Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/AS204931.asa
File:                     AS204931.asa (raw, json)
Hash identifier:          mjmEdZgmj+BXkWpIt5aZmdkAsVD4VtcK2Ogxa+QnMrQ=
Subject key identifier:   6C:04:9F:C8:96:3C:45:55:BC:80:B3:18:99:F7:DD:CD:A9:0B:A0:C4
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       449947525A031E54F2F5C3964E3F7FC0A6DA9C13
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/AS204931.asa
Signing time:             Mon 19 Aug 2024 16:11:54 +0000
ASPA not before:          Mon 19 Aug 2024 16:06:54 +0000
ASPA not after:           Mon 18 Aug 2025 16:11:54 +0000
Customer ASID:            204931
Providers:                AS: 34927
                          AS: 44103
                          AS: 207656

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Dec 2024 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:99:47:52:5a:03:1e:54:f2:f5:c3:96:4e:3f:7f:c0:a6:da:9c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: Aug 19 16:06:54 2024 GMT
            Not After : Aug 18 16:11:54 2025 GMT
        Subject: CN=6C049FC8963C4555BC80B31899F7DDCDA90BA0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:fe:66:5a:5a:98:f5:fa:6a:0f:00:d4:87:
                    6a:c7:f5:8d:4f:31:97:41:19:44:98:47:3b:4e:16:
                    d7:33:54:89:04:17:07:d3:9f:ff:1c:9c:0b:99:17:
                    fa:cb:95:88:ca:ce:26:1c:e4:72:f5:22:09:62:94:
                    fe:47:75:32:3f:6a:6d:4d:9d:1a:85:a0:8a:c0:ec:
                    e1:41:f3:f4:e0:6b:7b:93:97:67:79:3a:02:ec:ac:
                    9c:98:d2:b0:0a:46:c8:df:8f:0a:d0:97:ab:67:76:
                    4c:cb:79:bb:ad:aa:3e:ac:c3:77:2b:c0:ee:e2:a0:
                    74:cc:80:55:d2:cd:af:1f:7c:0a:89:73:97:c0:a4:
                    45:00:73:a8:b1:ee:ae:c5:0a:6b:21:7f:82:03:83:
                    e2:dd:94:7f:b4:6f:5e:04:fa:32:06:a3:ed:ca:74:
                    b4:e6:d7:1b:c0:25:b0:db:60:4c:b0:0c:78:ab:cf:
                    2e:37:93:47:ee:73:ea:8f:a5:3f:9b:69:ce:02:86:
                    af:ed:a2:a4:26:39:07:3c:bf:12:dd:80:96:dc:ee:
                    1b:c4:d6:51:09:94:76:0f:0a:3a:0a:05:f9:99:27:
                    90:0d:aa:b1:d2:b6:9a:bd:4c:0a:76:aa:fa:b2:bd:
                    b7:4e:f3:a9:c8:a7:04:5e:f3:96:29:9d:ad:a1:9f:
                    b4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:04:9F:C8:96:3C:45:55:BC:80:B3:18:99:F7:DD:CD:A9:0B:A0:C4
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/AS204931.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  204931

    Signature Algorithm: sha256WithRSAEncryption
         50:52:fd:35:9b:ae:b4:83:a6:a2:55:26:e3:d1:fc:d8:0e:e2:
         d9:52:6b:92:30:a0:b0:da:fd:18:0a:9d:69:8c:91:fe:40:c2:
         23:b4:a5:1a:25:76:8a:5a:e0:fb:f6:2c:06:9a:c1:d9:0a:3e:
         6d:47:7d:be:1c:f9:71:2a:bc:f2:3d:7c:a7:dc:c3:0e:64:4e:
         0d:fc:9d:55:24:ec:51:49:ea:96:d5:d4:81:20:36:eb:46:32:
         ef:2e:c0:cb:c0:fa:ab:99:e6:d5:84:b9:00:46:5a:d5:de:12:
         fd:6e:0e:45:c0:97:ea:e7:b0:50:69:5b:64:df:83:30:6e:8d:
         f3:47:6a:cc:39:c3:5b:16:84:c1:02:7f:e1:4b:b5:49:72:d8:
         ed:8f:f3:dd:32:71:19:cc:08:99:49:1c:6b:89:ac:65:6e:22:
         99:ae:0a:53:14:72:5f:96:d9:7d:45:13:a5:bd:2c:aa:40:34:
         d3:75:4e:9e:f3:1e:2a:fa:c3:4b:37:68:9e:2d:7d:ce:70:9b:
         dc:65:a6:9b:3c:b5:c4:2d:8e:0e:69:64:9b:10:ae:81:4a:08:
         11:d2:b8:cd:71:46:20:46:8e:86:0e:36:4c:13:d0:36:e9:69:
         dd:b0:68:08:a3:0f:a7:53:47:3b:9e:92:40:aa:5d:6b:13:13:
         f4:0b:c4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 10:46:09 2024 by rpki-client on console-fra.rpki-client.org