Route Origin Authorization
Location: repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/e5bc304a4f959d02f64f21c56b31d9ba1171f01a.roa (download)
Subject key identifier: 1C:52:C9:8A:37:92:77:54:7E:DB:BD:15:2F:E6:0F:B8:94:54:8B:1F
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
asID: AS7438
Prefixes:
1: 200.36.161.0/24 (max: 24)
2: 200.36.162.0/24 (max: 24)
3: 200.36.163.0/24 (max: 24)
4: 200.36.164.0/24 (max: 24)
5: 200.36.166.0/23 (max: 23)
6: 200.36.166.0/24 (max: 24)
7: 200.36.167.0/24 (max: 24)
8: 200.36.168.0/24 (max: 24)
9: 200.36.169.0/24 (max: 24)
10: 200.36.170.0/24 (max: 24)
11: 200.36.171.0/24 (max: 24)
12: 200.36.172.0/24 (max: 24)
13: 200.36.173.0/24 (max: 24)
14: 200.36.174.0/24 (max: 24)
15: 200.36.175.0/24 (max: 24)
16: 200.36.176.0/24 (max: 24)
17: 200.36.177.0/24 (max: 24)
18: 200.36.178.0/23 (max: 23)
19: 200.36.178.0/24 (max: 24)
20: 200.36.180.0/23 (max: 23)
21: 200.36.180.0/24 (max: 24)
22: 200.36.182.0/23 (max: 23)
23: 200.36.182.0/24 (max: 24)
24: 200.36.183.0/24 (max: 24)
25: 200.36.184.0/22 (max: 22)
26: 200.36.184.0/24 (max: 24)
27: 200.36.185.0/24 (max: 24)
28: 200.36.186.0/23 (max: 23)
29: 200.36.186.0/24 (max: 24)
30: 200.36.187.0/24 (max: 24)
31: 200.36.188.0/22 (max: 22)
32: 200.36.188.0/23 (max: 23)
33: 200.36.189.0/24 (max: 24)
34: 200.36.190.0/23 (max: 24)
35: 200.36.190.0/24 (max: 24)
36: 200.36.191.0/24 (max: 24)
37: 200.39.0.0/23 (max: 23)
38: 200.39.11.0/24 (max: 24)
39: 200.39.13.0/24 (max: 24)
40: 200.39.14.0/23 (max: 23)
41: 200.39.14.0/24 (max: 24)
42: 200.39.15.0/24 (max: 24)
43: 200.39.17.0/24 (max: 24)
44: 200.39.18.0/24 (max: 24)
45: 200.39.2.0/24 (max: 24)
46: 200.39.20.0/24 (max: 24)
47: 200.39.21.0/24 (max: 24)
48: 200.39.22.0/24 (max: 24)
49: 200.39.23.0/24 (max: 24)
50: 200.39.24.0/22 (max: 22)
51: 200.39.24.0/24 (max: 24)
52: 200.39.25.0/24 (max: 24)
53: 200.39.26.0/24 (max: 24)
54: 200.39.28.0/23 (max: 23)
55: 200.39.28.0/24 (max: 24)
56: 200.39.29.0/24 (max: 24)
57: 200.39.30.0/24 (max: 24)
58: 200.39.31.0/24 (max: 24)
59: 200.39.7.0/24 (max: 24)
60: 200.39.8.0/24 (max: 24)
61: 200.39.9.0/24 (max: 24)
62: 200.76.80.0/21 (max: 21)
63: 200.76.82.0/24 (max: 24)
64: 200.76.88.0/23 (max: 23)
65: 200.76.90.0/23 (max: 24)
66: 200.76.92.0/22 (max: 22)
67: 201.162.128.0/18 (max: 18)
68: 201.162.128.0/20 (max: 20)
69: 201.162.128.0/21 (max: 21)
70: 201.162.136.0/21 (max: 24)
71: 201.162.144.0/24 (max: 24)
72: 201.162.162.0/24 (max: 24)
73: 201.162.178.0/24 (max: 24)
74: 201.162.191.0/24 (max: 24)
75: 201.162.192.0/23 (max: 23)
76: 201.162.192.0/24 (max: 24)
77: 201.162.193.0/24 (max: 24)
78: 201.162.194.0/24 (max: 24)
79: 201.162.224.0/23 (max: 23)
80: 201.162.224.0/24 (max: 24)
81: 201.162.233.0/24 (max: 24)
82: 201.162.234.0/24 (max: 24)
83: 201.162.236.0/24 (max: 24)
84: 201.166.128.0/19 (max: 19)
85: 201.166.128.0/20 (max: 20)
86: 201.166.128.0/22 (max: 22)
87: 201.166.132.0/24 (max: 24)
88: 201.166.133.0/24 (max: 24)
89: 201.166.137.0/24 (max: 24)
90: 201.166.144.0/20 (max: 20)
91: 201.166.148.0/22 (max: 22)
92: 201.166.151.0/24 (max: 24)
93: 201.166.160.0/20 (max: 20)
94: 201.166.168.0/24 (max: 24)
95: 201.166.169.0/24 (max: 24)
96: 201.166.175.0/24 (max: 24)
97: 201.166.176.0/21 (max: 21)
98: 201.166.176.0/24 (max: 24)
99: 201.166.177.0/24 (max: 24)
100: 201.166.178.0/24 (max: 24)
101: 201.166.180.0/22 (max: 24)
102: 201.166.184.0/21 (max: 21)
103: 201.166.188.0/24 (max: 24)
104: 201.166.189.0/24 (max: 24)
105: 201.166.190.0/24 (max: 24)
106: 201.166.191.0/24 (max: 24)
--
$ test-roa -p repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/e5bc304a4f959d02f64f21c56b31d9ba1171f01a.roa | openssl x509 -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 998307 (0xf3ba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2023 GMT
Subject: CN=e5bc304a4f959d02f64f21c56b31d9ba1171f01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:3e:12:11:e5:0c:74:77:87:cb:88:60:03:
b6:93:7b:ce:b9:e5:df:35:23:e3:b4:bf:32:e4:b5:
e5:30:65:b0:e7:b1:19:a8:ec:33:ea:e3:4a:30:0d:
65:bd:8f:80:68:16:f5:26:e1:9e:56:1c:1d:38:d9:
2b:8c:03:b3:28:60:1e:c6:3d:13:3c:0b:a9:fe:37:
bb:38:ea:5c:ac:ed:f9:02:ee:28:0a:9b:b9:7d:45:
67:f9:be:5b:95:21:2a:89:bc:02:a5:15:dc:f7:c6:
c9:b5:bb:ca:6e:81:5c:6c:94:82:1f:79:2f:65:e5:
e9:f2:59:b0:40:30:0f:5e:05:90:4c:a8:1f:41:26:
ab:eb:f9:f1:05:e6:bd:85:c8:be:bc:ba:fb:cf:c0:
d5:d5:f7:3b:24:88:59:b2:43:73:25:3a:9a:68:0a:
ef:13:31:ef:37:31:a5:fa:41:3b:78:b3:d8:b3:f6:
ec:cd:d0:b0:30:6e:fd:35:de:44:b9:13:99:4a:a5:
0a:d5:0f:d7:c3:f4:99:15:72:2a:53:bd:7e:ec:12:
82:27:fc:4f:5a:54:3a:3d:f6:95:8b:d2:e2:ad:16:
73:c3:86:be:dd:8f:b2:59:af:89:54:67:49:50:64:
c5:7c:df:c7:6e:3f:c0:bb:bb:21:fe:36:09:f6:ed:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:52:C9:8A:37:92:77:54:7E:DB:BD:15:2F:E6:0F:B8:94:54:8B:1F
X509v3 Authority Key Identifier:
keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/e5bc304a4f959d02f64f21c56b31d9ba1171f01a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.36.161.0-200.36.164.255
200.36.166.0-200.36.191.255
200.39.0.0-200.39.2.255
200.39.7.0-200.39.9.255
200.39.11.0/24
200.39.13.0-200.39.15.255
200.39.17.0-200.39.18.255
200.39.20.0-200.39.31.255
200.76.80.0/20
201.162.128.0-201.162.194.255
201.162.224.0/23
201.162.233.0-201.162.234.255
201.162.236.0/24
201.166.128.0/18
Signature Algorithm: sha256WithRSAEncryption
81:ba:0b:96:cf:a8:6b:1f:26:c1:d4:b4:86:68:9c:3d:3f:91:
99:50:dd:bb:aa:05:9c:02:ce:29:dd:c7:78:00:b3:d2:8b:36:
8c:92:8d:3b:1c:42:db:67:9c:fe:14:2c:74:07:8c:0d:cb:7c:
97:3c:4b:c0:90:24:9d:ed:e4:51:77:6c:2c:20:6c:97:f5:07:
86:05:c5:c4:7b:31:5b:35:8c:67:ef:94:96:62:1b:bf:0f:18:
0a:ca:dd:cc:58:da:e1:4c:2f:ff:d6:e0:0b:fd:c1:12:90:ce:
36:3e:11:c7:d6:6f:ac:7b:bc:36:59:50:29:29:89:ff:cb:af:
60:de:e9:08:2d:c8:7f:82:ed:86:16:b5:37:7a:56:f1:f9:68:
37:17:f6:d8:32:54:cd:73:eb:6a:97:ac:bb:d1:a5:34:d3:59:
ab:74:77:65:50:b0:38:8f:fe:a0:87:a9:d6:a5:d1:b3:75:8b:
1b:03:b6:52:ff:9f:74:a5:e7:e8:9f:c6:3c:a7:d1:50:8d:86:
06:7d:15:a1:0a:06:85:8b:05:92:4a:fd:e7:3b:e9:19:02:06:
a2:99:46:75:5b:d3:e4:42:b6:2a:1c:e3:73:1f:26:2a:1a:7f:
8a:a7:b2:f9:58:66:ea:0f:89:f9:3c:ad:5a:84:35:81:bd:6d:
91:77:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 26 12:48:58 2021 by LibreSSL & rpki-client.