Autonomous System Provider Authorization

$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa
File:                     AS61575.asa (raw, json)
Hash identifier:          ucXFW+z33HUmubhNjAEhjqibazgooFzyNRHDsdEf7vs=
Subject key identifier:   D3:EA:E9:C3:7E:D1:FF:91:DD:D7:1C:7D:2F:B1:92:43:1B:46:9B:E6
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       183493FD6EEF04E3A32BE976E8B548948BCD3DEB
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa
Signing time:             Wed 11 Nov 2026 13:07:12 +0000
ASPA not before:          Wed 11 Nov 2026 13:02:12 +0000
ASPA not after:           Wed 10 Nov 2027 13:07:12 +0000
Customer ASID:            61575
Providers:                AS: 61574
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Nov 2026 16:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:34:93:fd:6e:ef:04:e3:a3:2b:e9:76:e8:b5:48:94:8b:cd:3d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Nov 11 13:02:12 2026 GMT
            Not After : Nov 10 13:07:12 2027 GMT
        Subject: CN=D3EAE9C37ED1FF91DDD71C7D2FB192431B469BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:c0:a4:99:90:37:d6:28:8f:4a:30:64:56:
                    47:d8:f1:2a:b1:58:cb:1f:73:8e:6f:54:98:b8:ba:
                    a5:a0:59:ce:ef:02:1e:87:5b:20:90:37:bd:30:81:
                    16:2a:c4:89:13:1d:38:09:2a:d4:a9:dc:5b:c0:ed:
                    aa:3b:4f:25:11:c3:38:ca:49:01:b6:73:a1:4a:4c:
                    93:7a:39:58:41:27:83:8b:45:f0:a5:49:5d:3d:13:
                    5e:2f:06:4d:58:15:32:15:1f:52:0c:3c:ce:d4:bc:
                    f7:e0:be:82:ae:71:34:2c:73:d6:7d:72:dd:72:0f:
                    73:c1:a0:ab:f2:48:ac:2d:29:30:08:60:b0:01:3f:
                    93:b8:d4:86:42:1b:65:a8:d5:de:e0:23:ab:12:f2:
                    c7:d2:3a:47:49:d1:89:ba:f4:96:a5:12:31:64:51:
                    8a:37:42:73:cf:7b:28:17:fe:91:19:05:70:1d:4d:
                    55:fb:30:9a:88:c5:b8:aa:29:3c:58:d6:8b:fd:6a:
                    8f:1b:1a:f2:cf:4e:98:58:c7:6b:7d:97:c1:ee:26:
                    29:b9:6d:7f:32:f8:a9:65:3b:94:f3:7a:02:5b:dc:
                    f0:f2:8a:dd:1c:5a:1c:23:a7:58:a4:ae:50:72:85:
                    59:88:54:93:02:03:4c:e8:ee:26:00:e7:88:29:b1:
                    ab:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EA:E9:C3:7E:D1:FF:91:DD:D7:1C:7D:2F:B1:92:43:1B:46:9B:E6
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61575

    Signature Algorithm: sha256WithRSAEncryption
         17:25:6e:e9:c5:ef:0a:6d:f1:c0:cd:64:77:a2:db:68:1f:9b:
         7e:c3:3d:fd:97:fb:6e:13:d0:33:97:99:d1:d0:51:2d:2e:cd:
         e3:c3:22:62:53:f2:f5:86:43:14:1f:69:aa:18:0f:9d:bf:c9:
         e5:4d:1d:d3:2d:8a:81:bb:43:d6:2c:9e:8a:d5:15:6a:27:c4:
         f7:c2:77:d2:c3:58:e9:b0:07:70:be:91:7a:48:7d:4c:b6:50:
         36:9a:19:63:d8:f0:d1:a0:28:6b:18:2f:17:7e:bb:ec:69:a3:
         e3:6b:44:d4:d8:95:1a:fd:4c:01:3e:6b:b1:7e:2c:13:41:18:
         c4:26:6c:8c:30:a4:21:5b:c9:6a:b3:f3:ec:a9:15:e3:7c:03:
         3e:55:23:41:2d:df:f7:2f:bd:54:b6:bf:1c:36:fc:d3:90:dd:
         5f:a8:05:22:52:ca:1e:95:8d:06:62:39:78:34:aa:ee:07:58:
         5f:75:17:bc:08:4c:e5:2e:01:4c:b4:fb:a1:52:f1:34:38:df:
         52:36:3d:a9:c5:e4:37:54:a3:89:dd:90:6f:9f:f9:d7:2c:1f:
         0d:1c:86:65:53:76:f0:38:44:a3:9a:34:6b:c4:90:fd:77:ac:
         00:e8:68:91:01:d9:cc:b3:32:63:be:35:2a:4b:e3:f2:78:e4:
         9a:93:d0:50
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUGDST/W7vBOOjK+l26LVIlIvNPeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz
MkM3MUREMjAeFw0yNjExMTExMzAyMTJaFw0yNzExMTAxMzA3MTJaMDMxMTAvBgNV
BAMTKEQzRUFFOUMzN0VEMUZGOTFEREQ3MUM3RDJGQjE5MjQzMUI0NjlCRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT48CkmZA31iiPSjBkVkfY8Sqx
WMsfc45vVJi4uqWgWc7vAh6HWyCQN70wgRYqxIkTHTgJKtSp3FvA7ao7TyURwzjK
SQG2c6FKTJN6OVhBJ4OLRfClSV09E14vBk1YFTIVH1IMPM7UvPfgvoKucTQsc9Z9
ct1yD3PBoKvySKwtKTAIYLABP5O41IZCG2Wo1d7gI6sS8sfSOkdJ0Ym69JalEjFk
UYo3QnPPeygX/pEZBXAdTVX7MJqIxbiqKTxY1ov9ao8bGvLPTphYx2t9l8HuJim5
bX8y+KllO5TzegJb3PDyit0cWhwjp1ikrlByhVmIVJMCA0zo7iYA54gpsasBAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQU0+rpw37R/5Hd1xx9L7GSQxtGm+YwHwYDVR0j
BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v
dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE
RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp
bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv
Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjBU
BggrBgEFBQcBCwRIMEYwRAYIKwYBBQUHMAuGOHJzeW5jOi8va3JpbGwuZGFjcy51
dHdlbnRlLm5sL3JlcG8vdXR3ZW50ZS8xL0FTNjE1NzUuYXNhMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPCHMA0GCSqG
SIb3DQEBCwUAA4IBAQAXJW7pxe8KbfHAzWR3ottoH5t+wz39l/tuE9Azl5nR0FEt
Ls3jwyJiU/L1hkMUH2mqGA+dv8nlTR3TLYqBu0PWLJ6K1RVqJ8T3wnfSw1jpsAdw
vpF6SH1MtlA2mhlj2PDRoChrGC8XfrvsaaPja0TU2JUa/UwBPmuxfiwTQRjEJmyM
MKQhW8lqs/PsqRXjfAM+VSNBLd/3L71Utr8cNvzTkN1fqAUiUsoelY0GYjl4NKru
B1hfdRe8CEzlLgFMtPuhUvE0ON9SNj2pxeQ3VKOJ3ZBvn/nXLB8NHIZlU3bwOESj
mjRrxJD9d6wA6GiRAdnMszJjvjUqS+PyeOSak9BQ
-----END CERTIFICATE-----
Generated at Thu Nov 12 09:52:13 2026 by rpki-client