Re: BGP Security and PKI Hierarchies (was: Re: Wifi Security)

[Randy Bush <randy () psg com>]

> We need prefix ownership certs; these need a special field identifying the
> prefix owned.  (See RFC 3779, which also describes AS certificates).  We
> need the latter in CA form, for delegation.

sorry to complicate, by iana allocates as ranges which are then
subbed to rirs.  so the ca bit could be set on these

randy