Re: RPKI unknown for superprefixes of existing ROA ?

[Job Snijders via NANOG <nanog () nanog org>]

On Sun, 22 Oct 2023 at 19:35, Owen DeLong <owen () delong com> wrote:

> Actually, Job, the 1.2.0/20 would be the longest prefix announced for
> 1.2.4/24 and 1.2.7/24 in this case. It’s a rather clever end-run. The /20
> won’t match the more specific as0 ROAs, so it gets accepted. The /24s
> either aren’t advertised or they get discarded as invalid.


You wouldn’t create AS 0 ROAs if you want to announce the IP space pull
traffic into the discard filters on your edge.

Kind regards,

Job

>