Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/AS44355.asa
File:                     AS44355.asa (raw, json)
Hash identifier:          suHXzL7+p9pEhy3V1lXLsc7/MuuAkxWi6AeYlUGu+1w=
Subject key identifier:   DC:55:AD:BC:29:F6:D0:81:59:4B:EE:7E:8E:9B:D9:27:21:00:DB:61
Certificate issuer:       /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial:       7FDC2F9D0FC3D0BEC9313A27F65086DE3F448A62
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/AS44355.asa
Signing time:             Mon 16 Dec 2024 16:58:52 +0000
ASPA not before:          Mon 16 Dec 2024 16:53:52 +0000
ASPA not after:           Mon 15 Dec 2025 16:58:52 +0000
Customer ASID:            44355
Providers:                AS: 207841
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:dc:2f:9d:0f:c3:d0:be:c9:31:3a:27:f6:50:86:de:3f:44:8a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
        Validity
            Not Before: Dec 16 16:53:52 2024 GMT
            Not After : Dec 15 16:58:52 2025 GMT
        Subject: CN=DC55ADBC29F6D081594BEE7E8E9BD9272100DB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:8d:28:63:a2:c8:ce:fd:2e:4e:e0:fd:98:
                    3d:9d:b6:ec:21:c4:e7:61:3e:8f:6e:11:7f:67:e0:
                    54:5a:59:61:4f:6a:5e:68:24:36:11:b7:4c:01:de:
                    72:d4:57:48:b6:9d:7f:4a:3f:fa:5f:a1:f0:cc:8f:
                    73:d7:66:a9:76:61:ed:e4:26:bc:b4:a1:e7:d7:e9:
                    6a:2b:ce:14:69:eb:64:0e:36:2b:25:be:c5:c3:44:
                    2c:2d:c3:06:8e:a2:22:47:d2:c6:54:04:21:33:be:
                    ca:f7:c8:55:c6:49:d1:f3:48:b3:c2:5e:aa:5a:ba:
                    bc:d6:ff:98:e3:de:c8:29:68:04:60:09:0a:f2:05:
                    3c:3a:84:04:d5:e5:05:45:15:2e:e3:4f:dd:49:ac:
                    42:b5:f7:f6:54:03:65:c0:da:72:50:46:69:57:e4:
                    48:20:76:2f:e4:0e:2c:2f:4e:d5:59:7b:d7:d7:d2:
                    4f:34:5e:e7:0a:b1:11:5b:b1:99:4d:24:36:7a:68:
                    21:e2:99:ec:db:f0:d4:6d:9d:54:02:be:34:fa:c3:
                    8c:f7:61:38:80:82:2e:74:8f:51:b7:fc:25:86:c3:
                    f0:46:cc:b5:fa:f3:e0:9b:e1:94:d5:52:37:53:60:
                    21:a7:78:14:9e:02:a2:3f:1c:02:87:44:1e:8d:9d:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:55:AD:BC:29:F6:D0:81:59:4B:EE:7E:8E:9B:D9:27:21:00:DB:61
            X509v3 Authority Key Identifier:
                keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/AS44355.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44355

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:22:e2:5e:31:cf:7d:2c:b7:ae:25:b8:da:fd:6a:87:95:
         76:e3:35:4f:44:de:bf:ed:79:18:83:ee:06:34:21:c2:8e:67:
         f9:67:42:c4:28:99:7d:8f:63:2d:c4:40:e5:98:38:7f:a1:c7:
         79:b6:dc:1a:e7:50:72:fe:9e:dc:c1:72:bd:91:74:6a:60:c9:
         ae:73:59:f8:e5:4b:b0:14:4b:94:d4:9a:b0:68:4c:24:b2:2d:
         8f:6a:08:92:dc:fd:d2:b7:d2:7a:8e:f2:24:9e:7a:14:2a:b0:
         7d:45:ca:a4:d4:6a:66:e7:bd:4d:ba:64:c1:59:8e:2f:f8:52:
         86:41:ad:01:3f:f9:4d:dd:7f:61:96:05:70:bd:33:7a:c2:5c:
         f3:17:82:b8:75:b8:c2:09:8c:00:a5:4b:11:39:90:d6:90:0e:
         84:ad:f6:37:bf:a6:db:ac:72:05:91:51:1f:16:fa:44:d2:d1:
         5a:01:2c:c0:d0:3b:32:0c:3d:82:b4:21:9f:7e:68:d5:17:6f:
         a6:78:2d:76:3f:15:d3:b6:24:fd:07:71:a9:bb:fe:2d:36:51:
         73:e6:4c:e8:37:f5:a8:3c:7b:2c:f4:59:34:79:18:64:1e:b6:
         1c:17:60:6d:98:69:e7:7d:40:63:7b:d0:cd:be:01:93:be:be:
         f1:2f:15:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:52:42 2025 by rpki-client