Re: [nznog] RPKI and ROA

Thanks Tim, My concern is that the only place that shows our ROA as valid is whois.bgpmon.net. As this has a mirror of RADb. Without a replica of RADb the query fails. If you query our block in here: http://localcert.ripe.net:8088/roas to see if its valid, it doesn't exist as the route object doesn't exist in ARIN's database and this doesn't have a copy of the RADb database. I basically looking for more confirmation that the behaviour of the RIPE RPKI is operationally correct. Only 4 out of our 7 upstream carriers use RADb. I haven't yet asked them if they use RPKI. Cheers, Bil On 2014-03-20 13:39, Tim Hoffman wrote:

http://rpki-validator.lab.hotplate.co.nz [1]

—hoff

On 20/03/2014, at 3:37 pm, Bill Walker wrote:

Hi Michael,

Sound like you have an RPKI validator setup already, would you mind querying AS133366/159.21.142.0/23 and letting me know the result?

Thanks,

Bill

On 2014-03-20 13:07, Michael Fincham wrote:

On Thu, 20 Mar 2014 15:04:59 +1300, Dean Pemberton wrote: jump through legal hoops While I agree that making this a requirement is daft, it is a matter of a checkbox on a webpage to say you agree to their terms - it's quite straightforward. _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

Links: ------ [1] http://rpki-validator.lab.hotplate.co.nz