Search RPD Archives
Limit search to: Subject & Body Subject Author
Sort by:

[rpd] RPKI ROAs for Unallocated and Unassigned AFRINIC Address Space AFPUB-2019-GEN-006-DRAFT02

Patrick Okui pokui at
Sat Feb 13 16:12:14 UTC 2021

On 13 Feb 2021, at 16:26 EAT, Ben Maddison via RPD wrote:

> At time t2, the RIR re-allocates 2001:db8:foo::/48 to member Y, who

> also has AS65001.

> Member Y issues ROA:

> 2001:db8:baa::/48 asID:65001

Bad things will always happen if member Y attempts to create a ROA
different from what they were allocated.

If I understand correctly at time t2 2001:db8:baa::/48 is still
legitimately allocated to AS65000.

At the time t2 when reallocating 2001:db8:f00::/48

- RIR should remove ROA 2001:db8:f00::/48 AS0 (since it’s no longer
+ 2001:db8:f00::/48 goes back to “unknown”
- RIR hands AS65001 a CA cert which contains 2001:db8:f00::/48.
- Y optionally creates 2001:db8:f00::/48 AS65001 when allocation etc
are done.
+ 2001:db8:f00::/48 origin AS65001 goes to “valid”

At this point the history of 2001:db8:f00::/48 being reclaimed from
AS65000 rather than coming from IANA doesn’t matter unless I’m
missing something.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the RPD mailing list