Re: [Sidrops] I-D Action: draft-ietf-sidrops-aspa-profile-15.txt

[Russ Housley <[e-mail]>]

> On Jun 25, 2023, at 4:30 AM, Job Snijders <job=[e-mail]> wrote:
> 
> On Fri, Jun 23, 2023 at 07:46:32AM +1000, Tom Harrison wrote:
>>> If you generate test objects, please share them with the group!
>> 
>> The test APNIC implementation has been updated for version 15 of this
>> document.  See
>> https://github.com/APNIC-net/rpki-aspa-demo/blob/main/t/objects/AS1000.asa
>> for an example object.
> 
> Thanks Tom, I can decode it.
> 
> $ rpki-client -f t/objects/AS1000.asa
> File:                     t/objects/AS1000.asa
> Hash identifier:          ta2FNhCaRt5BSVEXqTj56rrSyFUs0akYTK8lAMT+e9U=
> Subject key identifier:   B3:88:AF:77:36:2E:35:35:C3:C9:CA:A8:FA:87:1C:4A:92:07:44:36
> Certificate issuer:       /CN=ta
> Certificate serial:       0A
> Authority key identifier: EF:84:0D:58:C2:92:C5:58:5D:06:45:4C:88:4D:7C:5F:64:0B:D2:F4
> Authority info access:    rsync://localhost:25934/repo/EF840D58C292C5585D06454C884D7C5F640BD2F4.cer
> Subject info access:      rsync://localhost:25934/ta/an-object.asa
> Signing time:             Sun 25 Jun 2023 00:27:09 +0000
> ASPA not before:          Sun 25 Jun 2023 00:27:09 +0000
> ASPA not after:           Mon 24 Jun 2024 00:27:09 +0000
> Customer ASID:            1000
> Provider set:             AS: 1025
> Validation:               Failed, unable to get local issuer certificate
> 
> Kind regards,
> 
> Job

Thanks Tom.  I was able to use my updated pyasn1 module to decode it too.

Russ