5 Oct
2019
5 Oct
'19
11:30 a.m.
As I understand it BIRD's ROA check as seen in the documentation will return a RPKI validity state of VALID if the last AS_PATH item was of type AS_SET and the address holder created a ROA with AS0 for it.
That is a good point, but the ROA check verifies that ASN is non-zero in order to success:
if (asn && (roa->asn == asn) && (roa->max_pxlen >= px->pxlen)) return ROA_VALID;
So it should be correct.
I assume 'asn' is the equivalent of 'bgp_path.last' there. Thanks for getting back to me and verifying that there is no issue so fast, really appreciated!