Route Origin Authorization
Location: repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/027129b443ff2e79a02116c10bf341d83fa9b666.roa (download)
Subject key identifier: 33:BC:09:D6:74:C4:20:A9:AE:C3:DF:67:E8:DA:F0:63:A3:27:64:08
Authority key identifier: 8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
asID: AS22541
Prefixes:
1: 190.14.100.0/24 (max: 24)
2: 190.14.101.0/24 (max: 24)
3: 190.14.102.0/24 (max: 24)
4: 190.14.103.0/24 (max: 24)
5: 190.14.104.0/24 (max: 24)
6: 190.14.105.0/24 (max: 24)
7: 190.14.106.0/24 (max: 24)
8: 190.14.107.0/24 (max: 24)
9: 190.14.108.0/24 (max: 24)
10: 190.14.109.0/24 (max: 24)
11: 190.14.110.0/24 (max: 24)
12: 190.14.111.0/24 (max: 24)
13: 190.14.112.0/24 (max: 24)
14: 190.14.113.0/24 (max: 24)
15: 190.14.114.0/24 (max: 24)
16: 190.14.115.0/24 (max: 24)
17: 190.14.116.0/24 (max: 24)
18: 190.14.117.0/24 (max: 24)
19: 190.14.118.0/24 (max: 24)
20: 190.14.119.0/24 (max: 24)
21: 190.14.120.0/24 (max: 24)
22: 190.14.121.0/24 (max: 24)
23: 190.14.122.0/24 (max: 24)
24: 190.14.123.0/24 (max: 24)
25: 190.14.124.0/24 (max: 24)
26: 190.14.125.0/24 (max: 24)
27: 190.14.126.0/24 (max: 24)
28: 190.14.127.0/24 (max: 24)
29: 190.14.64.0/18 (max: 18)
30: 190.14.64.0/18 (max: 24)
31: 190.14.64.0/24 (max: 24)
32: 190.14.65.0/24 (max: 24)
33: 190.14.66.0/24 (max: 24)
34: 190.14.67.0/24 (max: 24)
35: 190.14.68.0/24 (max: 24)
36: 190.14.69.0/24 (max: 24)
37: 190.14.70.0/24 (max: 24)
38: 190.14.71.0/24 (max: 24)
39: 190.14.72.0/24 (max: 24)
40: 190.14.73.0/24 (max: 24)
41: 190.14.74.0/24 (max: 24)
42: 190.14.75.0/24 (max: 24)
43: 190.14.76.0/24 (max: 24)
44: 190.14.77.0/24 (max: 24)
45: 190.14.78.0/24 (max: 24)
46: 190.14.79.0/24 (max: 24)
47: 190.14.80.0/24 (max: 24)
48: 190.14.81.0/24 (max: 24)
49: 190.14.82.0/24 (max: 24)
50: 190.14.83.0/24 (max: 24)
51: 190.14.84.0/24 (max: 24)
52: 190.14.85.0/24 (max: 24)
53: 190.14.86.0/24 (max: 24)
54: 190.14.87.0/24 (max: 24)
55: 190.14.88.0/24 (max: 24)
56: 190.14.89.0/24 (max: 24)
57: 190.14.90.0/24 (max: 24)
58: 190.14.91.0/24 (max: 24)
59: 190.14.92.0/24 (max: 24)
60: 190.14.93.0/24 (max: 24)
61: 190.14.94.0/24 (max: 24)
62: 190.14.95.0/24 (max: 24)
63: 190.14.96.0/24 (max: 24)
64: 190.14.97.0/24 (max: 24)
65: 190.14.98.0/24 (max: 24)
66: 190.14.99.0/24 (max: 24)
67: 200.75.160.0/20 (max: 20)
68: 200.75.160.0/20 (max: 24)
69: 200.75.160.0/24 (max: 24)
70: 200.75.161.0/24 (max: 24)
71: 200.75.162.0/24 (max: 24)
72: 200.75.163.0/24 (max: 24)
73: 200.75.164.0/24 (max: 24)
74: 200.75.165.0/24 (max: 24)
75: 200.75.166.0/24 (max: 24)
76: 200.75.167.0/24 (max: 24)
77: 200.75.168.0/24 (max: 24)
78: 200.75.169.0/24 (max: 24)
79: 200.75.170.0/24 (max: 24)
80: 200.75.171.0/24 (max: 24)
81: 200.75.172.0/24 (max: 24)
82: 200.75.173.0/24 (max: 24)
83: 200.75.174.0/24 (max: 24)
84: 200.75.175.0/24 (max: 24)
85: 2803:7680:1000::/36 (max: 36)
86: 2803:7680:2000::/35 (max: 35)
87: 2803:7680:2000::/36 (max: 36)
88: 2803:7680:3000::/36 (max: 36)
89: 2803:7680:4000::/34 (max: 34)
90: 2803:7680:4000::/35 (max: 35)
91: 2803:7680:4000::/36 (max: 36)
92: 2803:7680:5000::/36 (max: 36)
93: 2803:7680:6000::/35 (max: 35)
94: 2803:7680:6000::/36 (max: 36)
95: 2803:7680:7000::/36 (max: 36)
96: 2803:7680:8000::/34 (max: 34)
97: 2803:7680:8000::/35 (max: 35)
98: 2803:7680:8000::/36 (max: 36)
99: 2803:7680:9000::/36 (max: 36)
100: 2803:7680::/32 (max: 34)
101: 2803:7680::/34 (max: 34)
102: 2803:7680::/34 (max: 48)
103: 2803:7680::/35 (max: 35)
104: 2803:7680::/36 (max: 36)
105: 2803:7680::/48 (max: 48)
106: 2803:7680::/48 (max: 64)
107: 2803:7680::/64 (max: 64)
108: 2803:7680:a000::/35 (max: 35)
109: 2803:7680:a000::/36 (max: 36)
110: 2803:7680:b000::/36 (max: 36)
111: 2803:7680:c000::/34 (max: 34)
112: 2803:7680:c000::/35 (max: 35)
113: 2803:7680:c000::/36 (max: 36)
114: 2803:7680:d000::/36 (max: 36)
115: 2803:7680:e000::/35 (max: 35)
116: 2803:7680:e000::/36 (max: 36)
117: 2803:7680:f000::/36 (max: 36)
--
$ test-roa -p repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/027129b443ff2e79a02116c10bf341d83fa9b666.roa | openssl x509 -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896604 (0xdae5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63046ffca1186784d420944b2f52a6525f2a9b8d
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=027129b443ff2e79a02116c10bf341d83fa9b666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:8b:d1:1e:f0:93:96:5f:6f:26:89:1f:ee:
2c:ec:33:6a:a3:fa:73:d4:a4:b5:4d:bb:e7:4c:3c:
9a:0d:66:06:17:31:2b:13:81:8c:4e:0d:94:ad:ff:
ea:1b:88:d2:35:b0:00:45:79:aa:50:6c:c3:4c:1c:
8b:0e:52:63:96:7d:50:56:35:5c:e0:b7:fe:a8:ca:
ed:94:33:22:01:8e:7b:dd:fc:6f:c3:c5:11:22:af:
6d:8d:c2:c1:88:f6:fe:36:47:e4:d1:6f:33:59:f9:
3c:a5:11:a8:74:41:e9:0b:fe:1b:4e:fe:14:8e:f6:
a6:98:01:aa:8d:0f:df:6f:97:59:c7:8d:2f:91:52:
f5:12:37:4e:fd:40:74:ed:ce:a5:58:09:20:fd:68:
eb:b7:ac:10:a6:9b:33:4a:c7:d3:9c:b5:e3:2b:1a:
ee:9d:c9:eb:bb:57:c7:58:dd:a8:19:eb:34:43:b4:
70:74:d8:1f:bc:0f:df:44:f8:d8:91:9c:7a:5c:fe:
60:cf:4c:4e:49:39:dd:72:74:ca:75:10:17:32:8c:
6e:db:36:dd:7f:56:05:d6:bb:85:85:0e:bf:1c:5e:
32:ee:ee:ac:0c:5b:f4:3a:b7:4f:a2:3b:4d:09:81:
14:5f:bc:e1:a5:d2:2a:6e:dd:db:d8:5f:a4:30:35:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:09:D6:74:C4:20:A9:AE:C3:DF:67:E8:DA:F0:63:A3:27:64:08
X509v3 Authority Key Identifier:
keyid:8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/027129b443ff2e79a02116c10bf341d83fa9b666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/63046ffca1186784d420944b2f52a6525f2a9b8d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
0#0.....0......@....K.0
....0....(.v.
Signature Algorithm: sha256WithRSAEncryption
00:6a:8d:70:3f:33:0b:9b:48:c3:62:55:d1:c8:10:f2:fa:80:
c7:03:37:36:4b:f9:10:65:da:39:7d:91:14:45:81:37:b5:17:
57:a9:d8:89:0e:31:44:e5:01:65:23:cb:5e:f6:4a:d8:39:70:
f0:d5:e8:a9:f0:7a:b0:8f:1f:3c:30:5d:94:7d:06:cd:f7:fa:
70:fb:63:d5:42:7c:62:aa:e5:87:e2:da:d3:15:d7:13:de:d4:
74:29:68:b2:cb:0f:43:dd:a6:28:32:c1:4b:10:40:ae:5c:09:
0c:f5:bf:f2:e2:20:e2:3d:55:0c:57:7e:34:ee:47:86:c6:fe:
80:eb:a7:b6:51:ec:d7:96:35:57:7c:3d:6c:92:50:9b:02:37:
30:e2:6e:3f:5d:fb:be:48:72:fe:9f:0a:cd:c2:db:7f:e5:f4:
8d:45:e8:17:0d:01:56:d5:9b:dc:97:81:ed:fc:1c:1d:3f:71:
f1:c6:9b:03:11:80:6a:4f:95:d5:dc:6b:11:59:47:52:2d:9e:
e0:35:9f:2c:94:bd:28:24:2d:79:f5:91:0f:9e:5f:99:a7:bc:
ba:8d:0d:19:b1:43:95:1c:bf:36:56:26:8d:10:98:30:b9:51:
b6:d4:35:a3:bc:98:8e:2d:2c:c5:7b:18:4b:f0:5c:3e:60:99:
43:6a:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 20 01:44:45 2021 by LibreSSL & rpki-client.