Autonomous System Provider Authorization

$ rpki-client -vvvf krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa
File:                     AS61575.asa (raw, json)
Hash identifier:          ispwzwxXdb/zBk/I6ddVxIyoCpl3dLyqZzIn5uWOz9E=
Subject key identifier:   B7:13:B4:47:FB:70:08:97:06:27:18:4C:4B:74:D5:D6:FA:1D:BC:27
Certificate issuer:       /CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
Certificate serial:       18D3380B4972171D8A2549A631B2E8ACE343CF95
Authority key identifier: F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
Subject info access:      rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa
Signing time:             Tue 10 Nov 2026 13:10:16 +0000
ASPA not before:          Tue 10 Nov 2026 13:05:16 +0000
ASPA not after:           Tue 09 Nov 2027 13:10:16 +0000
Customer ASID:            61575
Providers:                AS: 61574
Validation:               OK
Signature path:           rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl
                          rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Nov 2026 16:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d3:38:0b:49:72:17:1d:8a:25:49:a6:31:b2:e8:ac:e3:43:cf:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3980A549A69CF361510BAE9C265FFA332C71DD2
        Validity
            Not Before: Nov 10 13:05:16 2026 GMT
            Not After : Nov  9 13:10:16 2027 GMT
        Subject: CN=B713B447FB7008970627184C4B74D5D6FA1DBC27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:f6:9b:b8:f4:7e:00:91:25:7c:af:be:5b:
                    14:02:71:b1:36:48:6f:ec:f6:75:ff:d7:53:de:1c:
                    c3:1a:eb:37:ec:a0:43:44:cb:dd:b4:e8:8f:58:7c:
                    1c:0d:b0:1b:c5:5c:fa:16:57:7c:41:db:79:89:a1:
                    b6:41:68:b4:c1:1d:f6:d6:ce:98:49:3b:89:8b:24:
                    50:4b:48:04:ca:c1:7a:9f:b4:07:5e:1e:0b:01:ff:
                    a9:69:07:22:6f:9c:4e:59:4f:f7:a2:bb:51:88:28:
                    36:94:d9:99:13:57:07:4f:e1:65:09:bb:7d:71:87:
                    27:b7:f6:ea:6b:09:4d:91:7c:9c:8a:15:66:5e:9d:
                    90:d4:c3:4d:b5:4c:f5:a8:3a:2a:c9:9d:fb:83:83:
                    0e:dc:be:3d:62:83:72:96:8f:2d:89:30:33:da:6b:
                    79:bd:6d:04:0e:eb:25:d7:f9:cf:b0:75:fa:98:b8:
                    77:eb:32:57:62:9a:9b:9d:e1:43:a0:b7:88:62:29:
                    b1:67:34:30:3d:03:4f:3e:ca:13:49:02:76:4d:f6:
                    bd:bb:ed:88:c1:ba:d0:5a:2c:74:6d:b4:a8:7a:ea:
                    f4:81:e9:b3:2b:38:fa:ec:43:22:f8:f1:e4:89:21:
                    d1:3d:5e:0d:ca:3c:d8:bd:31:3a:29:06:df:0b:ba:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:13:B4:47:FB:70:08:97:06:27:18:4C:4B:74:D5:D6:FA:1D:BC:27
            X509v3 Authority Key Identifier:
                keyid:F3:98:0A:54:9A:69:CF:36:15:10:BA:E9:C2:65:FF:A3:32:C7:1D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/F3980A549A69CF361510BAE9C265FFA332C71DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/F3980A549A69CF361510BAE9C265FFA332C71DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dacs.utwente.nl/repo/utwente/1/AS61575.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61575

    Signature Algorithm: sha256WithRSAEncryption
         79:c7:eb:ee:77:2e:dd:9d:8f:ca:35:cd:35:76:a8:db:b5:6d:
         e1:4e:dd:59:36:ef:8a:40:de:f5:53:63:52:2b:4c:2c:bb:f3:
         91:25:b2:65:b8:d4:80:9a:c4:cd:9e:7f:7e:33:27:95:11:ae:
         c5:7f:c5:fb:0b:76:88:b3:e0:20:0d:17:ec:f3:8c:fe:db:a2:
         4d:0c:38:75:ce:d3:39:4b:4b:5d:37:c8:f2:07:50:df:3b:35:
         b3:9a:cc:d7:8e:5a:7f:53:46:25:ef:b1:01:ad:be:8f:14:5c:
         87:f1:d8:f4:5e:77:62:a7:9b:d8:04:40:fa:bf:96:5d:6f:52:
         a1:fc:cd:15:85:17:88:99:93:eb:47:c7:c8:8f:0f:77:83:1c:
         28:5c:f2:f3:bb:88:4b:2d:b9:82:08:48:3c:56:c7:08:dd:3e:
         13:ea:f9:fb:fe:af:95:7e:0a:2b:6b:5b:b1:e9:16:e4:e5:f7:
         b8:a7:b0:f0:0d:4b:6e:b8:18:38:a6:53:16:74:77:b5:51:a1:
         dc:4b:e1:63:44:62:fe:84:3d:eb:14:7e:55:67:c0:05:30:c1:
         48:fc:c1:9c:8f:a0:9d:5f:53:8e:21:98:82:1f:24:a4:f7:2f:
         a2:1a:92:4e:c1:17:97:83:6b:ba:bf:4f:4a:8f:13:ed:00:36:
         45:4b:f2:83
-----BEGIN CERTIFICATE-----
MIIEyjCCA7KgAwIBAgIUGNM4C0lyFx2KJUmmMbLorONDz5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5ODBBNTQ5QTY5Q0YzNjE1MTBCQUU5QzI2NUZGQTMz
MkM3MUREMjAeFw0yNjExMTAxMzA1MTZaFw0yNzExMDkxMzEwMTZaMDMxMTAvBgNV
BAMTKEI3MTNCNDQ3RkI3MDA4OTcwNjI3MTg0QzRCNzRENUQ2RkExREJDMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcPabuPR+AJElfK++WxQCcbE2
SG/s9nX/11PeHMMa6zfsoENEy9206I9YfBwNsBvFXPoWV3xB23mJobZBaLTBHfbW
zphJO4mLJFBLSATKwXqftAdeHgsB/6lpByJvnE5ZT/eiu1GIKDaU2ZkTVwdP4WUJ
u31xhye39uprCU2RfJyKFWZenZDUw021TPWoOirJnfuDgw7cvj1ig3KWjy2JMDPa
a3m9bQQO6yXX+c+wdfqYuHfrMldimpud4UOgt4hiKbFnNDA9A08+yhNJAnZN9r27
7YjButBaLHRttKh66vSB6bMrOPrsQyL48eSJIdE9Xg3KPNi9MTopBt8LurwXAgMB
AAGjggHUMIIB0DAdBgNVHQ4EFgQUtxO0R/twCJcGJxhMS3TV1vodvCcwHwYDVR0j
BBgwFoAU85gKVJppzzYVELrpwmX/ozLHHdIwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8va3JpbGwuZGFjcy51dHdlbnRlLm5sL3JlcG8v
dXR3ZW50ZS8xL0YzOTgwQTU0OUE2OUNGMzYxNTEwQkFFOUMyNjVGRkEzMzJDNzFE
RDIuY3JsMIGFBggrBgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3Jp
bGwucGVlcmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQv
Mi9GMzk4MEE1NDlBNjlDRjM2MTUxMEJBRTlDMjY1RkZBMzMyQzcxREQyLmNlcjBU
BggrBgEFBQcBCwRIMEYwRAYIKwYBBQUHMAuGOHJzeW5jOi8va3JpbGwuZGFjcy51
dHdlbnRlLm5sL3JlcG8vdXR3ZW50ZS8xL0FTNjE1NzUuYXNhMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPCHMA0GCSqG
SIb3DQEBCwUAA4IBAQB5x+vudy7dnY/KNc01dqjbtW3hTt1ZNu+KQN71U2NSK0ws
u/ORJbJluNSAmsTNnn9+MyeVEa7Ff8X7C3aIs+AgDRfs84z+26JNDDh1ztM5S0td
N8jyB1DfOzWzmszXjlp/U0Yl77EBrb6PFFyH8dj0Xndip5vYBED6v5Zdb1Kh/M0V
hReImZPrR8fIjw93gxwoXPLzu4hLLbmCCEg8VscI3T4T6vn7/q+Vfgora1ux6Rbk
5fe4p7DwDUtuuBg4plMWdHe1UaHcS+FjRGL+hD3rFH5VZ8AFMMFI/MGcj6CdX1OO
IZiCHySk9y+iGpJOwReXg2u6v09KjxPtADZFS/KD
-----END CERTIFICATE-----
Generated at Wed Nov 11 08:21:51 2026 by rpki-client