[RPKI-discuss] How to announce your ROAs to global internet

Gaurav Kansal gaurav.kansal at nic.in
Mon Dec 17 21:29:09 SAST 2012


Servin,

ya I have 5 APNIC Trust Anchors in my validator. May be they are old ones.
But in RIPE NCC- RPKI Test Router also, I am getting RPKI State not found.

How can I make sure that everything is fine from my end?

And can you pl. tell me how you find out whether my resource exist in APNIC
repo or not (means by using whois utility or anything else).


Regards,
Gaurav Kansal

-----Original Message-----
From: rpki-discuss-bounces at afrinic.net
[mailto:rpki-discuss-bounces at afrinic.net] On Behalf Of Arturo Servin
Sent: Tuesday, December 18, 2012 12:45 AM
To: rpki-discuss at afrinic.net
Subject: Re: [RPKI-discuss] How to announce your ROAs to global internet

Gaurav,

	It is there in APNIC repository.

	origin-as 55824	14.139.8.0/24	Max len 24	TA: apnic->iana

	Do you have the 5 APNIC TAs in your validator? You may have the old
TA.


Regards,
.as


On 17/12/2012 16:55, Gaurav Kansal wrote:
> Dear Carlos,
> 
> Thanks for the nice explanation.
> I had generated ROA for my resource 14.139.8.0/24 about 8-10 hours back.
> But till now, in RIPE NCC Validation Application, i am not getting my 
> resource.
> Initially, in RIPE RPKI Test Router (rpki-rtr.ripe.net), i was getting 
> RPKI State Valid, but now it is showing RPKI State not found.
> 
> I don't know what happens and why it is showing RPKI State not found, 
> although in the APNIC account, i am able to see my certificate.
> 
> Regards,
> Gaurav
> 
> 
> 
> On 12/18/12, *"Carlos M. Martinez" * <carlosm3011 at gmail.com> wrote:
>> Dear Gaurav,
>>
>> ROAs go into repositories. RPs (relying parties, that is people or 
>> organizations using RPKI) will fetch them from these public repositories.
>>
>> If you install a validating cache utility, for example RIPE NCC's 
>> Validation Application, it will fetch the ROAs from the repositories 
>> and you will be able to monitor whether your ROA is being published
correctly.
>>
>> Warm regards,
>>
>> ~Carlos
>>
>> On 12/17/12 4:42 PM, Gaurav Kansal wrote:
>> > Dear Team,
>> >
>> > I just create a sign ROA for my resources using APNIC Sign ROA utility.
>> > Now, do i have to announce that ROA separately or it will 
>> > automatically reach to the global internet through APNIC list?
>> >
>> >
>> > --
>> > Thanks n Regards,
>> > GAURAV KANSAL
>> > 9910118448
>> > VoIP - 6259
>> > Operation And Routing Unit
>> > NIC , NEW DELHI
>> >
>> > Please don't print this e-mail until & unless you really need, it 
>> > will save Trees on Planet Earth.
>> > IPv4 is Over,
>> > Are your ready for new Network.
>> >
>> >
>> > _______________________________________________
>> > RPKI-discuss mailing list
>> > RPKI-discuss at afrinic.net
>> > https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>> >
> --
> Thanks n Regards,
> GAURAV KANSAL
> 9910118448
> VoIP - 6259
> Operation And Routing Unit
> NIC , NEW DELHI
> 
> Please don't print this e-mail until & unless you really need, it will 
> save Trees on Planet Earth.
> IPv4 is Over,
> Are your ready for new Network.
> 
> 
> _______________________________________________
> RPKI-discuss mailing list
> RPKI-discuss at afrinic.net
> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
> 
_______________________________________________
RPKI-discuss mailing list
RPKI-discuss at afrinic.net
https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss



More information about the RPKI-discuss mailing list