Autonomous System Provider Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/AS60223.asa
File:                     AS60223.asa (raw, json)
Hash identifier:          0VfXOTJh/MHzuSl5QWfvvpRjtgJa7u6GjarU45LtLwA=
Subject key identifier:   98:D7:5C:67:EB:CC:42:A6:C1:60:77:82:8F:EB:B2:8F:EF:51:96:60
Certificate issuer:       /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial:       30BF1027049DEEF2DD46CDC10857B8D0CFB5C02D
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/3/AS60223.asa
Signing time:             Tue 18 Feb 2025 20:13:05 +0000
ASPA not before:          Tue 18 Feb 2025 20:08:05 +0000
ASPA not after:           Tue 17 Feb 2026 20:13:05 +0000
Customer ASID:            60223
Providers:                AS: 945
                          AS: 6939
                          AS: 20495
                          AS: 49581
                          AS: 50917
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
                          rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bf:10:27:04:9d:ee:f2:dd:46:cd:c1:08:57:b8:d0:cf:b5:c0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
        Validity
            Not Before: Feb 18 20:08:05 2025 GMT
            Not After : Feb 17 20:13:05 2026 GMT
        Subject: CN=98D75C67EBCC42A6C16077828FEBB28FEF519660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:3f:23:aa:62:8b:47:0b:f8:1f:e4:fd:21:
                    7a:b8:1b:ab:ad:a4:8e:f2:62:be:d0:c3:d8:37:e0:
                    79:8d:e8:18:3d:02:6d:e7:18:e8:a2:b0:e8:7f:ac:
                    58:5d:e6:5b:b6:a2:73:64:6f:5a:49:90:47:e2:78:
                    db:03:e0:0b:3c:d5:de:f0:c4:87:b7:49:9e:0d:b7:
                    d1:4f:d7:46:5e:b3:20:ce:0f:90:ff:f6:99:fd:17:
                    16:69:7a:e4:b7:8d:50:db:d4:51:ca:ad:a5:6e:05:
                    c6:86:e8:d3:ae:6a:44:37:28:05:1f:42:43:af:80:
                    3b:ec:1e:2e:81:17:51:27:27:8d:c3:79:79:11:64:
                    ac:5d:5a:8d:57:b4:45:a5:42:f6:e5:d6:81:06:24:
                    6b:bd:45:cd:3d:21:5a:ad:1e:48:d5:e2:d5:e8:58:
                    58:94:3a:4b:4c:80:e7:26:39:a4:20:e0:22:0d:02:
                    92:04:4f:7e:f8:22:58:bf:2b:9a:24:1a:3e:1e:44:
                    c3:b6:7f:f5:3c:9e:6e:42:9e:bf:8b:eb:b9:2b:b4:
                    5d:ab:6f:0d:f3:3d:f9:12:a5:ee:6e:62:54:77:61:
                    0b:f9:7d:00:47:60:f2:f3:e4:9a:ec:06:ae:c1:25:
                    e5:54:14:d8:a9:68:3c:d3:0d:48:8e:e1:2e:af:e9:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D7:5C:67:EB:CC:42:A6:C1:60:77:82:8F:EB:B2:8F:EF:51:96:60
            X509v3 Authority Key Identifier:
                keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/AS60223.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60223

    Signature Algorithm: sha256WithRSAEncryption
         a3:46:4a:e2:eb:8c:b5:db:80:ea:1d:82:8e:21:88:ec:ea:e3:
         4b:45:f5:ab:a5:27:f3:6e:83:8d:e6:ae:16:67:d8:c7:95:b2:
         d6:15:96:b2:3d:1c:54:17:3f:d2:64:13:df:94:cc:db:f7:d1:
         51:19:c5:97:79:30:dc:4c:20:e5:a5:72:42:64:51:de:b8:92:
         81:2d:27:02:6c:c9:d6:83:0b:08:ef:09:1b:98:51:2f:8d:2f:
         04:1e:ad:0b:c0:2d:1d:54:70:4c:1f:2e:ed:5c:cb:50:6d:eb:
         77:0b:ed:47:3f:7e:d0:f6:fb:8b:5c:a9:6b:29:34:07:17:62:
         03:86:0a:f7:47:10:3c:14:90:2a:fb:71:1e:a1:ea:1d:cf:c3:
         2d:ec:f2:01:2d:98:fb:64:8b:b7:c7:f9:66:15:a8:24:9a:df:
         83:46:05:49:3f:58:e5:8b:08:93:61:30:f3:81:59:e2:41:27:
         fe:1c:8a:0c:50:21:5a:34:6e:00:96:00:23:1c:b5:6e:10:18:
         3c:ee:74:68:07:bf:5c:1f:4d:1a:31:51:ef:60:ec:e1:3e:c4:
         f5:52:d1:f2:8c:d6:a9:6a:3a:23:7a:63:54:50:62:63:35:aa:
         96:20:09:5c:8f:32:12:55:55:91:aa:82:10:18:e2:03:7b:f8:
         50:e1:43:06
-----BEGIN CERTIFICATE-----
MIIEnjCCA4agAwIBAgIUML8QJwSd7vLdRs3BCFe40M+1wC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTY0MGFhNjFmMWQ2MmI5Yzk0MDQ1OTgwNGFlMTFiZTk5
YWQ0Mzg0MjAeFw0yNTAyMTgyMDA4MDVaFw0yNjAyMTcyMDEzMDVaMDMxMTAvBgNV
BAMTKDk4RDc1QzY3RUJDQzQyQTZDMTYwNzc4MjhGRUJCMjhGRUY1MTk2NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDASz8jqmKLRwv4H+T9IXq4G6ut
pI7yYr7Qw9g34HmN6Bg9Am3nGOiisOh/rFhd5lu2onNkb1pJkEfieNsD4As81d7w
xIe3SZ4Nt9FP10ZesyDOD5D/9pn9FxZpeuS3jVDb1FHKraVuBcaG6NOuakQ3KAUf
QkOvgDvsHi6BF1EnJ43DeXkRZKxdWo1XtEWlQvbl1oEGJGu9Rc09IVqtHkjV4tXo
WFiUOktMgOcmOaQg4CINApIET374Ili/K5okGj4eRMO2f/U8nm5Cnr+L67krtF2r
bw3zPfkSpe5uYlR3YQv5fQBHYPLz5JrsBq7BJeVUFNipaDzTDUiO4S6v6W5vAgMB
AAGjggGoMIIBpDAdBgNVHQ4EFgQUmNdcZ+vMQqbBYHeCj+uyj+9RlmAwHwYDVR0j
BBgwFoAUpkCqYfHWK5yUBFmASuEb6ZrUOEIwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh
Y2UvMy9BNjQwQUE2MUYxRDYyQjlDOTQwNDU5ODA0QUUxMUJFOTlBRDQzODQyLmNy
bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcGtDcVlmSFdLNXlVQkZtQVN1RWI2WnJV
T0VJLmNlcjBPBggrBgEFBQcBCwRDMEEwPwYIKwYBBQUHMAuGM3JzeW5jOi8vcmVw
by5ycGtpLnNwYWNlL3JlcG8vTmV0aWZhY2UvMy9BUzYwMjIzLmFzYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDrPzAN
BgkqhkiG9w0BAQsFAAOCAQEAo0ZK4uuMtduA6h2CjiGI7OrjS0X1q6Un826Djeau
FmfYx5Wy1hWWsj0cVBc/0mQT35TM2/fRURnFl3kw3Ewg5aVyQmRR3riSgS0nAmzJ
1oMLCO8JG5hRL40vBB6tC8AtHVRwTB8u7VzLUG3rdwvtRz9+0Pb7i1ypayk0Bxdi
A4YK90cQPBSQKvtxHqHqHc/DLezyAS2Y+2SLt8f5ZhWoJJrfg0YFST9Y5YsIk2Ew
84FZ4kEn/hyKDFAhWjRuAJYAIxy1bhAYPO50aAe/XB9NGjFR72Ds4T7E9VLR8ozW
qWo6I3pjVFBiYzWqliAJXI8yElVVkaqCEBjiA3v4UOFDBg==
-----END CERTIFICATE-----
Generated at Wed May 7 12:11:08 2025 by rpki-client