Re: RPKI for dummies

2020-08-20 Thread Fabien VINCENT (NaNOG) via NANOG
7;s to stop any other AS other then mine from advertising my IP space. Is that correct? How is verification done? They connect to the RIR and verify that there is a cert signed by the RIR for my range? On Thu, Aug 20, 2020 at 9:51 AM Fabien VINCENT (NaNOG) via NANOG wrote: Hi, In fact, RP

Re: RPKI for dummies

2020-08-20 Thread Fabien VINCENT (NaNOG) via NANOG
Hi, In fact, RPKI does nothing about AS Path checks if it's your question. RPKI is based on ROA where signatures are published to guarantee you're the owner of a specific prefix with optionnal different maxLength from your ASN. So if the question is about if RPKI is sufficient to secure the

Re: bgpview.io data source

2019-07-12 Thread Fabien VINCENT (NaNOG) via NANOG
Le 2019-07-12 17:22, Francois Lecavalier a écrit : > Anyone knows where bgpview.io gets its data from? > > We have a BGP session with the routeviews project and qrator but bgpview.io > still doesn't get the whole picture of our network. > > This e-mail may be privileged and/or confidential,