Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/AS51019.asa
File:                     AS51019.asa (raw, json)
Hash identifier:          RqQYQxP2LlV4zO7/d8ske+S6p2B1SREg+ga188kx8/8=
Subject key identifier:   00:15:DB:A6:AC:24:AB:06:F8:33:98:75:64:C3:0B:32:40:4D:82:8C
Certificate issuer:       /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial:       7432E705D3B817EFF570460B16D42F5675455A17
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/AS51019.asa
Signing time:             Fri 04 Oct 2024 22:08:40 +0000
ASPA not before:          Fri 04 Oct 2024 22:03:40 +0000
ASPA not after:           Fri 03 Oct 2025 22:08:40 +0000
Customer ASID:            51019
Providers:                AS: 6939
                          AS: 34549
                          AS: 34927
                          AS: 52025
                          AS: 207841

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Dec 2024 00:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:32:e7:05:d3:b8:17:ef:f5:70:46:0b:16:d4:2f:56:75:45:5a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
        Validity
            Not Before: Oct  4 22:03:40 2024 GMT
            Not After : Oct  3 22:08:40 2025 GMT
        Subject: CN=0015DBA6AC24AB06F833987564C30B32404D828C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:5a:83:cd:ce:16:a8:73:fc:e4:a0:f6:6b:
                    d8:cf:f4:a5:48:89:f3:9a:6e:59:68:43:e2:41:f2:
                    2b:bc:39:07:10:b9:0a:77:0c:18:8d:6c:59:90:62:
                    13:df:f8:2d:16:88:7b:9a:f7:72:4b:4f:a9:95:e8:
                    7c:b0:ef:dd:74:48:a5:de:63:38:11:fe:35:e1:65:
                    8b:eb:dd:ff:02:b3:0d:d5:51:19:6a:52:02:c6:78:
                    fd:af:f7:6d:b7:5e:23:ef:30:64:b0:06:30:32:1c:
                    cd:fb:10:b5:9c:c5:bd:74:23:31:e7:08:4e:12:29:
                    ef:b5:62:41:8c:fb:56:37:31:ea:e9:9a:30:16:2f:
                    d9:42:a4:0e:62:f5:af:ce:1e:c6:d3:a5:29:fc:89:
                    2d:a6:af:c0:16:21:38:76:1f:7c:af:87:2d:34:76:
                    99:85:3f:8e:10:50:12:fb:3f:72:4a:42:b0:61:d5:
                    76:37:75:05:ee:97:03:2a:68:1c:bc:b2:5b:a2:74:
                    53:0b:57:4c:01:8e:f2:82:82:77:5c:20:32:59:45:
                    71:f2:79:ed:c6:41:d5:da:07:31:05:66:6d:00:c6:
                    07:09:c5:23:d7:61:64:64:e1:f4:90:b2:3e:eb:99:
                    95:09:69:22:4a:a7:89:62:68:94:f8:da:a6:12:60:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:15:DB:A6:AC:24:AB:06:F8:33:98:75:64:C3:0B:32:40:4D:82:8C
            X509v3 Authority Key Identifier:
                keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/AS51019.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  51019

    Signature Algorithm: sha256WithRSAEncryption
         49:5d:ab:34:30:e1:99:3a:34:b4:cf:59:25:e3:fd:d9:cd:a5:
         24:20:3f:20:2e:94:f9:c2:26:33:bc:43:20:16:90:e5:56:7c:
         97:5d:d4:d9:3b:a4:b5:16:8e:49:1f:97:48:4b:f5:cb:62:ee:
         21:8c:7d:29:27:1d:a5:1b:e1:bf:a9:24:ac:e0:82:53:df:22:
         c9:b9:8b:4e:3e:41:04:6c:cf:2d:bf:ea:52:df:0c:b9:55:42:
         1d:8b:53:49:22:7f:a9:c8:60:22:3f:14:3f:24:50:d3:52:7b:
         25:2a:cd:80:eb:c6:c0:68:84:65:0a:fa:91:bc:be:cb:a9:f0:
         c5:ee:cf:79:47:43:04:7f:89:09:37:ef:fe:89:d2:9a:e8:d3:
         15:49:88:65:f0:66:a7:72:a1:f0:ef:86:a9:f1:da:54:6b:ce:
         40:3b:fe:34:df:a6:ba:47:7f:f2:86:7b:bb:97:7b:0b:a6:9a:
         7c:65:e8:fb:81:2e:c9:02:db:14:91:1a:71:2a:3f:28:89:73:
         a3:20:9a:7c:08:13:3e:04:c3:56:4b:80:2f:74:44:41:46:2c:
         fb:0c:ea:1d:ba:d8:a3:fc:25:5c:ab:34:e2:24:ad:b3:69:ec:
         6c:3b:6d:05:f5:fc:4b:a0:ed:ac:35:92:3d:65:23:5d:8c:42:
         88:8f:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 07:36:37 2024 by rpki-client on console-fra.rpki-client.org