nanog mailing list archives

Re: Understanding impact of RPKI and ROA on existing advertisements


From: Josh Luthman <josh () imaginenetworksllc com>
Date: Wed, 2 Nov 2022 10:20:54 -0400

It's very important to specify the /24 inside the /23 for example so as you
said "for all our subnets being advertised".

On Tue, Nov 1, 2022 at 5:01 PM Randy Bush <randy () psg com> wrote:

Thanks everyone for your inputs. So bottomline setup RPKI and setup ROA's
for all our subnets being advertised.

if the BGP advertisements are correct, then mirror them in ROAs.  most,
if not all, CA UIs make that easy.

randy


Current thread: