[RPKI-discuss] How to announce your ROAs to global internet

[Carlos M. Martinez]

You can try out rcynic or BBN's validator.

regards

Carlos

On 12/17/12 5:31 PM, Gaurav Kansal wrote:
> Ok.
> 
> Is there any open-source validator available other than RIPE's one through
> which I can check my resources.
> 
>  
> 
> Thanks. 
> 
>  
> 
> -----Original Message-----
> From: rpki-discuss-bounces at afrinic.net
> [mailto:rpki-discuss-bounces at afrinic.net] On Behalf Of Arturo Servin
> Sent: Tuesday, December 18, 2012 12:57 AM
> To: rpki-discuss at afrinic.net
> Subject: Re: [RPKI-discuss] How to announce your ROAs to global internet
> 
>  
> 
>  
> 
>                 I mean, in our validator we can see the ROA.
> 
>  
> 
>                 However in rpki-rtr.ripe.net the route is unknow. But the
> same is for our routes that we signed and created ROAs long ago.
> 
>  
> 
>                 It seems that the cache connected to the router
> (rpki-rtr.ripe.net) do not have all the TAs configured.
> 
>  
> 
> Regards,
> 
> as
> 
>  
> 
> On 17/12/2012 17:15, Arturo Servin wrote:
> 
>> Gaurav,
> 
>>
> 
>>             It is there in APNIC repository.
> 
>>
> 
>>             origin-as 55824  14.139.8.0/24     Max len 24          TA:
> apnic->iana
> 
>>
> 
>>             Do you have the 5 APNIC TAs in your validator? You may have
> the old TA.
> 
>>
> 
>>
> 
>> Regards,
> 
>> .as
> 
>>
> 
>>
> 
>> On 17/12/2012 16:55, Gaurav Kansal wrote:
> 
>>> Dear Carlos,
> 
>>>
> 
>>> Thanks for the nice explanation.
> 
>>> I had generated ROA for my resource 14.139.8.0/24 about 8-10 hours back.
> 
>>> But till now, in RIPE NCC Validation Application, i am not getting my 
> 
>>> resource.
> 
>>> Initially, in RIPE RPKI Test Router (rpki-rtr.ripe.net), i was 
> 
>>> getting RPKI State Valid, but now it is showing RPKI State not found.
> 
>>>
> 
>>> I don't know what happens and why it is showing RPKI State not found, 
> 
>>> although in the APNIC account, i am able to see my certificate.
> 
>>>
> 
>>> Regards,
> 
>>> Gaurav
> 
>>>
> 
>>>
> 
>>>
> 
>>> On 12/18/12, *"Carlos M. Martinez" * < <mailto:carlosm3011 at gmail.com>
> carlosm3011 at gmail.com> wrote:
> 
>>>> Dear Gaurav,
> 
>>>>
> 
>>>> ROAs go into repositories. RPs (relying parties, that is people or 
> 
>>>> organizations using RPKI) will fetch them from these public
> repositories.
> 
>>>>
> 
>>>> If you install a validating cache utility, for example RIPE NCC's 
> 
>>>> Validation Application, it will fetch the ROAs from the repositories 
> 
>>>> and you will be able to monitor whether your ROA is being published
> correctly.
> 
>>>>
> 
>>>> Warm regards,
> 
>>>>
> 
>>>> ~Carlos
> 
>>>>
> 
>>>> On 12/17/12 4:42 PM, Gaurav Kansal wrote:
> 
>>>>> Dear Team,
> 
>>>>>
> 
>>>>> I just create a sign ROA for my resources using APNIC Sign ROA utility.
> 
>>>>> Now, do i have to announce that ROA separately or it will 
> 
>>>>> automatically reach to the global internet through APNIC list?
> 
>>>>>
> 
>>>>>
> 
>>>>> --
> 
>>>>> Thanks n Regards,
> 
>>>>> GAURAV KANSAL
> 
>>>>> 9910118448
> 
>>>>> VoIP - 6259
> 
>>>>> Operation And Routing Unit
> 
>>>>> NIC , NEW DELHI
> 
>>>>>
> 
>>>>> Please don't print this e-mail until & unless you really need, it 
> 
>>>>> will save Trees on Planet Earth.
> 
>>>>> IPv4 is Over,
> 
>>>>> Are your ready for new Network.
> 
>>>>>
> 
>>>>>
> 
>>>>> _______________________________________________
> 
>>>>> RPKI-discuss mailing list
> 
>>>>>  <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
> 
>>>>>  <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
> 
>>>>>
> 
>>> --
> 
>>> Thanks n Regards,
> 
>>> GAURAV KANSAL
> 
>>> 9910118448
> 
>>> VoIP - 6259
> 
>>> Operation And Routing Unit
> 
>>> NIC , NEW DELHI
> 
>>>
> 
>>> Please don't print this e-mail until & unless you really need, it 
> 
>>> will save Trees on Planet Earth.
> 
>>> IPv4 is Over,
> 
>>> Are your ready for new Network.
> 
>>>
> 
>>>
> 
>>> _______________________________________________
> 
>>> RPKI-discuss mailing list
> 
>>>  <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
> 
>>>  <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
> 
>>>
> 
>> _______________________________________________
> 
>> RPKI-discuss mailing list
> 
>>  <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
> 
>>  <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
> 
>>
> 
> _______________________________________________
> 
> RPKI-discuss mailing list
> 
>  <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
> 
>  <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
> 
> 
> _______________________________________________
> RPKI-discuss mailing list
> RPKI-discuss at afrinic.net
> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>