Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/AS44355.asa
File:                     AS44355.asa (raw, json)
Hash identifier:          G21nP2TmMqqlVk7Lgur9dIc19qN8uQ6Y1uvllHDb+ao=
Subject key identifier:   AF:4C:4B:45:2A:AE:A3:36:98:42:32:DB:D3:D6:69:00:AA:EC:7D:F7
Certificate issuer:       /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial:       E8F9D85F57C9EFF84C8E6FF530B1B41DE2A3C3
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/AS44355.asa
Signing time:             Mon 05 May 2025 19:46:48 +0000
ASPA not before:          Mon 05 May 2025 19:41:48 +0000
ASPA not after:           Mon 04 May 2026 19:46:48 +0000
Customer ASID:            44355
Providers:                AS: 49775
                          AS: 207841
                          AS: 215759
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e8:f9:d8:5f:57:c9:ef:f8:4c:8e:6f:f5:30:b1:b4:1d:e2:a3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
        Validity
            Not Before: May  5 19:41:48 2025 GMT
            Not After : May  4 19:46:48 2026 GMT
        Subject: CN=AF4C4B452AAEA336984232DBD3D66900AAEC7DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:37:db:97:1c:f5:89:9e:71:f5:51:94:0c:08:
                    f2:da:6b:73:12:c3:af:6c:66:15:ea:c9:d5:09:bb:
                    fd:2c:c9:ec:0b:78:e0:10:5d:bc:c3:8e:8e:24:a9:
                    36:9f:8c:80:60:83:af:6a:cd:a1:a8:89:b0:13:33:
                    08:be:47:4c:98:e4:a4:a0:b1:8c:a0:d7:62:60:a1:
                    1e:09:ab:31:30:47:40:ec:ff:58:76:cb:9f:a4:e9:
                    e9:6b:79:00:e4:1f:71:d2:75:2a:a6:7c:9c:76:00:
                    bf:db:b3:7b:7a:ed:64:56:19:a8:30:d8:78:65:ba:
                    38:66:b5:86:be:f2:a7:bb:3e:03:83:6a:56:aa:24:
                    1d:01:91:cd:8c:d5:6e:fe:e7:91:36:eb:57:da:bf:
                    ab:27:ee:79:5a:a5:67:d5:9b:85:55:7e:5a:67:39:
                    82:76:50:81:78:8e:76:c0:4c:05:5b:1a:93:f3:d6:
                    57:71:4b:02:83:32:f7:e0:fd:df:72:00:77:e4:94:
                    92:3d:2e:13:24:ab:ab:9d:9c:17:de:94:b9:2d:a3:
                    dd:94:d5:e3:49:50:d5:03:5c:d2:83:3f:1d:a9:c1:
                    40:61:c8:4e:82:e3:ca:db:cd:eb:02:8b:96:0e:37:
                    3a:d1:e4:b7:0a:f2:35:33:c8:46:c5:15:d7:0d:f0:
                    92:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4C:4B:45:2A:AE:A3:36:98:42:32:DB:D3:D6:69:00:AA:EC:7D:F7
            X509v3 Authority Key Identifier:
                keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/AS44355.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  44355

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:e3:cb:9f:a5:43:90:65:16:bd:7b:a5:39:79:25:2f:db:
         ba:7c:3a:a3:81:bd:74:2c:8d:54:8a:5a:04:4d:d1:6b:fe:1a:
         a9:51:3b:27:16:f4:fb:9f:ac:4f:7f:62:c6:4e:b1:dc:0e:45:
         7c:84:2e:50:7c:93:d2:da:2e:6f:ee:87:34:fa:6f:c9:a0:2d:
         ce:00:f7:3f:66:cc:5c:62:8a:19:de:65:41:e2:bf:75:ab:f2:
         5e:5f:3e:2a:27:2a:79:41:2a:aa:da:3f:71:46:73:9f:f5:d7:
         ee:63:d2:f0:5d:e6:d8:12:a0:7e:77:c3:ef:04:35:65:9d:da:
         70:aa:a8:11:10:94:74:57:ce:5a:dc:66:13:cc:d3:e1:af:8d:
         4f:c4:f2:5f:d4:97:a4:c3:9b:47:e7:e4:0b:45:1a:ec:10:10:
         28:f8:53:99:3b:1a:4e:26:0a:0c:2a:1c:2d:23:26:15:5f:df:
         09:6f:2f:27:70:a0:f9:d8:e1:ad:dc:1c:8a:67:79:ab:27:08:
         fe:0c:86:47:13:11:46:ba:8e:2e:ad:54:51:84:fb:d0:8a:c6:
         c0:90:c1:db:3a:b1:66:cf:ab:3a:43:60:c8:86:14:64:db:2e:
         31:05:78:8c:06:da:63:f2:73:6f:3f:25:05:cd:f9:7f:af:72:
         18:f6:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:36:45 2025 by rpki-client