Autonomous System Provider Authorization

$ rpki-client -vvf krill.byhill.de/repo/byhill-ca/0/AS215110.asa
File:                     AS215110.asa (raw, json)
Hash identifier:          Hc9JFrBKfI0crp6laqSMj4BCAqSdUXL5ADwGb2UQ0SU=
Subject key identifier:   82:7E:CB:E8:E6:08:0B:44:F2:F3:95:48:8F:5E:17:62:B1:10:51:87
Certificate issuer:       /CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
Certificate serial:       63C0F518BEAB2240533A4733BC2AF5D75FF6C240
Authority key identifier: F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
Subject info access:      rsync://krill.byhill.de/repo/byhill-ca/0/AS215110.asa
Signing time:             Sat 02 May 2026 19:55:55 +0000
ASPA not before:          Sat 02 May 2026 19:50:55 +0000
ASPA not after:           Sat 01 May 2027 19:55:55 +0000
Customer ASID:            215110
Providers:                AS: 11967
                          AS: 34927
                          AS: 201541
                          AS: 202358
                          AS: 204464
                          AS: 205941
                          AS: 207252
                          AS: 209533
                          AS: 212895
                          AS: 213449
                          AS: 214915
Validation:               OK
Signature path:           rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl
                          rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 08:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c0:f5:18:be:ab:22:40:53:3a:47:33:bc:2a:f5:d7:5f:f6:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2adbcd3e44c2b9cf63c25f6594f643284a5980e
        Validity
            Not Before: May  2 19:50:55 2026 GMT
            Not After : May  1 19:55:55 2027 GMT
        Subject: CN=827ECBE8E6080B44F2F395488F5E1762B1105187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:e5:68:ba:86:6c:e0:3d:d9:4e:25:b0:be:
                    79:db:ff:f4:1f:ea:4e:05:f4:c7:6d:11:7a:48:5c:
                    36:d5:83:1f:07:f5:d6:4e:36:3e:29:5f:11:8b:2e:
                    8e:ea:ad:ba:55:e6:d3:5b:09:2c:12:79:3b:88:40:
                    10:97:51:2c:cf:72:3b:9b:59:b7:ff:3d:2f:81:c3:
                    2f:f1:77:cf:e0:25:34:6f:6e:ec:07:0a:33:7a:9f:
                    d5:38:30:e3:5f:0f:a1:a0:a9:68:f3:0d:c1:4c:c5:
                    ec:23:9d:1c:73:2c:3c:b2:21:0e:32:00:72:b5:1f:
                    75:6d:89:ae:90:54:80:6b:11:78:03:23:47:4e:ff:
                    86:94:41:df:76:94:31:ff:28:34:bf:b3:ca:f2:54:
                    ed:70:bd:4c:a5:0c:d1:4a:77:40:25:76:24:59:df:
                    0a:04:c9:bb:40:ef:dc:31:2b:3a:ae:94:6e:34:51:
                    71:7b:19:54:fd:83:5c:2c:86:93:8e:7a:42:45:91:
                    ba:39:49:e7:02:e6:7b:ff:92:81:45:96:37:fc:43:
                    7a:72:f4:86:4e:15:33:48:48:75:4f:7d:29:1c:af:
                    4a:62:39:8b:fb:51:1f:9f:f2:11:73:6b:b3:e4:3a:
                    2f:da:3b:6c:8f:11:dd:40:d8:89:d4:7c:fc:63:9f:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7E:CB:E8:E6:08:0B:44:F2:F3:95:48:8F:5E:17:62:B1:10:51:87
            X509v3 Authority Key Identifier:
                keyid:F2:AD:BC:D3:E4:4C:2B:9C:F6:3C:25:F6:59:4F:64:32:84:A5:98:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.byhill.de/repo/byhill-ca/0/F2ADBCD3E44C2B9CF63C25F6594F643284A5980E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q280-RMK5z2PCX2WU9kMoSlmA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/0/AS215110.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215110

    Signature Algorithm: sha256WithRSAEncryption
         34:cb:52:4f:f4:b9:c5:4a:2f:f2:82:98:a8:a7:80:cb:8b:0a:
         2d:61:df:00:f5:17:cd:94:8d:59:26:f6:61:53:4a:69:09:67:
         32:eb:14:56:c2:0a:d0:5b:57:e8:bc:56:a8:da:1f:52:14:f7:
         7a:66:c8:b6:7f:8c:03:2b:b5:55:81:24:25:5c:09:63:e6:c6:
         7b:dd:ea:fa:58:b1:0b:a1:3c:c3:00:44:dc:bb:3a:fc:28:ac:
         ba:c8:0a:b9:b7:13:24:f3:86:f0:47:ef:90:f6:c5:ba:8c:3a:
         66:0b:20:4e:c3:de:ac:7e:ed:68:db:56:16:42:ac:96:f1:aa:
         c7:02:f4:d9:c7:88:89:5c:d0:d7:36:72:27:29:6a:66:79:23:
         b0:08:75:28:77:9b:79:b5:7a:98:10:02:b9:56:c6:a4:a4:12:
         19:b8:d4:ec:bf:09:22:f9:11:55:f7:d9:62:d7:78:a1:79:75:
         90:a1:4a:c6:17:43:01:ee:1e:fb:5e:93:17:56:9f:e1:74:97:
         26:23:86:41:26:5e:24:e9:e4:ef:6e:4e:da:7b:4d:a2:42:98:
         2d:cd:ad:de:c3:b6:1f:0c:bc:e0:9b:f4:bb:44:6b:a3:05:b1:
         ef:8b:c0:e9:ce:78:f0:cd:f5:71:fe:dc:5a:ec:ed:89:21:86:
         5d:d7:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:59 2026 by rpki-client