#
1.5 |
|
17-Apr-2024 |
job |
Sync RPKI Trust Anchor constraints to nro-delegated-stats
Turns out that registry at https://www.iana.org/assignments/as-numbers/as-numbers.xml is an incomplete one, where only 'new' assignments are listed. In the past this registry used to list all ASNs, but the RIRs asked IANA to revert to not being very detailed...
There is another source of truth, the 'nro-delegated-stats' file at https://ftp.ripe.net/pub/stats/ripencc/nro-stats/latest/nro-delegated-stats this is updated daily and composed of information from each RIR.
Summary of changes:
* LACNIC manages a more ASNs than previously known: - allow those ASNs for LACNIC - deny those for RIPE, APNIC, ARIN
* AFRINIC's allow list was good (compared to nro-delegated-stats), but the full set of AfriNIC ASNs wasn't denylisted for RIPE, ARIN, APNIC.
OK tb@
|
Revision tags: OPENBSD_7_5_BASE
|
#
1.4 |
|
30-Jan-2024 |
job |
Add more RPKI TA constraints: LACNIC ASNs cannot transfer to/from other RIRs
OK tb@
|
#
1.3 |
|
26-Dec-2023 |
job |
Align the other RIRs with the recent clarifications from AFRINIC
Following https://lists.afrinic.net/pipermail/dbwg/2023-December/000496.html Simply apply the inverse of 'afrinic.constraints' r1.2 to the other RIR files (since no resources can be transferred from AFRINIC to any other RIRs).
OK tb@
|
#
1.2 |
|
19-Dec-2023 |
job |
Add markers
OK tb@
|
#
1.1 |
|
13-Dec-2023 |
job |
Impose constraints on RPKI Trust Anchors
See https://datatracker.ietf.org/doc/html/draft-snijders-constraining-rpki-trust-anchors for more information.
Tested for a few months.
OK tb@ claudio@
|
#
1.4 |
|
30-Jan-2024 |
job |
Add more RPKI TA constraints: LACNIC ASNs cannot transfer to/from other RIRs
OK tb@
|
#
1.3 |
|
26-Dec-2023 |
job |
Align the other RIRs with the recent clarifications from AFRINIC
Following https://lists.afrinic.net/pipermail/dbwg/2023-December/000496.html Simply apply the inverse of 'afrinic.constraints' r1.2 to the other RIR files (since no resources can be transferred from AFRINIC to any other RIRs).
OK tb@
|
#
1.2 |
|
19-Dec-2023 |
job |
Add markers
OK tb@
|
#
1.1 |
|
13-Dec-2023 |
job |
Impose constraints on RPKI Trust Anchors
See https://datatracker.ietf.org/doc/html/draft-snijders-constraining-rpki-trust-anchors for more information.
Tested for a few months.
OK tb@ claudio@
|
#
1.3 |
|
26-Dec-2023 |
job |
Align the other RIRs with the recent clarifications from AFRINIC
Following https://lists.afrinic.net/pipermail/dbwg/2023-December/000496.html Simply apply the inverse of 'afrinic.constraints' r1.2 to the other RIR files (since no resources can be transferred from AFRINIC to any other RIRs).
OK tb@
|
#
1.2 |
|
19-Dec-2023 |
job |
Add markers
OK tb@
|
#
1.1 |
|
13-Dec-2023 |
job |
Impose constraints on RPKI Trust Anchors
See https://datatracker.ietf.org/doc/html/draft-snijders-constraining-rpki-trust-anchors for more information.
Tested for a few months.
OK tb@ claudio@
|