Autonomous System Provider Authorization

$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa
File:                     AS61575.asa (raw, json)
Hash identifier:          aOHnhS0wcEjjf8PVOS/716LYQ8EPmpmLvzSxU7Ptco8=
Subject key identifier:   E5:C5:5B:4C:99:D2:6F:A8:BB:B7:45:1A:16:66:17:8C:9F:00:70:AE
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       3E10BE95740BBE95FB84D6815635F95FF51B8F09
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa
Signing time:             Wed 04 Nov 2026 13:08:46 +0000
ASPA not before:          Wed 04 Nov 2026 13:03:46 +0000
ASPA not after:           Wed 03 Nov 2027 13:08:46 +0000
Customer ASID:            61575
Providers:                AS: 61574
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 12:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:10:be:95:74:0b:be:95:fb:84:d6:81:56:35:f9:5f:f5:1b:8f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Nov  4 13:03:46 2026 GMT
            Not After : Nov  3 13:08:46 2027 GMT
        Subject: CN=E5C55B4C99D26FA8BBB7451A1666178C9F0070AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d6:d0:d4:3f:23:be:cf:51:f1:d4:02:b1:64:
                    2f:e4:fe:ae:a0:d6:7f:32:2c:18:50:96:c5:82:6b:
                    ec:f6:9f:a2:e8:94:4d:08:49:26:62:b5:19:eb:11:
                    30:db:65:91:4a:9a:83:f6:1e:f4:c2:dd:ab:1c:32:
                    d0:28:19:5a:d9:65:10:98:e8:81:01:fc:db:f7:c7:
                    ea:3d:c7:4c:f0:02:26:e6:fd:67:16:dd:7a:8a:2c:
                    b3:a3:9f:34:41:f6:99:98:a0:77:c9:bf:a2:c9:ee:
                    99:76:1c:ba:62:7a:23:d5:6c:ce:57:38:a8:c5:30:
                    a0:c3:df:89:50:14:3b:58:a3:55:d6:0b:c6:30:ce:
                    5d:86:56:88:04:09:e4:4d:99:26:c3:f5:c0:64:d7:
                    b4:ef:83:c7:69:42:db:89:f5:cd:f9:88:73:0a:55:
                    1c:e2:c4:24:3a:8b:b5:eb:6e:4b:34:c2:8a:20:1b:
                    3c:c0:b5:05:2c:5f:06:2a:f5:ee:e5:11:54:95:76:
                    1e:84:77:6b:04:55:3b:e9:22:69:66:16:e7:26:c8:
                    a8:4e:62:cc:63:77:78:70:83:67:19:81:0e:0c:95:
                    a6:dd:80:88:03:03:56:f0:59:5a:b6:91:c8:6e:3d:
                    f4:94:bd:a6:05:32:d2:cc:00:75:70:0d:4f:c2:f0:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C5:5B:4C:99:D2:6F:A8:BB:B7:45:1A:16:66:17:8C:9F:00:70:AE
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61575

    Signature Algorithm: sha256WithRSAEncryption
         31:9b:84:86:4a:e9:0f:e4:c6:6e:ef:0e:0d:9f:e3:2a:30:ea:
         17:d4:a8:3b:40:9e:07:54:f1:b1:7e:4f:f7:9c:50:c9:45:16:
         a6:fa:dd:d8:99:10:45:28:50:64:a1:86:a0:d1:56:24:2c:a1:
         df:48:eb:31:f8:4e:07:88:74:b0:ed:7f:74:f0:50:a0:b3:99:
         d5:d2:e0:31:81:85:0b:63:cc:40:bf:d3:7c:bb:44:d4:3f:cf:
         39:22:26:8b:29:d2:70:a8:df:cc:e7:48:a0:47:26:ea:df:67:
         9b:22:4b:7d:32:56:fd:20:e4:31:da:c9:9c:15:66:12:db:51:
         f2:44:4e:71:69:b8:80:e7:0c:e4:85:0e:89:0a:d0:43:34:60:
         72:28:80:53:be:4d:5d:3b:d9:81:bd:70:72:c3:82:d3:2f:c8:
         09:a6:aa:75:f6:75:41:1f:cb:89:f1:60:93:7b:8d:3a:28:15:
         81:8a:ad:a8:18:d0:86:bc:75:22:5f:88:c8:b1:7d:4e:7a:8c:
         99:cc:9c:46:09:83:5d:29:42:da:a2:2e:0d:b1:a9:0a:31:2e:
         c7:51:04:5c:6f:f7:71:0c:8e:72:23:b3:15:28:df:c4:95:fc:
         df:46:fa:51:01:ef:2c:dd:24:a0:63:d3:84:54:67:57:b4:a5:
         7e:0f:32:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:18:26 2026 by rpki-client