[rpd] RPKI ROAs for Unallocated and Unassigned AFRINIC Address Space AFPUB-2019-GEN-006-DRAFT02

[Patrick Okui]

On 13 Feb 2021, at 16:26 EAT, Ben Maddison via RPD wrote:


> At time t2, the RIR re-allocates 2001:db8:foo::/48 to member Y, who 

> also has AS65001.

> Member Y issues ROA:

>     2001:db8:baa::/48 asID:65001


Bad things will always happen if member Y attempts to create a ROA 
different from what they were allocated.

If I understand correctly at time t2 2001:db8:baa::/48 is still 
legitimately allocated to AS65000.

At the time t2 when reallocating 2001:db8:f00::/48

- RIR should remove ROA 2001:db8:f00::/48 AS0 (since it’s no longer 
“unallocated”)
	+ 2001:db8:f00::/48 goes back to “unknown”
- RIR hands AS65001 a CA cert which contains 2001:db8:f00::/48.
- Y optionally creates 2001:db8:f00::/48  AS65001 when allocation etc 
are done.
	+ 2001:db8:f00::/48 origin AS65001 goes to “valid”

At this point the history of 2001:db8:f00::/48 being reclaimed from 
AS65000 rather than coming from IANA doesn’t matter unless I’m 
missing something.

--
patrick
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/rpd/attachments/20210213/7051c328/attachment.html>