Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207841.asa
File:                     AS207841.asa (raw, json)
Hash identifier:          809J9sRClygqWJpYojyTUwfJBmp+8jCZ9yHmKSrhcaY=
Subject key identifier:   EE:58:F5:42:3E:99:2C:DD:C4:A8:19:85:12:56:3C:C2:82:23:C3:41
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       6B8A3A7635D076BA93BBEEBF63F8C4A1D06A7864
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207841.asa
Signing time:             Tue 05 Mar 2024 23:21:23 +0000
ASPA not before:          Tue 05 Mar 2024 23:16:23 +0000
ASPA not after:           Tue 04 Mar 2025 23:21:23 +0000
Customer ASID:            207841
Providers:                AS: 6939
                          AS: 59455

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Apr 2024 14:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8a:3a:76:35:d0:76:ba:93:bb:ee:bf:63:f8:c4:a1:d0:6a:78:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: Mar  5 23:16:23 2024 GMT
            Not After : Mar  4 23:21:23 2025 GMT
        Subject: CN=EE58F5423E992CDDC4A8198512563CC28223C341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:e3:dd:f6:d4:c3:56:ba:ba:0c:ee:c5:23:
                    e3:6a:0a:64:c5:03:4c:46:b7:de:69:67:34:ba:fa:
                    b4:05:2a:0b:e4:83:9b:2b:ed:19:9c:e1:52:a7:6e:
                    76:4b:80:a8:2b:c9:5b:f0:5d:7d:20:61:13:2b:27:
                    ac:3e:61:93:e0:db:52:1d:89:3a:36:bb:05:fd:70:
                    44:af:7c:6a:cd:a0:c6:5e:0d:f5:02:54:f6:02:eb:
                    ad:d7:a9:23:40:d2:8b:4e:45:3f:e0:b2:2e:dd:e0:
                    9a:6e:5e:65:36:d9:d2:ed:ce:d3:81:a4:52:86:02:
                    6d:52:67:bf:9a:43:43:ce:b0:5c:01:6b:65:03:ae:
                    0c:3a:5d:2c:2e:b3:9c:b8:f5:91:cf:79:c0:c2:d2:
                    44:fe:2c:65:42:fe:51:f8:2b:0b:f5:68:28:54:c4:
                    2c:36:59:f7:fa:7c:5e:1d:fe:7e:d5:81:9f:27:3e:
                    86:ab:79:27:cf:d5:59:71:46:ed:52:29:e6:c7:b7:
                    b6:f4:95:56:34:a2:1e:18:0b:88:db:8f:99:21:cc:
                    29:ba:a6:85:c5:3a:e4:ac:be:40:43:0c:2f:f3:c9:
                    af:d9:62:e4:d5:ac:e4:d9:ad:f5:2e:cd:2d:17:63:
                    20:ea:86:f8:d0:1d:e2:cf:c4:e1:63:c8:2c:90:7f:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:58:F5:42:3E:99:2C:DD:C4:A8:19:85:12:56:3C:C2:82:23:C3:41
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207841.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207841

    Signature Algorithm: sha256WithRSAEncryption
         11:27:8a:a7:e6:d5:d1:b8:4d:1a:1d:d2:c1:a1:bf:61:73:8f:
         ba:a8:25:43:ec:f9:df:58:9f:6a:f3:d7:2f:6c:f9:db:dd:79:
         c9:5d:11:59:0b:dd:bf:75:82:a8:e6:05:5c:4c:2f:02:56:95:
         94:c9:7e:4d:e4:41:81:a5:5c:a3:56:20:00:ba:40:bd:7d:87:
         75:b6:28:c9:d6:76:d0:e8:66:29:4f:70:86:dc:15:61:94:22:
         f9:6f:98:9b:c5:73:60:50:c8:0a:e6:77:95:77:52:87:df:13:
         d5:13:2c:65:85:c4:c6:98:47:54:07:39:9f:f3:dd:66:0a:b9:
         ba:c1:11:71:61:4c:23:b4:58:ff:a5:0b:d8:91:5a:81:7d:ac:
         aa:a2:31:c4:e4:f1:3c:46:db:e9:78:3c:8e:eb:86:4f:17:5d:
         4d:66:b8:e2:f8:f4:94:4a:81:b3:b1:2a:0a:3a:f8:61:de:55:
         89:9d:0a:c7:bd:5c:e8:79:d8:89:d3:0e:6d:7a:25:84:2a:4a:
         c9:2b:d7:a3:a5:05:72:ce:b0:c4:1f:7b:c4:23:0d:01:3b:e2:
         75:4e:64:6c:d4:71:8c:ba:41:e5:c1:c2:6d:61:7f:2d:fa:e0:
         32:e9:bb:88:ff:c1:f6:64:66:72:b8:91:51:36:b1:2b:56:58:
         25:3c:de:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 00:22:23 2024 by rpki-client on console-fra.rpki-client.org