Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/AS41720.asa
File:                     AS41720.asa (raw, json)
Hash identifier:          +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=
Subject key identifier:   64:91:B1:E5:F0:50:66:2D:CC:81:37:BD:72:DA:E3:0B:D4:E0:29:5F
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       14484181EDA021AEE2EBE80B588CDE0EE0B7D8EE
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/AS41720.asa
Signing time:             Wed 16 Oct 2024 15:51:59 +0000
ASPA not before:          Wed 16 Oct 2024 15:46:59 +0000
ASPA not after:           Wed 15 Oct 2025 15:51:59 +0000
Customer ASID:            41720
Providers:                AS: 174
                          AS: 1299
                          AS: 9002
                          AS: 50877
                          AS: 60068
                          AS: 203446
                          AS: 212508

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:48:41:81:ed:a0:21:ae:e2:eb:e8:0b:58:8c:de:0e:e0:b7:d8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Oct 16 15:46:59 2024 GMT
            Not After : Oct 15 15:51:59 2025 GMT
        Subject: CN=6491B1E5F050662DCC8137BD72DAE30BD4E0295F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:07:16:47:f7:69:c2:06:32:27:0f:ef:cc:9d:
                    de:6b:4b:80:03:55:ed:c3:8b:e2:fd:80:a3:f2:11:
                    5c:37:f5:24:6e:9b:9f:d7:c4:57:7e:48:5c:b6:67:
                    c8:7b:be:c1:6a:db:1f:42:48:08:54:ef:bb:f5:c2:
                    68:f4:03:ea:b1:78:a3:39:cb:c2:f2:2b:e1:dc:9c:
                    3b:61:1b:3f:85:5a:8d:90:0b:3e:83:b9:1b:18:9a:
                    00:9e:35:14:d2:6e:2e:ca:a8:05:76:83:c9:4b:f1:
                    7b:fc:a2:7e:19:aa:65:9d:5a:e5:5e:f6:50:96:14:
                    c6:17:cb:d3:d6:94:14:13:8b:c9:19:5b:fb:ae:34:
                    5b:ca:6b:1a:2f:86:fd:7f:33:3c:5a:d2:86:1f:79:
                    1e:a7:2b:93:b1:d7:17:58:73:48:7a:8b:97:44:a7:
                    d5:38:5e:f8:56:72:66:0f:df:68:38:46:98:84:b0:
                    6f:c5:76:2c:12:67:ae:1b:8e:41:81:a0:a3:d6:f5:
                    48:98:6c:ac:c6:bf:57:82:8f:cf:f9:1c:7a:cc:08:
                    ba:c9:a8:86:e1:e2:33:0b:2a:27:18:8b:4f:33:1b:
                    d4:a3:4b:e9:95:38:96:d3:35:04:cc:53:1f:da:db:
                    ba:5f:58:f2:53:56:f7:c1:d6:05:3d:dc:b6:90:3f:
                    44:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:91:B1:E5:F0:50:66:2D:CC:81:37:BD:72:DA:E3:0B:D4:E0:29:5F
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/AS41720.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  41720

    Signature Algorithm: sha256WithRSAEncryption
         51:80:ed:f5:7e:23:5b:16:8e:8b:d7:3e:c9:61:f8:d2:d1:ec:
         45:4d:fe:fb:bb:78:b7:09:cd:db:b9:3f:28:85:e2:ba:c6:e9:
         fa:24:af:67:0b:23:19:b5:93:3d:9c:25:e7:e1:e6:aa:80:18:
         d7:f4:f8:6c:c0:19:2d:7a:b5:33:7a:1f:c9:b4:28:bb:fe:48:
         1d:a6:15:9a:63:eb:f9:19:51:16:9f:40:ac:d7:4a:66:bc:02:
         b1:ac:9a:2e:1f:c0:e0:31:00:51:77:bf:77:a0:73:c8:36:70:
         f3:d8:f7:f7:8f:a5:e4:52:70:26:bf:bf:ea:98:cf:7b:b9:38:
         c8:71:dc:4c:75:fd:8e:77:3e:cc:93:b1:f7:7e:ba:c0:26:a6:
         ed:03:b7:a9:90:34:24:03:e5:15:5b:5c:3d:81:72:14:66:8a:
         33:fd:88:13:47:26:fe:76:76:e6:e6:0f:94:6b:77:e5:2d:8e:
         f3:b2:06:d4:8f:2f:c5:d9:85:00:ee:a2:6f:2a:2e:63:7d:a9:
         cc:1c:13:96:58:5f:eb:b0:81:c8:4d:f3:47:da:b1:47:e0:2a:
         66:ba:9f:e1:50:8c:89:3c:24:9a:48:ef:69:4b:90:79:26:f1:
         b8:c5:bd:0e:81:2a:80:8d:17:50:dd:65:50:fa:ea:c4:87:10:
         50:08:0c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:15:05 2024 by rpki-client on console-fra.rpki-client.org