Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/AS60431.asa
File:                     AS60431.asa (raw, json)
Hash identifier:          1yjN11917GW0TSCe8YRjY6h1qeAEgaExsIF6mAie8ns=
Subject key identifier:   BB:19:AB:DF:AC:98:E0:B4:63:44:75:96:FA:E6:F4:DA:C1:18:18:53
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       35239BC30CB8CF1C3E2901875B8DC1E02E1966B5
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/AS60431.asa
Signing time:             Fri 20 Sep 2024 09:35:34 +0000
ASPA not before:          Fri 20 Sep 2024 09:30:34 +0000
ASPA not after:           Fri 19 Sep 2025 09:35:34 +0000
Customer ASID:            60431
Providers:                AS: 34927
                          AS: 41495
                          AS: 50917

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:23:9b:c3:0c:b8:cf:1c:3e:29:01:87:5b:8d:c1:e0:2e:19:66:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: Sep 20 09:30:34 2024 GMT
            Not After : Sep 19 09:35:34 2025 GMT
        Subject: CN=BB19ABDFAC98E0B463447596FAE6F4DAC1181853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6b:30:e0:a0:b1:a0:29:4b:a0:d3:50:cb:02:
                    0d:7d:a9:58:ae:bd:c0:b0:db:34:0d:e4:56:f2:0c:
                    bd:2b:bf:33:70:67:b5:02:ca:4d:31:8b:6f:7a:af:
                    91:78:bd:ea:a5:11:5b:99:28:8e:0f:61:0f:2e:59:
                    76:61:4f:9b:da:d9:ed:71:7c:c9:cd:32:02:d8:c3:
                    6d:94:0c:41:3c:1f:90:27:41:fb:18:67:3c:ee:b2:
                    55:22:ce:47:21:6d:1c:92:38:e3:d9:e5:46:d7:12:
                    60:ec:1a:b3:24:9b:0e:92:4e:01:ff:ac:24:63:f1:
                    0a:10:41:51:96:13:ce:25:d5:8f:b3:68:ef:45:00:
                    b5:b0:dc:1a:87:48:07:d3:6f:6a:78:35:cc:99:9b:
                    fb:f8:9a:a0:b3:98:2f:d4:ef:ab:fd:f2:d1:4e:0f:
                    59:fe:d1:5e:a0:8c:0b:dc:98:c3:e8:fe:17:0d:ce:
                    7e:aa:f8:d7:a5:40:b8:c3:e1:ea:70:b0:f6:ff:45:
                    b9:6c:dc:4e:8b:eb:21:5e:da:7f:f4:ba:2a:c1:2d:
                    20:95:36:41:33:ab:ca:e6:9e:4a:b8:52:85:f4:7c:
                    0c:fe:27:ad:74:b9:c3:ba:d2:07:24:3c:e1:bf:c0:
                    5b:51:8a:61:95:7e:d0:ad:a9:87:ee:fb:0d:64:74:
                    5d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:19:AB:DF:AC:98:E0:B4:63:44:75:96:FA:E6:F4:DA:C1:18:18:53
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/AS60431.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60431

    Signature Algorithm: sha256WithRSAEncryption
         0a:45:42:99:aa:a8:e2:70:0d:9b:8b:5a:32:05:e8:7d:ed:70:
         c2:59:fe:a4:0b:04:15:63:cc:6d:4d:97:08:12:22:70:0e:ed:
         32:d7:85:c7:bb:d0:45:68:0a:5d:5c:f0:18:b6:4a:a0:1f:7a:
         de:7f:7a:b0:bf:ca:d6:ed:3e:e3:f5:0d:e2:f5:d1:21:b1:69:
         70:13:0f:48:59:c4:06:bf:e8:b8:9f:45:4c:49:90:a5:3f:4b:
         61:41:83:cd:39:10:d9:aa:16:b1:72:6b:75:a3:30:dd:8c:26:
         78:8e:f7:8a:d0:4c:3c:4a:33:be:10:57:1f:b1:f7:55:ed:53:
         68:b6:61:8e:b4:85:7e:28:89:f2:d2:c2:9e:65:1b:5d:d1:f9:
         e3:96:40:56:5b:97:46:02:03:a7:57:64:39:9e:b7:e9:0a:c6:
         58:7a:4f:3c:11:3e:0f:d6:fb:ad:ba:e6:e1:7f:ab:45:cb:22:
         30:6a:cc:69:c4:86:23:bd:30:f1:5f:5d:ff:5a:8a:dc:65:52:
         1a:98:fc:10:82:5e:52:6c:4b:47:1f:dd:f2:18:c9:e0:35:de:
         24:a4:db:6f:45:ba:5f:31:2e:c3:a1:3f:0e:85:53:38:b0:d5:
         33:09:e9:c2:03:dc:c7:5a:1a:60:a3:4d:26:7f:30:42:f7:0e:
         e8:15:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 22:04:04 2024 by rpki-client on console-fra.rpki-client.org