Example configuration for ASPA with rpki-client?

[Jelle Luteijn]

Hi Robert,

I have ASPA implemented.
I use the following function:
function is_aspa_invalid(bool is_upstream) -> bool {
    if aspa_check(ASPAS, bgp_path, is_upstream) = ASPA_INVALID then {
        print "Reject: ASPA INVALID: ", net, " ", bgp_path, " protocol: ", proto;
        return true;
    }
    
    return false;
}

and I call this function in my filter for upstream as follows:
    if is_aspa_invalid(false) then {
        reject;
    }

What I found, for ASPA the upstream question is, is your ASN the upstream of the peer. In case of a transit the answer is no.

Regards,
Jelle

-----Original Message-----
From: Bird-users <bird-users-bounces at network.cz> On Behalf Of Robert Scheck
Sent: Friday, 4 April 2025 21:19
To: bird-users at network.cz
Subject: Example configuration for ASPA with rpki-client?

Hello,

does somebody have an example configuration snippet for ASPA in BIRD with rpki-client? I've read https://bird.network.cz/?get_doc&v=20&f=bird-6.html
but I'm still not sure how the configuration in BIRD for an AS with two transit providers (just upstreams, no downstreams) would look like...


Regards,
  Robert