Is there a place where one can examine RPKI invalid logs for a specific date & time or even better logs showing those that dropped RPKI invalid announcements? Thanks, Hank
Dear Hank, On Sat, Feb 20, 2021 at 07:37:08PM +0200, Hank Nussbacher wrote:
Is there a place where one can examine RPKI invalid logs for a specific date & time
I have set up a publicly accessible archiver instance in Dallas, and one in Amsterdam which capture and archive data every 20 minutes. Please visit for access to downloadable archives http://www.rpkiviews.org/
or even better logs showing those that dropped RPKI invalid announcements?
You can extract the rpki-client.json file from the archive from the timestamp you are interested in, and pass it as cache file to https://github.com/job/rpki-ov-checker, and via STDIN feed it a list of Prefix + OriginAS combos (sourced from MRT data or your internal administration / expectations). If you like this service, please consider making a server in Israel available to rpkiviews.org. All that is required is a POSIX.1-ish-compliant server (BSD, Linux, or UNIX), and about 6 terabytes of storage (should be good for next 3 years), and a globally unique publicly reachable IP address. You pick the hostname. Kind regards, Job
participants (2)
-
Hank Nussbacher
-
Job Snijders