Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/AS202881.asa
File:                     AS202881.asa (raw, json)
Hash identifier:          n7g3r7+FlCCQyP417H6Uudw0ZEIUQH6oYUZ2fSNBDRU=
Subject key identifier:   B6:DF:BF:3A:6C:EA:18:E0:C4:F5:0A:EC:ED:AB:A9:F1:21:CE:AD:76
Certificate issuer:       /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial:       05012BB413612EB2B13A61D64352E47E19742E9B
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/AS202881.asa
Signing time:             Wed 27 Nov 2024 16:09:44 +0000
ASPA not before:          Wed 27 Nov 2024 16:04:44 +0000
ASPA not after:           Wed 26 Nov 2025 16:09:44 +0000
Customer ASID:            202881
Providers:                AS: 205329

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Dec 2024 00:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:01:2b:b4:13:61:2e:b2:b1:3a:61:d6:43:52:e4:7e:19:74:2e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
        Validity
            Not Before: Nov 27 16:04:44 2024 GMT
            Not After : Nov 26 16:09:44 2025 GMT
        Subject: CN=B6DFBF3A6CEA18E0C4F50AECEDABA9F121CEAD76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:1e:b5:33:47:83:71:83:3f:59:a3:d1:db:
                    28:07:3f:4e:6d:c1:8c:3b:7a:36:c8:4e:dd:94:d5:
                    eb:cd:7a:60:04:3c:1c:f5:33:d9:aa:37:90:52:db:
                    3e:76:a4:80:56:b3:1d:65:25:b4:35:f9:bb:b3:8e:
                    dc:f6:32:63:e0:c6:bf:45:d3:66:b8:35:0b:82:82:
                    c6:a8:63:be:b2:0a:c8:fc:07:10:de:f2:75:58:9f:
                    97:59:e0:19:8b:08:53:3e:18:a4:56:2f:e8:78:e9:
                    da:c8:aa:e5:09:9f:30:e3:5e:87:4f:3b:46:5a:55:
                    3d:77:c5:01:41:e7:79:f6:0c:b7:05:b3:66:e4:77:
                    76:e7:bf:d3:86:b3:7c:2d:8d:4b:98:58:dc:24:97:
                    66:65:fa:70:a3:b9:7f:d9:57:77:00:50:14:a2:17:
                    47:50:3f:fb:54:5a:8c:b1:7d:5a:83:4a:8c:8f:eb:
                    44:bd:84:f6:6f:c6:75:68:c6:ea:42:dc:11:7f:20:
                    fe:d3:0b:2e:37:af:f8:1d:b0:7f:cd:28:43:3c:e9:
                    06:bf:6d:84:19:b3:5a:8a:0c:0b:41:e2:21:fe:5e:
                    fd:6d:07:36:a4:c1:15:41:49:f6:90:5a:d6:21:09:
                    ca:b0:f6:56:0b:a6:4d:b1:eb:0d:1f:03:a2:44:54:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DF:BF:3A:6C:EA:18:E0:C4:F5:0A:EC:ED:AB:A9:F1:21:CE:AD:76
            X509v3 Authority Key Identifier:
                keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/AS202881.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202881

    Signature Algorithm: sha256WithRSAEncryption
         e1:cd:e8:ae:59:0e:15:41:2f:e2:0e:66:ca:05:2c:08:b5:48:
         66:00:e5:ea:2e:e1:9d:c4:01:0e:0a:8f:c3:d6:96:0a:5b:7d:
         0d:ec:15:6e:23:d5:ad:f0:55:b4:d4:19:df:f3:ff:9f:69:41:
         58:38:eb:8a:74:01:b1:ea:50:4f:a0:41:6a:e1:fa:74:4f:ec:
         3f:af:e5:d7:67:31:46:c6:75:dd:fd:ba:d6:e6:b0:ea:66:8f:
         16:b0:a2:ee:c9:a3:be:9c:ad:db:e6:4c:59:c4:58:fd:73:25:
         36:9a:c5:9d:bb:72:82:94:1a:1c:55:6c:91:13:e0:e1:bc:ae:
         f4:60:a8:dd:9f:f1:80:03:72:70:bb:eb:8d:f9:e2:d0:09:ff:
         92:ff:5a:bc:d8:59:08:43:64:2b:57:4b:54:e4:f6:87:12:5e:
         21:a3:24:2c:9d:ae:5b:39:3d:1c:c1:31:a0:8c:f2:ab:de:2b:
         df:82:2b:99:0c:ba:5b:4d:ca:68:ec:af:67:59:31:ac:2b:4d:
         0c:8a:76:9a:2a:95:97:78:f1:d2:fa:b0:b3:ca:15:3b:16:40:
         19:ba:3f:98:b4:6b:ca:14:50:6f:cd:98:02:7b:d1:9c:6c:1c:
         70:40:1c:79:25:67:76:db:f9:b4:72:85:84:38:1a:af:c7:dd:
         ff:41:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 07:36:37 2024 by rpki-client on console-fra.rpki-client.org