[RPKI-discuss] How to announce your ROAs to global internet

ALAIN AINA aalain at afrinic.net
Tue Dec 18 09:52:03 SAST 2012


On Dec 17, 2012, at 11:49 PM, Carlos M. Martinez wrote:

> You can try out rcynic


http://subvert-rpki.hactrn.net/trunk/rcynic/

> or BBN's validator.

http://sourceforge.net/projects/rpstir/


Let us know if you need more help

Thanks

--Alain


> 
> regards
> 
> Carlos
> 
> On 12/17/12 5:31 PM, Gaurav Kansal wrote:
>> Ok.
>> 
>> Is there any open-source validator available other than RIPE's one through
>> which I can check my resources.
>> 
>> 
>> 
>> Thanks. 
>> 
>> 
>> 
>> -----Original Message-----
>> From: rpki-discuss-bounces at afrinic.net
>> [mailto:rpki-discuss-bounces at afrinic.net] On Behalf Of Arturo Servin
>> Sent: Tuesday, December 18, 2012 12:57 AM
>> To: rpki-discuss at afrinic.net
>> Subject: Re: [RPKI-discuss] How to announce your ROAs to global internet
>> 
>> 
>> 
>> 
>> 
>>                I mean, in our validator we can see the ROA.
>> 
>> 
>> 
>>                However in rpki-rtr.ripe.net the route is unknow. But the
>> same is for our routes that we signed and created ROAs long ago.
>> 
>> 
>> 
>>                It seems that the cache connected to the router
>> (rpki-rtr.ripe.net) do not have all the TAs configured.
>> 
>> 
>> 
>> Regards,
>> 
>> as
>> 
>> 
>> 
>> On 17/12/2012 17:15, Arturo Servin wrote:
>> 
>>> Gaurav,
>> 
>>> 
>> 
>>>            It is there in APNIC repository.
>> 
>>> 
>> 
>>>            origin-as 55824  14.139.8.0/24     Max len 24          TA:
>> apnic->iana
>> 
>>> 
>> 
>>>            Do you have the 5 APNIC TAs in your validator? You may have
>> the old TA.
>> 
>>> 
>> 
>>> 
>> 
>>> Regards,
>> 
>>> .as
>> 
>>> 
>> 
>>> 
>> 
>>> On 17/12/2012 16:55, Gaurav Kansal wrote:
>> 
>>>> Dear Carlos,
>> 
>>>> 
>> 
>>>> Thanks for the nice explanation.
>> 
>>>> I had generated ROA for my resource 14.139.8.0/24 about 8-10 hours back.
>> 
>>>> But till now, in RIPE NCC Validation Application, i am not getting my 
>> 
>>>> resource.
>> 
>>>> Initially, in RIPE RPKI Test Router (rpki-rtr.ripe.net), i was 
>> 
>>>> getting RPKI State Valid, but now it is showing RPKI State not found.
>> 
>>>> 
>> 
>>>> I don't know what happens and why it is showing RPKI State not found, 
>> 
>>>> although in the APNIC account, i am able to see my certificate.
>> 
>>>> 
>> 
>>>> Regards,
>> 
>>>> Gaurav
>> 
>>>> 
>> 
>>>> 
>> 
>>>> 
>> 
>>>> On 12/18/12, *"Carlos M. Martinez" * < <mailto:carlosm3011 at gmail.com>
>> carlosm3011 at gmail.com> wrote:
>> 
>>>>> Dear Gaurav,
>> 
>>>>> 
>> 
>>>>> ROAs go into repositories. RPs (relying parties, that is people or 
>> 
>>>>> organizations using RPKI) will fetch them from these public
>> repositories.
>> 
>>>>> 
>> 
>>>>> If you install a validating cache utility, for example RIPE NCC's 
>> 
>>>>> Validation Application, it will fetch the ROAs from the repositories 
>> 
>>>>> and you will be able to monitor whether your ROA is being published
>> correctly.
>> 
>>>>> 
>> 
>>>>> Warm regards,
>> 
>>>>> 
>> 
>>>>> ~Carlos
>> 
>>>>> 
>> 
>>>>> On 12/17/12 4:42 PM, Gaurav Kansal wrote:
>> 
>>>>>> Dear Team,
>> 
>>>>>> 
>> 
>>>>>> I just create a sign ROA for my resources using APNIC Sign ROA utility.
>> 
>>>>>> Now, do i have to announce that ROA separately or it will 
>> 
>>>>>> automatically reach to the global internet through APNIC list?
>> 
>>>>>> 
>> 
>>>>>> 
>> 
>>>>>> --
>> 
>>>>>> Thanks n Regards,
>> 
>>>>>> GAURAV KANSAL
>> 
>>>>>> 9910118448
>> 
>>>>>> VoIP - 6259
>> 
>>>>>> Operation And Routing Unit
>> 
>>>>>> NIC , NEW DELHI
>> 
>>>>>> 
>> 
>>>>>> Please don't print this e-mail until & unless you really need, it 
>> 
>>>>>> will save Trees on Planet Earth.
>> 
>>>>>> IPv4 is Over,
>> 
>>>>>> Are your ready for new Network.
>> 
>>>>>> 
>> 
>>>>>> 
>> 
>>>>>> _______________________________________________
>> 
>>>>>> RPKI-discuss mailing list
>> 
>>>>>> <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
>> 
>>>>>> <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
>> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>> 
>>>>>> 
>> 
>>>> --
>> 
>>>> Thanks n Regards,
>> 
>>>> GAURAV KANSAL
>> 
>>>> 9910118448
>> 
>>>> VoIP - 6259
>> 
>>>> Operation And Routing Unit
>> 
>>>> NIC , NEW DELHI
>> 
>>>> 
>> 
>>>> Please don't print this e-mail until & unless you really need, it 
>> 
>>>> will save Trees on Planet Earth.
>> 
>>>> IPv4 is Over,
>> 
>>>> Are your ready for new Network.
>> 
>>>> 
>> 
>>>> 
>> 
>>>> _______________________________________________
>> 
>>>> RPKI-discuss mailing list
>> 
>>>> <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
>> 
>>>> <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
>> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>> 
>>>> 
>> 
>>> _______________________________________________
>> 
>>> RPKI-discuss mailing list
>> 
>>> <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
>> 
>>> <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
>> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>> 
>>> 
>> 
>> _______________________________________________
>> 
>> RPKI-discuss mailing list
>> 
>> <mailto:RPKI-discuss at afrinic.net> RPKI-discuss at afrinic.net
>> 
>> <https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss>
>> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>> 
>> 
>> _______________________________________________
>> RPKI-discuss mailing list
>> RPKI-discuss at afrinic.net
>> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss
>> 
> _______________________________________________
> RPKI-discuss mailing list
> RPKI-discuss at afrinic.net
> https://lists.afrinic.net/mailman/listinfo.cgi/rpki-discuss



More information about the RPKI-discuss mailing list