Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207841.asa
File:                     AS207841.asa (raw, json)
Hash identifier:          2N+dN/oGIzp1ShpO5nRyauZMdk3lmh/7YKgzOhHOi3k=
Subject key identifier:   76:6A:C4:8C:3D:C4:9F:8E:B5:33:7B:54:15:25:01:96:B5:9D:32:B0
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       05741AF5A99858C3315E6ABB0F14CF91FA9F261D
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207841.asa
Signing time:             Fri 12 Jul 2024 03:28:03 +0000
ASPA not before:          Fri 12 Jul 2024 03:23:03 +0000
ASPA not after:           Fri 11 Jul 2025 03:28:03 +0000
Customer ASID:            207841
Providers:                AS: 174
                          AS: 6939

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Jul 2024 21:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:74:1a:f5:a9:98:58:c3:31:5e:6a:bb:0f:14:cf:91:fa:9f:26:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Jul 12 03:23:03 2024 GMT
            Not After : Jul 11 03:28:03 2025 GMT
        Subject: CN=766AC48C3DC49F8EB5337B5415250196B59D32B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:ba:bd:f0:71:b2:d1:a7:bb:87:4c:4c:28:
                    ce:a2:fb:e4:00:b2:4d:e8:fe:bd:6c:d1:c5:f3:18:
                    49:35:96:37:65:a4:72:00:22:d9:be:45:54:e5:db:
                    d7:ba:33:81:73:aa:a8:19:f0:d8:84:11:46:35:65:
                    b3:fb:75:c5:46:66:38:c9:cd:68:79:0f:74:e6:fe:
                    11:44:2c:6e:5b:1e:63:38:e1:fd:50:b5:a2:27:84:
                    ce:7e:a2:b8:ba:13:3d:a6:9b:37:be:fc:f9:bb:be:
                    60:13:ee:27:9c:62:96:63:03:f5:13:fe:8c:50:78:
                    62:90:b1:03:86:ea:a7:4e:40:2c:5e:b6:f8:21:6f:
                    57:c3:e0:bc:09:a3:55:1f:50:57:57:53:f3:2d:eb:
                    44:43:2d:a1:c7:6d:43:85:44:f3:89:8e:41:d1:05:
                    cc:5d:f8:c1:24:3b:4b:89:13:0e:22:c7:c3:b4:19:
                    0b:e6:8d:ac:4b:40:51:fd:67:a4:43:8e:70:e6:94:
                    59:53:dd:00:69:e8:1f:68:2c:9c:f9:8f:3b:48:88:
                    31:63:9c:9c:c3:56:54:c4:af:5a:de:1e:ed:90:41:
                    17:2c:5d:20:4e:12:7a:86:f4:62:54:19:7e:9e:11:
                    b1:12:0c:75:7c:2c:44:12:3b:03:ff:0a:9c:aa:62:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6A:C4:8C:3D:C4:9F:8E:B5:33:7B:54:15:25:01:96:B5:9D:32:B0
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207841.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207841

    Signature Algorithm: sha256WithRSAEncryption
         74:af:ca:0b:9d:37:59:02:fe:ed:dd:df:d1:9a:05:e3:09:2c:
         d7:4b:1d:ee:b2:e7:f7:92:3f:20:f6:8e:42:88:cc:fe:97:90:
         66:46:c4:a0:8d:cc:be:11:80:a8:b4:d7:c3:ac:ef:30:9e:b1:
         7d:ef:e9:0a:bb:f1:bf:3f:47:e6:f8:b1:6c:e2:6b:23:f2:c7:
         1d:28:69:5f:b6:b2:e8:46:b1:9c:67:5f:73:49:1a:f2:6a:0c:
         33:43:f3:44:47:1c:6a:5a:71:e2:76:28:f0:4e:22:e1:7b:85:
         25:2c:b0:b0:ce:77:f6:c7:50:d2:4f:74:32:f6:88:c4:0e:5b:
         14:6b:ee:d6:6e:30:0c:d0:ba:bb:00:f5:84:88:79:27:a2:a3:
         b2:37:6c:36:82:79:bc:99:e1:ba:52:19:8c:f3:22:fe:65:1f:
         73:22:d8:35:48:6c:11:f8:a0:f3:02:4a:59:3d:72:9a:ec:1c:
         c2:e5:5a:f3:50:3b:a7:d7:11:29:79:8f:02:a7:83:a5:be:42:
         04:01:fa:ef:df:6f:0d:79:01:3f:03:b6:30:f1:44:ba:06:71:
         56:7d:34:9e:90:0a:3f:a5:57:27:dd:d5:91:75:ad:12:2e:45:
         e8:69:b9:54:b7:a5:13:da:43:0f:3f:76:7e:6a:a9:51:37:16:
         9f:7b:e2:1a
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUBXQa9amYWMMxXmq7DxTPkfqfJh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDA3MTIwMzIzMDNaFw0yNTA3MTEwMzI4MDNaMDMxMTAvBgNV
BAMTKDc2NkFDNDhDM0RDNDlGOEVCNTMzN0I1NDE1MjUwMTk2QjU5RDMyQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Qbq98HGy0ae7h0xMKM6i++QA
sk3o/r1s0cXzGEk1ljdlpHIAItm+RVTl29e6M4FzqqgZ8NiEEUY1ZbP7dcVGZjjJ
zWh5D3Tm/hFELG5bHmM44f1QtaInhM5+ori6Ez2mmze+/Pm7vmAT7iecYpZjA/UT
/oxQeGKQsQOG6qdOQCxetvghb1fD4LwJo1UfUFdXU/Mt60RDLaHHbUOFRPOJjkHR
Bcxd+MEkO0uJEw4ix8O0GQvmjaxLQFH9Z6RDjnDmlFlT3QBp6B9oLJz5jztIiDFj
nJzDVlTEr1reHu2QQRcsXSBOEnqG9GJUGX6eEbESDHV8LEQSOwP/CpyqYrvNAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUdmrEjD3En461M3tUFSUBlrWdMrAwHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZjMjBhZGQzLWE4OGUt
NGJiMi1hODRkLTU1ZGEyMTI4ZjE5Ni8wL0FTMjA3ODQxLmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMr4TANBgkq
hkiG9w0BAQsFAAOCAQEAdK/KC503WQL+7d3f0ZoF4wks10sd7rLn95I/IPaOQojM
/peQZkbEoI3MvhGAqLTXw6zvMJ6xfe/pCrvxvz9H5vixbOJrI/LHHShpX7ay6Eax
nGdfc0ka8moMM0PzREccalpx4nYo8E4i4XuFJSywsM539sdQ0k90MvaIxA5bFGvu
1m4wDNC6uwD1hIh5J6KjsjdsNoJ5vJnhulIZjPMi/mUfcyLYNUhsEfig8wJKWT1y
muwcwuVa81A7p9cRKXmPAqeDpb5CBAH6799vDXkBPwO2MPFEugZxVn00npAKP6VX
J93VkXWtEi5F6Gm5VLelE9pDDz92fmqpUTcWn3viGg==
-----END CERTIFICATE-----
Generated at Fri Jul 26 04:11:43 2024 by rpki-client on console-fra.rpki-client.org