Autonomous System Provider Authorization

$ rpki-client -vvf krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa
File:                     AS61575.asa (raw, json)
Hash identifier:          og2xRp+Ph4PNpwdrTz3ofTzEPBm6Gxya84tHpEXhxKE=
Subject key identifier:   9D:78:3A:21:27:F2:5A:76:3A:D2:26:87:40:F1:E7:95:AB:F1:5E:66
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       19662307742F72D28F8C4ED8700A2D640F02E8EE
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa
Signing time:             Tue 11 Aug 2026 17:53:53 +0000
ASPA not before:          Tue 11 Aug 2026 17:48:53 +0000
ASPA not after:           Tue 10 Aug 2027 17:53:53 +0000
Customer ASID:            61575
Providers:                AS: 47065
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 15:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:66:23:07:74:2f:72:d2:8f:8c:4e:d8:70:0a:2d:64:0f:02:e8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Aug 11 17:48:53 2026 GMT
            Not After : Aug 10 17:53:53 2027 GMT
        Subject: CN=9D783A2127F25A763AD2268740F1E795ABF15E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:2f:9c:ec:89:b0:5a:2f:0b:92:c8:9c:1d:
                    b5:e4:d6:4c:d4:92:60:db:47:12:94:6f:6b:65:ff:
                    84:ad:b9:05:4e:c5:9c:f0:f6:cc:19:d3:fc:2f:72:
                    7d:86:7f:e9:19:e4:b9:9c:b5:51:0d:d2:63:78:97:
                    b2:4e:c9:08:ce:af:d4:21:19:92:9d:fb:2f:48:b8:
                    bd:a1:fe:6a:13:74:df:d9:dc:a5:db:88:f0:e3:cb:
                    7c:09:15:59:74:5f:86:3a:4e:e5:c6:bc:22:e2:60:
                    ac:49:34:61:0a:c1:84:6d:aa:e1:15:98:6e:e9:4a:
                    f7:ba:a2:af:6b:d4:50:32:7b:c7:7e:6d:a4:f7:7f:
                    66:c4:9b:ac:18:27:c4:a7:fd:fc:94:9d:38:c2:95:
                    23:43:a9:34:50:24:2c:20:46:11:b6:38:de:b4:db:
                    04:64:3c:3f:ce:32:39:6a:80:28:54:20:f0:f0:42:
                    7f:a6:fe:1b:f8:07:10:c2:f0:30:cf:51:d9:02:90:
                    3b:00:2f:6b:16:af:e2:6e:d5:f0:e1:a5:b2:6d:ac:
                    1e:e4:e8:81:23:72:07:12:cc:2e:03:03:06:31:08:
                    26:ca:c9:5b:da:ee:9b:65:94:1a:3b:78:39:4a:f1:
                    41:15:57:93:e9:e8:eb:b0:7d:dc:44:82:f7:b0:70:
                    f9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:78:3A:21:27:F2:5A:76:3A:D2:26:87:40:F1:E7:95:AB:F1:5E:66
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61575

    Signature Algorithm: sha256WithRSAEncryption
         2e:3b:4a:bf:16:04:4f:7a:25:5d:12:e1:cc:06:1c:bb:6e:19:
         43:74:b3:52:34:e6:99:b0:37:9b:a2:6d:04:dc:c2:09:28:bb:
         29:ea:3a:3f:d0:f7:02:66:1c:cf:aa:41:d4:74:7c:1b:77:cf:
         a4:9f:82:0e:70:9b:ae:8d:2c:04:54:d2:32:1f:5d:68:ca:42:
         12:ee:3c:ec:e9:5c:dc:7b:75:eb:1b:64:4a:8f:2e:2b:ce:66:
         93:4a:60:3a:89:11:ee:31:b6:08:96:80:98:60:3b:1c:a5:9d:
         31:0c:95:7e:6f:7a:e4:bc:69:87:f5:c8:b7:9a:9f:70:90:5a:
         41:10:42:78:22:c9:b8:74:c0:0a:7b:f6:65:a1:3e:35:7b:72:
         3d:5e:e4:d4:cd:aa:a0:f1:95:eb:48:c4:06:ca:f2:2f:7b:ca:
         b3:7d:df:c3:48:12:42:b9:5e:6d:82:f9:50:d6:0e:1c:ad:83:
         0e:4f:d6:1c:56:22:d6:a8:65:a9:ad:fa:36:ae:21:db:68:dd:
         1f:67:2f:84:ac:aa:16:1a:ee:df:af:21:b4:0c:f3:5c:b2:47:
         20:a1:02:d2:54:ca:ee:e4:8c:c1:84:6d:91:03:47:73:43:e8:
         b4:36:fe:31:d4:67:f0:b8:00:aa:1a:e1:8c:0b:c2:4e:bf:6a:
         6d:89:53:8c
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUGWYjB3QvctKPjE7YcAotZA8C6O4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz
MkM3MUREMjAeFw0yNjA4MTExNzQ4NTNaFw0yNzA4MTAxNzUzNTNaMDMxMTAvBgNV
BAMTKDlENzgzQTIxMjdGMjVBNzYzQUQyMjY4NzQwRjFFNzk1QUJGMTVFNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJCi+c7ImwWi8LksicHbXk1kzU
kmDbRxKUb2tl/4StuQVOxZzw9swZ0/wvcn2Gf+kZ5LmctVEN0mN4l7JOyQjOr9Qh
GZKd+y9IuL2h/moTdN/Z3KXbiPDjy3wJFVl0X4Y6TuXGvCLiYKxJNGEKwYRtquEV
mG7pSve6oq9r1FAye8d+baT3f2bEm6wYJ8Sn/fyUnTjClSNDqTRQJCwgRhG2ON60
2wRkPD/OMjlqgChUIPDwQn+m/hv4BxDC8DDPUdkCkDsAL2sWr+Ju1fDhpbJtrB7k
6IEjcgcSzC4DAwYxCCbKyVva7ptllBo7eDlK8UEVV5Pp6OuwfdxEgvewcPnhAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUnXg6ISfyWnY60iaHQPHnlavxXmYwHwYDVR0j
BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v
dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE
RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp
bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv
Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjBU
BggrBgEFBQcBCwRIMEYwRAYIKwYBBQUHMAuGOHJzeW5jOi8va3JpbGwuZGFjcy51
dHdlbnRlLm5sL3JlcG8vdXR3ZW50ZS8xL0FTNjE1NzUuYXNhMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPCHMA0GCSqG
SIb3DQEBCwUAA4IBAQAuO0q/FgRPeiVdEuHMBhy7bhlDdLNSNOaZsDebom0E3MIJ
KLsp6jo/0PcCZhzPqkHUdHwbd8+kn4IOcJuujSwEVNIyH11oykIS7jzs6Vzce3Xr
G2RKjy4rzmaTSmA6iRHuMbYIloCYYDscpZ0xDJV+b3rkvGmH9ci3mp9wkFpBEEJ4
Ism4dMAKe/ZloT41e3I9XuTUzaqg8ZXrSMQGyvIve8qzfd/DSBJCuV5tgvlQ1g4c
rYMOT9YcViLWqGWprfo2riHbaN0fZy+ErKoWGu7fryG0DPNcskcgoQLSVMru5IzB
hG2RA0dzQ+i0Nv4x1GfwuACqGuGMC8JOv2ptiVOM
-----END CERTIFICATE-----
Generated at Thu Aug 13 06:49:35 2026 by rpki-client