{"id":352,"date":"2020-09-26T06:04:00","date_gmt":"2020-09-26T06:04:00","guid":{"rendered":"http:\/\/rtechblog.psg.com\/?p=352"},"modified":"2020-09-29T06:11:02","modified_gmt":"2020-09-29T06:11:02","slug":"rfc-8893-resource-public-key-infrastructure-rpki-origin-validation-for-bgp-export","status":"publish","type":"post","link":"https:\/\/rtechblog.rg.net\/?p=352","title":{"rendered":"RFC 8893: Resource Public Key Infrastructure (RPKI) Origin Validation for BGP Export"},"content":{"rendered":"\n<pre class=\"wp-block-preformatted\"><code>RFC 8893 <\/code>\n<code>Title: Resource Public Key Infrastructure (RPKI) Origin Validation for BGP Export <\/code>\n<code>Author: R. Bush, <\/code>\n        R<code>. Volk,<\/code>\n       <code> J. Heitz<\/code>\n<code>Status: Standards Track <\/code>\n<code>Stream: IETF <\/code>\n<code>Date: September 2020 <\/code>\n<code>Updates: RFC 6811 <\/code>\n<code>URL: https:\/\/www.rfc-editor.org\/info\/rfc8893 <\/code>\n<code>DOI: 10.17487\/RFC8893<\/code><\/pre>\n\n\n\n<p id=\"block-f6010d6a-4208-4259-9884-c8a86d1b8eb3\">A BGP speaker may perform Resource Public Key Infrastructure (RPKI) origin validation not only on routes received from BGP neighbors and routes that are redistributed from other routing protocols, but also on routes it sends to BGP neighbors. For egress policy, it is important that the classification use the &#8216;effective origin AS&#8217; of the processed route, which may specifically be altered by the commonly available knobs, such as removing private ASes, confederation handling, and other modifications of the origin AS.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>RFC 8893 Title: Resource Public Key Infrastructure (RPKI) Origin Validation for BGP Export Author: R. Bush, R. Volk, J. Heitz Status: Standards Track Stream: IETF Date: September 2020 Updates: RFC 6811 URL: https:\/\/www.rfc-editor.org\/info\/rfc8893 DOI: 10.17487\/RFC8893 A BGP speaker may perform Resource Public Key Infrastructure (RPKI) origin validation not only on routes received from BGP neighbors [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12,9,7],"tags":[],"class_list":["post-352","post","type-post","status-publish","format-standard","hentry","category-ietf","category-routers","category-security"],"_links":{"self":[{"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/posts\/352","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=352"}],"version-history":[{"count":3,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/posts\/352\/revisions"}],"predecessor-version":[{"id":355,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=\/wp\/v2\/posts\/352\/revisions\/355"}],"wp:attachment":[{"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=352"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=352"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rtechblog.rg.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=352"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}