[RPKI-discuss] How to announce your ROAs to global internet
ALAIN AINA
aalain at afrinic.net
Tue Dec 18 09:52:03 SAST 2012
On Dec 17, 2012, at 11:49 PM, Carlos M. Martinez wrote:
> You can try out rcynic
http://subvert-rpki.hactrn.net/trunk/rcynic/
> or BBN's validator.
http://sourceforge.net/projects/rpstir/
Let us know if you need more help
Thanks
--Alain
>
> regards
>
> Carlos
>
> On 12/17/12 5:31 PM, Gaurav Kansal wrote:
>> Ok.
>>
>> Is there any open-source validator available other than RIPE's one through
>> which I can check my resources.
>>
>>
>>
>> Thanks.
>>
>>
>>
>> -----Original Message-----
>> From: rpki-discuss-bounces at afrinic.net
>> [mailto:rpki-discuss-bounces at afrinic.net] On Behalf Of Arturo Servin
>> Sent: Tuesday, December 18, 2012 12:57 AM
>> To: rpki-discuss at afrinic.net
>> Subject: Re: [RPKI-discuss] How to announce your ROAs to global internet
>>
>>
>>
>>
>>
>> I mean, in our validator we can see the ROA.
>>
>>
>>
>> However in rpki-rtr.ripe.net the route is unknow. But the
>> same is for our routes that we signed and created ROAs long ago.
>>
>>
>>
>> It seems that the cache connected to the router
>> (rpki-rtr.ripe.net) do not have all the TAs configured.
>>
>>
>>
>> Regards,
>>
>> as
>>
>>
>>
>> On 17/12/2012 17:15, Arturo Servin wrote:
>>
>>> Gaurav,
>>
>>>
>>
>>> It is there in APNIC repository.
>>
>>>
>>
>>> origin-as 55824 14.139.8.0/24 Max len 24 TA:
>> apnic->iana
>>
>>>
>>
>>> Do you have the 5 APNIC TAs in your validator? You may have
>> the old TA.
>>
>>>
>>
>>>
>>
>>> Regards,
>>
>>> .as
>>
>>>
>>
>>>
>>
>>> On 17/12/2012 16:55, Gaurav Kansal wrote:
>>
>>>> Dear Carlos,
>>
>>>>
>>
>>>> Thanks for the nice explanation.
>>
>>>> I had generated ROA for my resource 14.139.8.0/24 about 8-10 hours back.
>>
>>>> But till now, in RIPE NCC Validation Application, i am not getting my
>>
>>>> resource.
>>
>>>> Initially, in RIPE RPKI Test Router (rpki-rtr.ripe.net), i was
>>
>>>> getting RPKI State Valid, but now it is showing RPKI State not found.
>>
>>>>
>>
>>>> I don't know what happens and why it is showing RPKI State not found,
>>
>>>> although in the APNIC account, i am able to see my certificate.
>>
>>>>
>>
>>>> Regards,
>>
>>>> Gaurav
>>
>>>>
>>
>>>>
>>
>>>>
>>
>>>> On 12/18/12, *"Carlos M. Martinez" * < <mailto:carlosm3011 at gmail.com>
>> carlosm3011 at gmail.com> wrote:
>>
>>>>> Dear Gaurav,
>>
>>>>>
>>
>>>>> ROAs go into repositories. RPs (relying parties, that is people or
>>
>>>>> organizations using RPKI) will fetch them from these public
>> repositories.
>>
>>>>>
>>
>>>>> If you install a validating cache utility, for example RIPE NCC's
>>
>>>>> Validation Application, it will fetch the ROAs from the repositories
>>
>>>>> and you will be able to monitor whether your ROA is being published
>> correctly.
>>
>>>>>
>>
>>>>> Warm regards,
>>
>>>>>
>>
>>>>> ~Carlos
>>
>>>>>
>>
>>>>> On 12/17/12 4:42 PM, Gaurav Kansal wrote:
>>
>>>>>> Dear Team,
>>
>>>>>>
>>
>>>>>> I just create a sign ROA for my resources using APNIC Sign ROA utility.
>>
>>>>>> Now, do i have to announce that ROA separately or it will
>>
>>>>>> automatically reach to the global internet through APNIC list?
>>
>>>>>>
>>
>>>>>>
>>
>>>>>> --
>>
>>>>>> Thanks n Regards,
>>
>>>>>> GAURAV KANSAL
>>
>>>>>> 9910118448
>>
>>>>>> VoIP - 6259
>>
>>>>>> Operation And Routing Unit
>>
>>>>>> NIC , NEW DELHI
>>
>>>>>>
>>
>>>>>> Please don't print this e-mail until & unless you really need, it
>>
>>>>>> will save Trees on Planet Earth.
>>
>>>>>> IPv4 is Over,
>>
>>>>>> Are your ready for new Network.
>>
>>>>>>
>>
>>>>>>
>>
>>>>>> _______________________________________________
>>
>>>>>> RPKI-discuss mailing list
>>
>>>>>> <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
>>
>>>>>> <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
>> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>>
>>>>>>
>>
>>>> --
>>
>>>> Thanks n Regards,
>>
>>>> GAURAV KANSAL
>>
>>>> 9910118448
>>
>>>> VoIP - 6259
>>
>>>> Operation And Routing Unit
>>
>>>> NIC , NEW DELHI
>>
>>>>
>>
>>>> Please don't print this e-mail until & unless you really need, it
>>
>>>> will save Trees on Planet Earth.
>>
>>>> IPv4 is Over,
>>
>>>> Are your ready for new Network.
>>
>>>>
>>
>>>>
>>
>>>> _______________________________________________
>>
>>>> RPKI-discuss mailing list
>>
>>>> <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
>>
>>>> <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
>> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>>
>>>>
>>
>>> _______________________________________________
>>
>>> RPKI-discuss mailing list
>>
>>> <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
>>
>>> <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
>> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>>
>>>
>>
>> _______________________________________________
>>
>> RPKI-discuss mailing list
>>
>> <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
>>
>> <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
>> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>>
>>
>> _______________________________________________
>> RPKI-discuss mailing list
>> RPKI-discuss at afrinic.net
>> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>>
> _______________________________________________
> RPKI-discuss mailing list
> RPKI-discuss at afrinic.net
> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
More information about the RPKI-discuss
mailing list