Autonomous System Provider Authorization

$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa
File:                     AS61575.asa (raw, json)
Hash identifier:          /tSZEwpu59jBi37Fr9hbwo2pLBmjLHw+j+R3DUk47GI=
Subject key identifier:   26:72:AE:FC:20:2D:F3:01:16:A7:28:C9:8F:E8:AF:5D:28:D2:9D:E8
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       2AF4D091AAA02CEA0FEB9FDB772257F24ACB6CC8
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa
Signing time:             Sun 27 Sep 2026 12:35:28 +0000
ASPA not before:          Sun 27 Sep 2026 12:30:28 +0000
ASPA not after:           Sun 26 Sep 2027 12:35:28 +0000
Customer ASID:            61575
Providers:                AS: 61574
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Sep 2026 06:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f4:d0:91:aa:a0:2c:ea:0f:eb:9f:db:77:22:57:f2:4a:cb:6c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Sep 27 12:30:28 2026 GMT
            Not After : Sep 26 12:35:28 2027 GMT
        Subject: CN=2672AEFC202DF30116A728C98FE8AF5D28D29DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:d9:5a:d0:75:69:0b:b6:fa:c5:ba:d9:38:
                    2a:b4:32:72:c1:c9:a4:1d:77:b6:fa:49:a2:cc:b9:
                    e8:b8:a3:1c:3d:42:ba:34:2b:a6:5e:67:10:32:ac:
                    40:2c:14:46:e1:6f:a4:ff:c0:ce:76:4e:b1:82:d8:
                    e6:04:1d:6e:36:1e:fd:0f:7e:c3:34:30:b6:21:bb:
                    2a:be:3d:4b:d9:8b:7f:ca:18:16:68:9e:3f:11:a4:
                    06:3d:ed:28:c8:05:4e:0d:5f:f9:03:94:ad:cf:de:
                    67:14:b0:a2:c5:18:6b:e4:3a:15:5c:3e:8c:72:c2:
                    25:65:92:10:3f:27:a8:d2:c0:2e:16:91:5a:b4:2a:
                    42:48:5d:9c:91:59:a5:28:2f:5f:85:1f:6f:ce:ac:
                    4e:cd:48:51:60:86:80:75:5d:1e:93:75:a7:d1:55:
                    13:3b:33:b5:ad:48:11:00:7b:51:8a:84:8c:fe:6a:
                    dd:c6:4c:a5:46:21:ca:2b:79:f6:c7:a1:06:7c:b1:
                    fd:44:24:4f:62:cf:27:ea:25:b0:d6:8e:12:55:f1:
                    16:d7:fe:d4:27:1e:cf:e6:30:82:0a:6c:b7:36:f0:
                    1b:42:a6:65:92:e6:ec:b9:06:08:ec:83:8c:7c:e0:
                    47:d3:0c:78:7e:82:83:1a:52:12:74:5d:51:de:da:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:AE:FC:20:2D:F3:01:16:A7:28:C9:8F:E8:AF:5D:28:D2:9D:E8
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61575

    Signature Algorithm: sha256WithRSAEncryption
         78:ee:d4:d1:48:f9:ad:11:57:2f:e4:80:51:8f:fd:9e:db:65:
         f8:26:17:19:c4:0c:1b:a0:a9:b9:0b:0b:c6:1d:40:08:55:c2:
         89:4e:b0:f9:ff:0b:fa:03:f3:77:15:97:f6:54:36:36:c1:77:
         3b:b7:2a:2e:7e:6f:dd:95:fe:08:05:24:0c:81:cf:24:34:e3:
         4c:db:32:3e:d0:85:98:a3:0e:a9:03:f8:27:89:a1:39:b6:23:
         dc:6b:14:98:0f:de:3d:3d:2b:e0:94:20:03:fc:ab:e0:09:7a:
         e9:03:59:df:d6:b2:36:c5:89:c2:cf:a5:cc:35:a0:61:bf:37:
         2e:b6:31:87:5c:f4:90:9c:ef:a8:4f:c8:b5:96:eb:32:cf:a3:
         19:67:18:3e:66:5c:3f:65:ad:32:d5:3e:c4:a0:cd:5a:57:20:
         c0:d2:95:63:7e:af:68:b6:0f:eb:2f:2d:45:be:d4:4b:fc:f8:
         87:ac:00:35:f0:da:21:12:67:72:f1:9c:36:25:ae:4d:43:78:
         2e:52:c8:c6:2f:1f:fd:79:2d:f3:31:64:72:8f:bb:63:74:d6:
         fd:99:4b:f5:a9:30:58:da:d9:bf:29:c2:88:59:e9:2e:2c:f2:
         f0:ba:30:75:6d:78:20:9a:51:75:ad:16:7e:87:fd:7a:37:25:
         3c:7d:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:51:04 2026 by rpki-client