Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AS202359.asa
File:                     AS202359.asa (raw, json)
Hash identifier:          0EY8PNKTR+IFlpL53CxdzQSSKybscEtMprXWGN6hzUw=
Subject key identifier:   FB:71:A8:ED:9C:1E:09:44:9D:01:34:16:31:3B:9C:E7:C3:F2:DF:B9
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       71B0BF2483E47D3D133A1B48FAE1C1EB8E3604E2
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AS202359.asa
Signing time:             Mon 08 Jul 2024 09:28:56 +0000
ASPA not before:          Mon 08 Jul 2024 09:23:56 +0000
ASPA not after:           Mon 07 Jul 2025 09:28:56 +0000
Customer ASID:            202359
Providers:                AS: 30740
                          AS: 33920
                          AS: 41495

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b0:bf:24:83:e4:7d:3d:13:3a:1b:48:fa:e1:c1:eb:8e:36:04:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jul  8 09:23:56 2024 GMT
            Not After : Jul  7 09:28:56 2025 GMT
        Subject: CN=FB71A8ED9C1E09449D013416313B9CE7C3F2DFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:e5:6b:53:be:ff:d7:98:2c:3f:bf:c4:1d:
                    13:10:8c:ec:be:fe:f3:ca:6b:41:eb:0e:9a:ab:18:
                    82:51:09:fd:19:63:0d:a7:99:37:39:cf:73:db:2d:
                    75:5d:38:94:12:1c:a1:28:93:0d:9c:dd:ca:d4:03:
                    36:5e:04:e4:53:68:de:74:ba:9f:39:d2:72:c8:53:
                    9d:8a:ae:24:82:af:db:c4:eb:0f:d4:d2:ee:94:bd:
                    d5:f7:60:bc:5d:cc:7c:20:b1:18:8a:1b:ba:db:60:
                    d1:66:6f:e1:f6:7f:9b:ca:2c:52:06:5b:49:ee:28:
                    8f:80:6b:8f:a3:77:1e:ed:e9:41:8a:29:aa:2c:38:
                    27:a4:65:bd:60:d6:7b:51:d7:96:af:de:89:a3:1e:
                    d4:73:8e:18:88:08:37:60:b0:dd:ed:c5:08:72:51:
                    35:8b:98:a8:d3:ab:0e:26:ac:bd:5c:56:d4:23:61:
                    9c:14:ad:1f:0c:50:55:bb:69:bb:1f:e4:a0:dd:38:
                    38:b2:66:e3:2d:1a:82:c5:0b:ea:81:4a:f9:e3:84:
                    14:93:f4:ec:66:61:2b:97:c5:81:a8:3c:4e:fc:c6:
                    f4:b0:d8:8a:3c:71:3b:77:7e:ba:2b:7f:5c:8f:3e:
                    36:a0:81:57:2a:6e:34:d8:a6:00:32:a5:36:e9:f2:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:71:A8:ED:9C:1E:09:44:9D:01:34:16:31:3B:9C:E7:C3:F2:DF:B9
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AS202359.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202359

    Signature Algorithm: sha256WithRSAEncryption
         38:6e:45:6b:75:86:88:99:e4:b1:02:68:d3:e1:df:67:45:26:
         e2:4e:32:d0:f2:3f:2a:2b:2d:6a:f6:b0:84:a9:2e:6c:a0:1f:
         b3:4e:54:02:bd:78:8a:72:22:d9:f2:22:3d:8e:30:29:b6:74:
         0c:1a:ae:0e:5c:79:c4:cb:a6:01:e5:ae:e7:ef:50:06:71:75:
         e0:b5:21:74:18:56:43:55:67:ca:84:ce:b8:46:6b:7c:56:6d:
         27:93:2b:25:2f:51:ba:de:f5:68:32:fd:04:0a:ac:18:08:55:
         d5:64:0e:7e:f3:99:ce:c7:3d:77:87:df:e0:09:17:d6:12:69:
         91:51:8d:ef:4e:6b:fe:e0:e9:f8:fe:91:bf:05:88:be:c3:66:
         20:45:d2:29:51:41:31:42:30:d9:67:f2:65:f5:50:91:e4:a5:
         99:b8:a6:58:5b:3e:06:51:8c:1f:57:3d:c7:0b:2a:f2:48:4a:
         ea:c8:e0:81:0c:74:90:19:04:83:f1:36:75:8f:9b:87:32:69:
         2f:13:23:bd:1f:41:df:1b:44:ae:2c:66:48:b7:f8:4a:b9:8b:
         74:33:df:c5:fe:14:93:04:3b:96:37:f1:eb:6d:be:ec:3b:56:
         87:6d:8f:98:5d:8c:f9:ab:62:ec:0b:75:6e:36:60:b6:7d:45:
         1c:a9:3c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:41:47 2024 by rpki-client on console-fra.rpki-client.org