Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AS207960.asa
File:                     AS207960.asa (raw, json)
Hash identifier:          02kdqWHVkLxdV0RTDeOVDJ9tIBamRX93w4mVjlxy2hc=
Subject key identifier:   21:AA:77:C8:D6:40:47:04:8E:4C:13:D2:40:AF:D6:6E:9B:B2:ED:A2
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       53FE321E96050A09A40640F22C4F53EDB2FF0FEB
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AS207960.asa
Signing time:             Sun 30 Jun 2024 12:15:22 +0000
ASPA not before:          Sun 30 Jun 2024 12:10:22 +0000
ASPA not after:           Sun 29 Jun 2025 12:15:22 +0000
Customer ASID:            207960
Providers:                AS: 6939
                          AS: 20473
                          AS: 34854
                          AS: 34927
                          AS: 136620
                          AS: 202359
                          AS: 207968

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Dec 2024 15:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fe:32:1e:96:05:0a:09:a4:06:40:f2:2c:4f:53:ed:b2:ff:0f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jun 30 12:10:22 2024 GMT
            Not After : Jun 29 12:15:22 2025 GMT
        Subject: CN=21AA77C8D64047048E4C13D240AFD66E9BB2EDA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:2e:77:89:3b:0d:14:d0:88:cd:d2:f5:16:
                    b8:27:e2:a7:eb:0a:05:2c:f5:46:30:99:da:9e:77:
                    2b:c0:02:52:a3:c3:83:4d:d3:11:ef:7b:ab:d0:fe:
                    74:32:b3:b2:ba:f7:24:82:22:28:eb:8f:93:eb:29:
                    f7:fd:cd:94:9d:9a:7c:61:4e:e8:b8:2a:1d:c0:71:
                    9b:e5:da:12:76:76:f2:1e:3a:70:12:41:8a:50:52:
                    55:0b:8e:9c:e4:d5:19:e3:a5:b2:db:c7:29:9c:1d:
                    32:5d:9c:ab:b3:91:62:a0:03:1a:29:95:3b:d8:7a:
                    a1:a1:0c:d3:93:2f:d1:bf:c6:1b:a8:12:85:cd:fa:
                    58:ed:1d:d4:f5:ad:21:bb:f7:93:88:b6:cf:dc:40:
                    14:71:63:d3:a8:44:62:3b:6f:49:11:cf:c8:b5:9a:
                    0b:27:fd:ec:e0:eb:28:66:d9:04:60:0b:84:73:1a:
                    c1:50:ce:dc:95:58:b5:b1:78:be:de:39:77:6c:2e:
                    e9:f7:6b:68:df:5e:87:27:5a:c3:df:df:76:b0:b9:
                    5e:2d:95:aa:5e:b8:00:2d:51:e7:f6:31:d7:bd:ff:
                    49:11:7d:c1:f3:35:80:db:cf:31:ac:5e:4f:32:bd:
                    35:52:88:48:9c:b3:6d:d4:e8:0f:56:cc:a5:00:45:
                    a2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AA:77:C8:D6:40:47:04:8E:4C:13:D2:40:AF:D6:6E:9B:B2:ED:A2
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AS207960.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207960

    Signature Algorithm: sha256WithRSAEncryption
         63:08:d2:2a:82:6c:8b:32:fb:fd:a5:21:51:7b:df:e7:84:8f:
         4d:d1:08:ec:92:22:28:c8:f9:f8:18:40:5e:69:f1:1b:d7:77:
         d6:41:ef:9f:ad:23:96:0f:91:7a:b6:4d:ec:3a:8b:9b:0b:88:
         71:b8:da:69:79:6a:91:db:b7:19:ca:89:f0:44:10:8d:3c:74:
         bf:40:2a:da:b8:b0:0f:a9:f9:d3:fc:d2:4c:a6:88:50:03:da:
         ff:13:34:a9:5a:ef:0f:d5:09:07:53:3b:93:f3:2a:f8:be:eb:
         e7:d2:84:50:36:f6:df:4f:c3:3e:b6:6f:62:d2:e7:6a:e6:e5:
         b1:9e:7b:b6:d9:15:7b:a5:c4:aa:af:15:d5:8c:fa:5f:f8:0e:
         06:f7:b5:a8:32:74:b6:57:d2:88:92:33:50:65:d4:90:f2:23:
         45:ca:56:13:a3:12:fe:bf:35:88:55:10:80:b2:e9:a1:b3:9b:
         c1:85:73:c1:3b:8f:4e:04:c8:b9:61:c2:b2:0b:e3:f7:14:f7:
         dd:b5:3a:ea:63:24:f0:e5:7c:31:61:4c:12:b5:70:1b:bd:ee:
         eb:17:b6:7a:17:01:d4:0b:6b:b4:17:8a:b0:48:16:ce:57:ff:
         64:d4:ef:ce:fe:80:14:4b:eb:e3:6b:42:c9:0a:de:1a:74:3d:
         68:88:dd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 21:22:19 2024 by rpki-client on console-ams.rpki-client.org