[RPKI] Filtering of Unsafe VRPs

Martin Hoffmann martin at nlnetlabs.nl
Wed Sep 16 12:40:56 UTC 2020


Hola!

Tarko Tikan via RPKI wrote:
> 
> > The
> > number of unsafe filtered VRPs was zero until this morning and is
> > now one. So I guess it is working.  
> 
> This sounds more reasonable. Which ROAs are the ones conflicting and 
> getting filtered at the moment?

To quote from the log:

| Filtering potentially unsafe VRP (2602:feda:b88::/48,max 48,ASAS209557)

Which is related to this:

| CA for rsync://0.0.0.0/repo/RPKIYI/0/ rejected, resources to be filtered:
|   2602:feda:b88::/47

Which is I guess is a nice test case that everything works as expected.

Kind regards,
Martin 


More information about the RPKI mailing list