Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS207960.asa
File:                     AS207960.asa (raw, json)
Hash identifier:          Suu9sFWpzAvsDVNJ0fl8S/1lSs9VU6tP0RHG4EdGjrs=
Subject key identifier:   40:63:4E:A0:BA:4D:C2:D5:07:D8:68:8F:36:7A:F1:DC:7B:34:A6:0C
Certificate issuer:       /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial:       121AB3582CA3537945DB0FC04F7623CFB1AB0E0A
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS207960.asa
Signing time:             Mon 23 Oct 2023 10:30:41 +0000
ASPA not before:          Mon 23 Oct 2023 10:25:41 +0000
ASPA not after:           Mon 21 Oct 2024 10:30:41 +0000
Customer ASID:            207960
Providers:                AS: 6939
                          AS: 20473
                          AS: 34854
                          AS: 34927
                          AS: 136620
                          AS: 202359
                          AS: 207968

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Apr 2024 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1a:b3:58:2c:a3:53:79:45:db:0f:c0:4f:76:23:cf:b1:ab:0e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
        Validity
            Not Before: Oct 23 10:25:41 2023 GMT
            Not After : Oct 21 10:30:41 2024 GMT
        Subject: CN=40634EA0BA4DC2D507D8688F367AF1DC7B34A60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:8d:f5:bc:05:02:59:6f:2c:a6:fe:a6:9d:
                    cc:67:ca:6d:e3:76:76:72:25:ae:c5:4e:2f:3c:1d:
                    f5:87:f1:7d:3e:b2:46:d5:0b:36:e8:f1:e9:5d:b1:
                    b8:02:10:35:17:b4:48:4c:25:f8:83:16:a4:3d:f3:
                    3e:b3:3d:40:ac:50:b9:aa:74:95:27:3e:ab:12:54:
                    8c:07:8e:2c:b3:1d:26:b7:96:18:a4:af:f6:f2:5e:
                    6e:5b:c8:80:3b:78:ad:56:f5:88:ee:c9:2d:53:c4:
                    e0:35:ce:4e:9c:0c:4a:95:34:84:8c:10:13:77:4a:
                    9e:f3:43:2c:9f:f2:ff:cd:c4:d7:2e:09:26:a5:8d:
                    f0:3e:85:68:9c:49:af:b3:17:8a:8e:f5:73:da:04:
                    61:c2:78:bb:65:64:e3:b8:df:40:e3:7d:12:a5:66:
                    80:eb:3e:57:ac:c4:e4:3d:5a:bc:8f:4d:69:c1:66:
                    7b:9e:29:e3:8d:4e:8b:6d:05:25:6a:b2:8d:fc:7c:
                    97:85:57:9c:fd:3a:3e:ab:84:54:12:f9:7e:f5:30:
                    40:90:51:6f:23:4b:d2:6a:98:f0:e5:47:59:31:e7:
                    b3:9c:e6:1d:cd:d9:e4:ef:41:ac:fa:f8:0c:c0:46:
                    59:72:88:1f:7c:20:46:a4:37:4a:83:b5:a7:8e:8a:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:63:4E:A0:BA:4D:C2:D5:07:D8:68:8F:36:7A:F1:DC:7B:34:A6:0C
            X509v3 Authority Key Identifier:
                keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/AS207960.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207960

    Signature Algorithm: sha256WithRSAEncryption
         10:f6:54:ab:5c:8c:f1:39:94:99:5b:45:a7:92:8a:71:ad:fc:
         78:d7:2e:55:0e:3d:07:87:9f:1f:92:56:66:48:c1:16:f9:20:
         68:1b:e1:d5:ad:a8:e8:94:34:b3:df:2b:bf:db:be:8d:19:51:
         8f:4c:0e:bb:8d:47:17:03:50:26:7d:38:8b:87:d9:16:b9:54:
         32:50:90:d3:5b:a1:d2:3b:6a:49:0e:69:2f:86:be:11:cd:12:
         12:95:dd:4a:24:b1:bc:4e:9b:5e:3a:74:c7:26:cb:e1:ac:f4:
         a9:cb:89:94:39:4f:2f:18:df:f3:d2:55:83:57:f3:fa:25:27:
         4a:ee:ce:89:50:23:0d:e4:1b:6e:69:85:73:df:9a:b7:33:4c:
         b1:1d:5e:e4:58:36:c2:c0:95:9c:e4:b6:65:ad:9c:6e:6f:be:
         11:13:12:13:a9:62:38:3a:9a:fe:c7:8d:71:ad:3f:ed:77:8e:
         58:e3:6d:90:a0:ac:85:87:80:ce:6c:b2:59:d5:78:e9:ec:97:
         bb:e4:18:c7:cc:d5:de:e5:f1:9b:2f:92:fe:04:6c:b4:7a:31:
         e7:95:35:40:7e:a9:38:18:cc:82:be:fc:fa:4c:63:ed:cd:c9:
         6a:35:4b:83:c5:ed:80:63:43:42:f5:eb:55:e3:78:30:43:e6:
         7c:4c:40:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 09:53:36 2024 by rpki-client on console-ams.rpki-client.org