltq2VFu+DL
V4f6w2/MOkX0lv2DuK8HFWP13scvhDKokz1A5Csqt801/yovBLSaeWGXGS3PAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUMRVbd/FdZaGzArx4iDwp3XY6pr0wHwYDVR0j
BBgwFoAUEa1JxH4tDkDPybNqK9LFFOKmJnswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2I1NzVlYTctNzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNl
Y2VlLzcvMTFBRDQ5QzQ3RTJEMEU0MENGQzlCMzZBMkJEMkM1MTRFMkE2MjY3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VhMUp4SDR0RGtEUHliTnFLOUxGRk9L
bUpucy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdiNTc1ZWE3LTc4NmYt
NGIyZC1hNDU1LTc5ZDdmYzQzZWNlZS83L0FTMjA3OTYwLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsWDANBgkq
hkiG9w0BAQsFAAOCAQEAOacN7XOQ1Ac+kBwV6cSFsQvdv8W9QZISpE3xOyUOPivp
ZbYJ5dGnksCN86I+KpsN2nArUUr7G/BepCyuN9u282RmT1qwi1tVhhay8PYKr9tv
1tcr+cy/leji5jj5ZZ5Bt+ika5I3WflPsxTVkg5iBorhNZOzNuJ5fZ1bYeRe8VQZ
RzO9FKNQGWwxSogSp2SojhDsHZcFvsk3iNNZyy530J308n1SQkEpRd7nH6jhaJIg
Ir4WWMY5QRKxleqkP/oCST6JN4YOLm4cLlNSn/px//cIbzQvjwqfWZ88/lE5ko3j
uHCgvfpvfXRCukkJQcRUusPf3pbit1/u5HRGg5XfTg==
-----END CERTIFICATE-----
Generated at Wed May 24 08:04:00 2023 by rpki-client on console-fra.rpki-client.org