Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/AS213768.asa
File:                     AS213768.asa (raw, json)
Hash identifier:          STN7/gpSTzTnV+2a1yuX1MKiPFhViLW1NgtMlmyfpUI=
Subject key identifier:   C4:56:C6:04:3A:EE:66:1C:DC:52:8A:EE:48:1A:26:E4:4E:32:0A:39
Certificate issuer:       /CN=775dd17e145060e4599a6591cc0e68ac2ae6ec3b
Certificate serial:       772DFC40511074F43238650C9CD577EC03EC7FED
Authority key identifier: 77:5D:D1:7E:14:50:60:E4:59:9A:65:91:CC:0E:68:AC:2A:E6:EC:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/AS213768.asa
Signing time:             Thu 30 Jan 2025 15:40:23 +0000
ASPA not before:          Thu 30 Jan 2025 15:35:23 +0000
ASPA not after:           Thu 29 Jan 2026 15:40:23 +0000
Customer ASID:            213768
Providers:                AS: 34927
                          AS: 53667
                          AS: 207841
                          AS: 209735
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2d:fc:40:51:10:74:f4:32:38:65:0c:9c:d5:77:ec:03:ec:7f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775dd17e145060e4599a6591cc0e68ac2ae6ec3b
        Validity
            Not Before: Jan 30 15:35:23 2025 GMT
            Not After : Jan 29 15:40:23 2026 GMT
        Subject: CN=C456C6043AEE661CDC528AEE481A26E44E320A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:9b:8e:df:b1:6b:8d:48:a2:5f:6c:11:f7:
                    06:2d:83:9a:79:e5:8d:e7:13:fb:a3:24:07:03:b1:
                    66:f5:25:bf:73:fe:d1:9e:a9:cb:2b:b7:60:be:36:
                    a2:a0:04:c1:68:67:39:3f:5d:35:f1:a4:12:f8:46:
                    ec:be:39:19:0c:4c:36:4c:82:cc:94:fe:a7:8c:ca:
                    6c:71:16:ab:97:ba:02:80:28:32:d7:0d:ec:57:13:
                    71:c8:62:4f:ed:fa:45:81:2d:a4:7a:a9:11:6d:19:
                    1e:83:2a:8f:6b:94:ff:b7:15:ee:0e:61:ce:85:ac:
                    de:84:3b:c6:7d:eb:12:a6:05:61:54:e2:51:c4:2e:
                    6e:c2:b3:2a:bb:ea:12:15:2c:0e:c7:47:4c:f5:91:
                    ff:24:10:2f:2f:e7:d3:73:17:50:ee:e5:d3:fa:f4:
                    14:49:e8:44:85:d4:a1:6c:96:37:88:ee:03:71:dc:
                    89:a9:f7:fc:66:5f:c1:0d:0b:24:7b:64:e7:37:4b:
                    21:d1:d4:64:1b:42:ad:f3:04:c8:15:05:0a:12:89:
                    be:3c:ab:fe:f4:37:94:f4:6f:85:3e:f7:6d:d9:32:
                    5f:9e:60:d1:f9:c5:4b:56:db:0f:00:73:4f:0b:21:
                    03:2a:3e:49:4c:ac:31:0d:3b:aa:07:a6:4b:12:e2:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:56:C6:04:3A:EE:66:1C:DC:52:8A:EE:48:1A:26:E4:4E:32:0A:39
            X509v3 Authority Key Identifier:
                keyid:77:5D:D1:7E:14:50:60:E4:59:9A:65:91:CC:0E:68:AC:2A:E6:EC:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/AS213768.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213768

    Signature Algorithm: sha256WithRSAEncryption
         9d:d4:7c:5a:da:5e:ab:f0:a3:d0:67:dc:70:d2:7e:a7:4a:b0:
         d5:79:71:a6:33:b7:e7:d1:e3:29:54:4e:a7:62:40:14:39:0d:
         87:91:a3:c1:54:a3:b3:af:47:cd:a5:a7:a7:b8:84:ff:75:5d:
         c8:1f:3d:47:68:d4:f4:50:7f:62:1f:33:9b:1a:ba:70:a4:23:
         f7:aa:17:b6:93:9a:3d:19:28:29:00:25:ee:fa:5b:91:ef:4c:
         e3:47:f1:3c:07:cb:44:b3:09:a8:d3:32:f4:1e:1b:6b:44:8a:
         77:c8:df:6a:89:73:7a:dd:0f:86:21:89:af:57:1d:0c:94:a5:
         04:54:de:a1:aa:35:9a:ef:be:43:79:02:09:47:ae:71:22:ce:
         f9:a9:49:78:26:3f:fd:53:42:8c:d6:6c:69:5f:8a:3a:06:5f:
         72:77:68:82:7c:84:1d:38:74:18:6f:33:d9:cd:93:78:03:19:
         ac:3e:87:c2:45:98:27:9b:88:31:36:81:58:a0:d9:b4:f5:d5:
         fd:16:5b:b6:38:63:4a:93:b3:93:b3:42:99:e2:fc:75:af:81:
         92:31:bd:45:36:e5:46:10:94:8d:e2:c5:e0:ff:08:60:9f:bb:
         b4:15:18:31:4e:49:60:fd:92:79:13:75:e7:9f:83:8f:32:c0:
         53:f8:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:37:55 2025 by rpki-client