[179905] in North American Network Operators' Group
RPKI Validator 2.19; export ROAs as RPSL route: objects
daemon@ATHENA.MIT.EDU (Alex Band)
Tue May 12 10:00:01 2015
X-Original-To: nanog@nanog.org
From: Alex Band <alexb@ripe.net>
Date: Tue, 12 May 2015 15:59:56 +0200
To: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
Hello,
We've been getting a lot of requests to make processed RPKI data easily =
available in existing (RPSL based) workflows. This is why we added the =
ability to export all ROAs as route: objects in the latest release, =
version 2.19. Practically, this means that running an RPSL export will =
give you almost 450,000 highly reliable, cryptographically validated =
route: objects.
This functionality should be considered beta for now, because we would =
like to get your feedback on the notation and the way we de-aggregate =
ROAs into route: objects based on the specified maximum prefix length.=20=
The format looks like this:
route: 193.0.12.0/23
origin: AS3333
descr: exported from ripe ncc validator
mnt-by: NA
created: 2015-05-07T10:01:56Z
last-modified: 2015-05-07T10:01:56Z
source: ROA-RIPE-NCC-RPKI-ROOT
For details on the implementation, please refer to the README:
=
https://github.com/RIPE-NCC/rpki-validator/blob/master/rpki-validator-app/=
README.txt#L185
Here's a link to a snapshot I just made:
https://alexband.nl/temp/export-20150512.rpsl.zip
You can download the RPKI Validator here:
https://ripe.net/certification/tools-and-resources
We look forward to your feedback. Pull requests are welcome too. :)
Cheers,
Alex Band
Product Manager=20
RIPE NCC=
