Invalid ROA

Job Snijders job at ntt.net
Sun Apr 19 19:18:37 CEST 2020


Hi,

On Sun, Apr 19, 2020, at 19:09, Fabiano D'Agostino wrote:
> how can I check which prefixes are not valid and so rejected? It seems 
> the rpki is working, but I'd like to be sure. I have this:
> if (roa_check(r4, net, bgp_path.last) = ROA_INVALID) then
> {
> print "Ignore RPKI invalid ", net, " for ASN ", bgp_path.last;
> 
> but I don't understand where the prints go.

They go to syslog.

Make sure to match in this: bgp_path.last_nonaggregated

Kind regards,

Job


More information about the Bird-users mailing list