Re: [sidr] ROA management recommendations for users

Byron Ellacott <bje@apnic.net> Fri, 16 September 2011 01:34 UTC

Return-Path: <bje@apnic.net>
X-Original-To: sidr@ietfa.amsl.com
Delivered-To: sidr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CDBE11E80B1 for <sidr@ietfa.amsl.com>; Thu, 15 Sep 2011 18:34:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.6
X-Spam-Level:
X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id usm0NVa8X3nF for <sidr@ietfa.amsl.com>; Thu, 15 Sep 2011 18:34:25 -0700 (PDT)
Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by ietfa.amsl.com (Postfix) with ESMTP id 343FB11E80A2 for <sidr@ietf.org>; Thu, 15 Sep 2011 18:34:19 -0700 (PDT)
Received: from [IPv6:2001:dc0:a000:4:9d8d:d0bc:d275:51eb] (unknown [IPv6:2001:dc0:a000:4:9d8d:d0bc:d275:51eb]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 7A797B689A; Thu, 15 Sep 2011 21:36:31 -0400 (EDT)
Mime-Version: 1.0 (Apple Message framework v1244.3)
Content-Type: multipart/signed; boundary="Apple-Mail=_E26F41CC-B702-464A-AC90-E8F29E8516EC"; protocol="application/pkcs7-signature"; micalg="sha1"
From: Byron Ellacott <bje@apnic.net>
In-Reply-To: <CA+z-_EViJv72KMbZNhAodftYBhJWdWXLBFZvD8uGB+Avh-Ae1A@mail.gmail.com>
Date: Fri, 16 Sep 2011 11:36:24 +1000
Message-Id: <266A2D14-C3AC-4342-9270-4F5F0ADF135E@apnic.net>
References: <CA+z-_EViJv72KMbZNhAodftYBhJWdWXLBFZvD8uGB+Avh-Ae1A@mail.gmail.com>
To: carlos@lacnic.net
X-Mailer: Apple Mail (2.1244.3)
Cc: sidr@ietf.org
Subject: Re: [sidr] ROA management recommendations for users
X-BeenThere: sidr@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: Secure Interdomain Routing <sidr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidr>, <mailto:sidr-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sidr>
List-Post: <mailto:sidr@ietf.org>
List-Help: <mailto:sidr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidr>, <mailto:sidr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Sep 2011 01:34:25 -0000

Hi Carlos,

On 16/09/2011, at 8:05 AM, Carlos Martinez-Cagnazzo wrote:

> Broadly speaking, and looking at what people have created in the
> repositories so far, there seem to be two different views on the
> matter:

APNIC made the change to support sidr-origin-ops' MUST about prefix length recently, but we did not re-issue ROAs.  If you're looking at objects in our repository, check the notBefore date to know what the most current behaviour is :-)

  Byron