[RPKI] Routes containing aggregated AS-set becomes invalid

Jan Chrillesen jan at chrillesen.dk
Wed Jul 15 06:13:43 UTC 2020


I am in the process of turning on validation in our network and I have
an issue with 2001:948::/32

When receiving the route over various IX's I get the following AS-path:


However when received via transit the AS-path doesn't contain the
aggregated list of AS numbers (see
for an explanation of aggregation with as-set)

Our Cisco ASR9000 running 6.6.3 considers the route with the aggregated
as-set as RPKI invalid. Is this expected behavior or a bug?

- Jan

More information about the RPKI mailing list