Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/AS205603.asa
File:                     AS205603.asa (raw, json)
Hash identifier:          cBPBrIrKQApvXReq5l0HPs0LV31Ya31Pj6v8h6b+N+0=
Subject key identifier:   B7:66:17:21:9B:E6:56:75:FA:0F:1F:1C:65:BC:07:7D:93:F9:5C:F2
Certificate issuer:       /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial:       224CE8BFA0A8BD76A61B948E383DB1C4326FAEEF
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/AS205603.asa
Signing time:             Sun 10 Nov 2024 08:00:46 +0000
ASPA not before:          Sun 10 Nov 2024 07:55:46 +0000
ASPA not after:           Sun 09 Nov 2025 08:00:46 +0000
Customer ASID:            205603
Providers:                AS: 38008
                          AS: 38074
                          AS: 59105

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 18:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4c:e8:bf:a0:a8:bd:76:a6:1b:94:8e:38:3d:b1:c4:32:6f:ae:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
        Validity
            Not Before: Nov 10 07:55:46 2024 GMT
            Not After : Nov  9 08:00:46 2025 GMT
        Subject: CN=B76617219BE65675FA0F1F1C65BC077D93F95CF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:00:e4:d5:37:a7:06:b9:9d:5d:cf:33:70:
                    cb:42:db:a1:71:5c:46:22:d0:10:ca:90:a1:02:1e:
                    f6:c3:fb:a1:8c:be:af:52:02:78:44:ae:7d:d1:31:
                    fb:32:bb:9b:ff:3d:a0:37:8c:a9:4c:61:ab:c8:37:
                    a7:22:9f:fe:4a:6f:d6:ec:54:ff:5f:05:f4:07:0d:
                    4e:e8:df:90:d4:d7:59:c0:a1:22:87:86:d4:b7:c1:
                    0e:3b:95:61:e2:72:26:82:09:47:4f:76:1b:4c:35:
                    d8:7a:74:91:08:ac:bd:15:0e:65:1e:49:ef:19:a2:
                    bb:20:53:ad:fa:3b:f6:c2:91:c3:50:83:bb:fe:3b:
                    f1:13:be:85:0b:c7:13:db:20:1a:6e:c7:72:b1:8f:
                    72:b0:9b:67:bd:4f:12:04:70:27:de:16:26:ce:06:
                    b1:ec:64:d0:80:9d:8e:f4:9c:be:fe:b9:6c:96:bd:
                    79:b8:e7:ab:d4:e5:e0:a8:37:14:47:c5:8f:1c:66:
                    db:3e:6d:4e:56:e0:3b:35:8a:6f:33:90:9f:3a:99:
                    ba:37:be:a5:70:91:92:a9:21:0b:54:68:07:9b:83:
                    ac:21:be:c3:c7:5a:fa:77:91:9d:d2:8d:d1:d5:88:
                    04:4d:6a:18:34:5c:85:14:a0:ac:f4:18:a5:f9:da:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:66:17:21:9B:E6:56:75:FA:0F:1F:1C:65:BC:07:7D:93:F9:5C:F2
            X509v3 Authority Key Identifier:
                keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/AS205603.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205603

    Signature Algorithm: sha256WithRSAEncryption
         c6:aa:c8:7b:1b:cf:b8:76:e2:64:61:7b:3b:21:a9:15:3d:e9:
         77:5d:2e:56:19:3d:b0:21:3c:ca:29:c0:84:78:8c:cb:a3:e1:
         1a:44:57:20:50:48:31:54:0f:8b:68:aa:42:05:75:c6:d6:79:
         ed:f8:94:71:40:36:07:a1:ea:36:de:8a:39:5f:79:08:ca:16:
         20:5b:94:e9:1a:6e:3a:a5:54:87:ae:48:59:e6:11:af:58:9e:
         cd:db:8a:d2:3a:95:97:37:77:a2:d3:d5:16:ac:fd:25:dc:1b:
         2c:09:17:9a:b3:36:41:01:d2:a4:f6:28:91:0b:42:a1:5b:6c:
         fa:27:87:79:ef:0b:25:61:b4:f9:0e:fd:65:30:d3:9d:67:7f:
         c9:50:2b:6d:0f:94:1d:8d:81:8d:50:5d:bc:2f:95:e2:00:fb:
         a9:35:b2:34:7f:52:dd:b4:77:85:2b:7f:b8:a4:30:59:96:fe:
         a7:36:65:f4:6c:bd:90:24:c6:e6:55:69:31:a0:d1:a4:72:05:
         2f:8d:69:23:97:06:f9:e2:f2:62:95:08:a3:b8:b9:37:49:5c:
         28:e3:78:c6:fe:bd:52:f1:07:5e:b9:00:36:89:8e:61:8a:b3:
         91:42:f2:2c:44:07:49:e9:75:e2:5b:d3:89:fa:fc:f9:b0:ee:
         09:59:51:79
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 21 03:53:14 2024 by rpki-client on console-fra.rpki-client.org