Re: RPKI chain of trust

Hi Fabiano,

On 26 Aug 2020, at 11:03, Fabiano D'Agostino <fabiano.dagostino96@gmail.com> wrote:

Hi Alex, thank you. I read that documentation and I was reading this one from page 201: https://www.ripe.net/support/training/material/bgp-operations-and-security-t...

It seems that RIRs have a self-signed root certificate. They use this certificate to sign LIR's certificates and LIR's private key is used to sign ROAs. I am not very sure about the use of public keys.

The “LIR”’s public key is on the certificate signed by the RIR and that makes the chain. -Alex