[190032] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

RPKI and offline routes

daemon@ATHENA.MIT.EDU (Theodore Baschak)
Mon Jun 13 18:32:56 2016

X-Original-To: nanog@nanog.org
From: Theodore Baschak <theodore@ciscodude.net>
Date: Mon, 13 Jun 2016 17:32:52 -0500
To: NANOG Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org

Can RPKI be used with routes that are not being advertised at the =
moment?
As in to sign a route that *could* be there, but is not there presently.

There's been several BGP hijacks that I've followed closely that =
involved hijacking IP space as well as the ASN that would normally =
originate it. I'm wondering if having valid ROAs/RPKI would have helped =
in this case or not.=20


Theodore Baschak - AS395089 - Hextet Systems


home help back first fref pref prev next nref lref last post