Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/AS200351.asa
File:                     AS200351.asa (raw, json)
Hash identifier:          MKlCymdPUec1o9kX8eWj95e5Ra+nt+4zrNcpZkUFdXo=
Subject key identifier:   50:BE:6B:EC:74:3A:E7:A3:57:D3:59:58:7D:AB:8A:55:D2:BD:1D:D1
Certificate issuer:       /CN=9ce26d458ff17c675885a05b981a7109b558a39d
Certificate serial:       1BA18087372188897A658B0E5741E5B4EB6DAA28
Authority key identifier: 9C:E2:6D:45:8F:F1:7C:67:58:85:A0:5B:98:1A:71:09:B5:58:A3:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOJtRY_xfGdYhaBbmBpxCbVYo50.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/AS200351.asa
Signing time:             Fri 24 Nov 2023 19:25:51 +0000
ASPA not before:          Fri 24 Nov 2023 19:20:51 +0000
ASPA not after:           Fri 22 Nov 2024 19:25:51 +0000
Customer ASID:            200351
Providers:                AS: 924
                          AS: 6939
                          AS: 20473
                          AS: 21738
                          AS: 25759
                          AS: 34927
                          AS: 36369
                          AS: 41051
                          AS: 47272
                          AS: 50917
                          AS: 52210
                          AS: 53667
                          AS: 199545
                          AS: 209533

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOJtRY_xfGdYhaBbmBpxCbVYo50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Nov 2023 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a1:80:87:37:21:88:89:7a:65:8b:0e:57:41:e5:b4:eb:6d:aa:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce26d458ff17c675885a05b981a7109b558a39d
        Validity
            Not Before: Nov 24 19:20:51 2023 GMT
            Not After : Nov 22 19:25:51 2024 GMT
        Subject: CN=50BE6BEC743AE7A357D359587DAB8A55D2BD1DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:90:d2:5f:aa:cf:cc:6c:09:d3:9d:9e:b7:
                    4b:fe:18:d3:e0:90:63:11:70:7b:f2:e8:ef:54:61:
                    0c:72:40:2a:34:96:dd:9d:bf:41:43:6d:f5:2c:53:
                    40:43:0e:3a:b5:cc:74:a1:5d:04:67:53:fd:4c:7d:
                    5f:8c:f2:f2:59:4c:84:c7:38:6d:58:2a:24:5d:ec:
                    67:91:e6:8f:1b:1a:df:df:66:bf:03:d0:fe:ec:a6:
                    8f:98:ef:d8:62:97:16:56:f2:55:37:73:df:c0:88:
                    5f:f2:43:a9:60:26:95:7e:71:ae:85:5b:09:0d:3c:
                    3c:2f:b2:dc:c0:43:86:4f:a8:75:76:94:44:79:14:
                    c2:a5:05:42:18:27:54:69:bc:39:54:84:90:1d:ba:
                    ab:66:5d:82:4a:3f:52:86:e1:d2:f0:31:5b:f7:0c:
                    62:7d:83:51:39:c0:9c:e5:43:e0:18:be:f2:f2:ba:
                    f2:33:c7:0e:71:50:91:dd:d6:cb:8f:cd:d0:bf:fc:
                    71:2d:48:81:8a:89:3c:23:71:44:80:b8:c0:9d:71:
                    8c:a2:ee:28:c6:0e:9a:dc:03:f2:bc:56:99:67:19:
                    9b:dd:6c:08:cf:fa:63:93:87:8b:d9:63:5a:6d:51:
                    cd:77:11:87:f6:03:7c:82:d0:ac:55:54:22:81:16:
                    66:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BE:6B:EC:74:3A:E7:A3:57:D3:59:58:7D:AB:8A:55:D2:BD:1D:D1
            X509v3 Authority Key Identifier:
                keyid:9C:E2:6D:45:8F:F1:7C:67:58:85:A0:5B:98:1A:71:09:B5:58:A3:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/9CE26D458FF17C675885A05B981A7109B558A39D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOJtRY_xfGdYhaBbmBpxCbVYo50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/0/AS200351.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200351

    Signature Algorithm: sha256WithRSAEncryption
         2d:2a:03:58:a9:ee:b1:f2:14:8c:34:e9:ab:3c:19:55:99:ef:
         43:5f:cc:8c:8e:a7:38:9c:31:26:7d:25:f6:18:b6:6a:c6:3d:
         cb:f9:d1:50:70:04:46:13:e8:47:f2:e9:1d:d6:bb:b4:47:a7:
         29:11:f1:5f:6e:f0:1b:18:d0:11:a5:90:fe:68:69:ac:f6:7e:
         52:69:2f:fd:8c:fc:26:70:07:e2:1e:dc:05:f6:7d:85:b3:5a:
         08:84:7e:bc:a4:08:48:55:26:9d:61:ce:67:9c:1f:9d:9b:fd:
         99:1f:62:6d:95:6c:3c:6c:73:cb:56:cc:9d:62:8f:16:74:1b:
         c1:8a:82:2d:3c:ea:4a:74:d2:9a:2d:fc:83:33:39:69:f4:b9:
         37:d5:2f:6a:ca:f5:a9:03:4b:b2:05:1c:97:44:c0:7e:d6:e7:
         12:60:45:3d:96:4e:e3:6d:b0:51:f5:ed:50:9a:81:93:45:0d:
         13:10:7a:e4:22:ae:3d:84:16:cc:d7:5c:41:e8:25:2b:76:57:
         7e:1a:e2:7b:ac:57:ab:6c:53:e1:ff:d0:d6:e0:02:a6:f5:41:
         2b:eb:00:67:e8:9e:ce:52:ca:17:b4:73:49:9c:7c:29:91:77:
         37:89:20:8c:a4:8b:c9:0a:d6:14:65:48:b9:f9:01:27:ea:0f:
         13:d3:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 20:11:34 2023 by rpki-client on console-fra.rpki-client.org