Autonomous System Provider Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/AS47272.asa
File:                     AS47272.asa (raw, json)
Hash identifier:          8q6ewiUgHQOhycYtZkB3lrfButf+intR24eSRk8XKss=
Subject key identifier:   6A:2C:1C:BC:CA:A3:17:F4:45:55:83:17:1F:7A:E1:43:1B:4E:27:D6
Certificate issuer:       /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial:       060B7C6228F3FB6404C311E8067A98BC2D027789
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/0/AS47272.asa
Signing time:             Fri 19 Sep 2025 18:35:48 +0000
ASPA not before:          Fri 19 Sep 2025 18:30:48 +0000
ASPA not after:           Fri 18 Sep 2026 18:35:48 +0000
Customer ASID:            47272
Providers:                AS: 174
                          AS: 835
                          AS: 924
                          AS: 1299
                          AS: 3257
                          AS: 6830
                          AS: 6939
                          AS: 20473
                          AS: 34927
                          AS: 35133
                          AS: 41051
                          AS: 48070
                          AS: 50917
                          AS: 52025
                          AS: 61049
                          AS: 61138
                          AS: 64289
                          AS: 212514
                          AS: 215638
                          AS: 400587
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
                          rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Oct 2025 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:0b:7c:62:28:f3:fb:64:04:c3:11:e8:06:7a:98:bc:2d:02:77:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
        Validity
            Not Before: Sep 19 18:30:48 2025 GMT
            Not After : Sep 18 18:35:48 2026 GMT
        Subject: CN=6A2C1CBCCAA317F4455583171F7AE1431B4E27D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:10:1d:3f:8d:6c:7b:13:61:fa:0c:ce:9f:
                    17:2a:f3:b4:50:c2:a8:43:e9:18:44:d8:75:94:bb:
                    50:0d:41:ce:33:8a:7d:c1:ae:6a:65:36:95:e7:f1:
                    ea:6a:60:72:cc:fc:06:fd:61:83:4a:6c:ec:e2:d8:
                    05:45:06:42:88:8d:87:ea:df:71:20:40:f0:fa:69:
                    b0:1f:4b:18:bb:89:94:28:da:9a:e5:a9:3d:ff:5c:
                    b4:fa:84:fe:b1:54:d4:ed:39:47:51:ee:61:1a:b7:
                    e2:11:40:f6:eb:ed:fd:95:9c:54:8b:86:81:96:e1:
                    82:d5:4a:ed:6c:a5:14:68:b9:58:74:8a:8d:8c:75:
                    64:46:40:63:ff:c1:75:d3:25:de:10:23:17:89:cb:
                    89:ea:75:b3:5b:0b:de:91:6c:ec:12:b5:37:57:7b:
                    a8:e4:b6:c7:55:72:20:a8:e5:8d:4f:f4:0e:7e:14:
                    97:91:9c:60:ce:54:4b:e3:a2:70:f7:e1:a7:53:bf:
                    8b:1d:ce:e8:6e:7c:7c:83:76:f0:d5:28:1f:05:69:
                    cd:24:d3:77:84:14:72:3d:80:49:41:ae:d6:c4:0f:
                    d4:4b:fa:e3:00:ef:ed:9a:db:41:27:00:dd:e9:b2:
                    92:4b:a4:47:1a:71:04:05:5e:eb:b0:8e:be:16:70:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:1C:BC:CA:A3:17:F4:45:55:83:17:1F:7A:E1:43:1B:4E:27:D6
            X509v3 Authority Key Identifier:
                keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/AS47272.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  47272

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:21:96:e1:d8:13:78:e9:2c:d7:60:48:72:1f:63:0c:9b:
         f9:31:78:f8:85:d3:f9:85:43:55:4a:d1:86:9d:43:d7:4b:74:
         59:c4:95:c1:a2:f6:0d:f1:5c:72:d9:c5:62:0e:73:0a:71:67:
         dc:b2:b6:41:1e:42:64:62:cd:2c:d1:96:11:3d:07:26:2a:e9:
         cf:38:80:3e:01:0f:ac:e7:8e:9b:be:d9:83:93:01:c8:88:73:
         98:0c:59:3d:51:aa:12:2d:ca:16:7f:4e:fa:2a:90:fa:ac:bc:
         21:93:56:00:8d:b8:8d:05:5e:6a:54:1b:cf:b9:e9:7b:83:74:
         49:f3:1e:f9:05:01:90:e6:56:82:42:22:df:96:ed:39:38:d0:
         78:1c:e9:87:7a:eb:3e:fb:75:91:14:16:79:18:7f:88:bb:89:
         ed:a9:3c:ed:23:e2:d5:c3:09:47:b0:57:3f:d3:4e:18:48:70:
         22:c0:5d:cf:b0:5f:94:cf:74:94:39:a6:25:5e:8e:01:79:34:
         64:21:e8:d3:f8:d1:ed:a3:83:97:7a:fc:46:13:b6:69:61:c3:
         3f:b0:2f:dd:fb:c6:60:d3:0c:b5:40:8e:80:7c:91:99:b1:e2:
         9a:01:4d:8a:1b:82:da:d0:4a:2e:4c:4c:c6:6b:44:e4:68:c1:
         09:e9:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 00:00:59 2025 by rpki-client