Autonomous System Provider Authorization

$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/AS61576.asa
File:                     AS61576.asa (raw, json)
Hash identifier:          3jDRJ2Z8HmUlAVPQAgoWSaET0V1FHyY1gGYL194gFcw=
Subject key identifier:   AE:F8:00:B8:F7:44:A0:55:6F:9A:2E:7E:B1:B5:8F:24:1A:FB:45:8F
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       6EA536EF2128D5CB909B0EB2E02B21281BBC67B4
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61576.asa
Signing time:             Wed 04 Nov 2026 13:08:46 +0000
ASPA not before:          Wed 04 Nov 2026 13:03:46 +0000
ASPA not after:           Wed 03 Nov 2027 13:08:46 +0000
Customer ASID:            61576
Providers:                AS: 61575
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 12:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a5:36:ef:21:28:d5:cb:90:9b:0e:b2:e0:2b:21:28:1b:bc:67:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Nov  4 13:03:46 2026 GMT
            Not After : Nov  3 13:08:46 2027 GMT
        Subject: CN=AEF800B8F744A0556F9A2E7EB1B58F241AFB458F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:f2:a1:12:7f:e3:d5:61:d2:8e:a9:52:61:
                    66:8c:7b:e6:c3:14:62:70:5e:f1:98:d3:bd:da:78:
                    b1:4c:0c:c2:bd:70:5e:c4:5d:22:89:a6:59:46:f8:
                    9f:61:fc:d5:c5:ac:c1:77:df:b1:05:ef:f6:cd:6b:
                    df:2c:e2:f3:ac:8f:e1:f7:8d:32:cd:41:72:1f:20:
                    c3:95:80:d2:6f:7e:5a:79:ca:0a:4c:63:0d:e3:08:
                    bc:c0:95:21:4a:eb:dc:57:6f:2b:36:2b:ec:fd:3d:
                    79:71:8f:f7:6a:c2:ae:6f:81:c6:7b:f6:d1:63:b7:
                    31:c5:7f:e6:a1:d5:29:eb:63:de:76:68:fc:ad:21:
                    9c:51:e9:9a:d3:d2:8c:bb:da:33:e6:e1:f8:2c:15:
                    55:52:84:34:70:43:86:24:ae:5e:f0:9f:b0:3b:48:
                    38:d3:1f:3b:12:e1:dc:b0:9f:e0:5b:bf:21:a2:c2:
                    90:2f:fb:5d:b2:44:83:3d:d7:da:61:94:88:6c:21:
                    b0:13:d1:dc:74:4d:01:63:77:60:14:ad:5a:fc:f9:
                    cf:1b:74:3c:bf:86:93:1e:db:2f:8b:4c:1c:a9:8a:
                    59:98:2f:a2:69:a1:de:87:ff:18:5e:8a:17:4f:e7:
                    83:66:e2:f8:3d:fb:e5:81:42:fc:97:b8:f6:59:49:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F8:00:B8:F7:44:A0:55:6F:9A:2E:7E:B1:B5:8F:24:1A:FB:45:8F
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61576.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61576

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:13:a3:8c:cb:4c:89:bd:c4:2f:93:93:3e:68:ad:22:7f:
         18:5f:0b:0a:8d:a1:54:97:f6:60:9e:e4:74:b2:fa:3e:3b:87:
         44:4b:60:14:db:16:05:0a:e5:94:b0:08:13:ce:53:97:79:b8:
         85:27:b8:5b:48:52:d6:cf:6c:41:f7:23:38:f3:78:0b:22:38:
         af:e9:cb:e1:69:f0:2b:e2:61:7f:9c:3e:97:4f:c2:d5:b1:a4:
         a2:fb:3f:4b:81:d7:78:cb:4a:46:c0:9e:9e:9c:fd:ea:6d:65:
         5a:70:dd:0f:6b:38:e8:bf:b9:84:f4:6d:73:08:ec:be:03:90:
         60:5b:2a:60:f0:87:94:04:48:21:97:d7:e9:27:d1:a7:46:04:
         6c:33:3f:9b:d5:7f:59:23:90:86:60:d0:ba:5c:34:1f:91:7e:
         e7:ee:28:e1:43:08:9e:6a:df:60:8e:95:8a:1b:94:35:0f:c6:
         e8:5b:2c:cb:06:c5:bd:ab:e1:12:20:00:77:3a:9a:ab:8b:35:
         1f:3b:fe:ed:dc:ac:01:c7:44:46:8a:89:dc:3e:57:71:dc:15:
         02:b8:73:b3:9f:64:d3:de:7d:0e:0e:66:5e:ce:59:23:9d:f6:
         fc:94:db:d7:17:e7:c3:91:4c:c3:92:d6:43:26:87:e4:6d:c1:
         da:56:0a:65
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUbqU27yEo1cuQmw6y4CshKBu8Z7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz
MkM3MUREMjAeFw0yNjExMDQxMzAzNDZaFw0yNzExMDMxMzA4NDZaMDMxMTAvBgNV
BAMTKEFFRjgwMEI4Rjc0NEEwNTU2RjlBMkU3RUIxQjU4RjI0MUFGQjQ1OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqfPKhEn/j1WHSjqlSYWaMe+bD
FGJwXvGY073aeLFMDMK9cF7EXSKJpllG+J9h/NXFrMF337EF7/bNa98s4vOsj+H3
jTLNQXIfIMOVgNJvflp5ygpMYw3jCLzAlSFK69xXbys2K+z9PXlxj/dqwq5vgcZ7
9tFjtzHFf+ah1SnrY952aPytIZxR6ZrT0oy72jPm4fgsFVVShDRwQ4Ykrl7wn7A7
SDjTHzsS4dywn+BbvyGiwpAv+12yRIM919phlIhsIbAT0dx0TQFjd2AUrVr8+c8b
dDy/hpMe2y+LTBypilmYL6Jpod6H/xheihdP54Nm4vg9++WBQvyXuPZZSXqTAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUrvgAuPdEoFVvmi5+sbWPJBr7RY8wHwYDVR0j
BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v
dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE
RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp
bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv
Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjBU
BggrBgEFBQcBCwRIMEYwRAYIKwYBBQUHMAuGOHJzeW5jOi8va3JpbGwuZGFjcy51
dHdlbnRlLm5sL3JlcG8vdXR3ZW50ZS8xL0FTNjE1NzYuYXNhMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPCIMA0GCSqG
SIb3DQEBCwUAA4IBAQAEXROjjMtMib3EL5OTPmitIn8YXwsKjaFUl/ZgnuR0svo+
O4dES2AU2xYFCuWUsAgTzlOXebiFJ7hbSFLWz2xB9yM483gLIjiv6cvhafAr4mF/
nD6XT8LVsaSi+z9Lgdd4y0pGwJ6enP3qbWVacN0Pazjov7mE9G1zCOy+A5BgWypg
8IeUBEghl9fpJ9GnRgRsMz+b1X9ZI5CGYNC6XDQfkX7n7ijhQwieat9gjpWKG5Q1
D8boWyzLBsW9q+ESIAB3OpqrizUfO/7t3KwBx0RGioncPldx3BUCuHOzn2TT3n0O
DmZezlkjnfb8lNvXF+fDkUzDktZDJofkbcHaVgpl
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:18:39 2026 by rpki-client