Clarifications to BGP Origin Validation Based on Resource Public Key Infrastructure (RPKI)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 5
Abstract: Deployment of BGP origin validation based on Resource Public Key Infrastructure (RPKI) is hampered by, among other things, vendor misimplementations in two critical areas: which routes are validated and whether policy is applied when not specified by configuration. This document is meant to clarify possible misunderstandings causing those misimplementations; it thus updates RFC 6811 by clarifying that all prefixes should have their validation state set and that policy must not be applied without operator configuration.
Publication Date: 2018-09-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8481
Link: https://doi.org/10.17487/RFC8481
Author(s): Randy Bush
Keyword(s): Security, Routing

Latest version of IETF RFC 8481

Document Versions — IETF RFC 8481

▶ IETF RFC 8481 (2018-09-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 4271 [Active*]
IETF RFC 6480 [Active*]
IETF RFC 6482 [Superseded*]
IETF RFC 6811 [Active*]
RFC8097 — RFC8097 EXTERNAL
IETF RFC 8174 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8481.json

Amends:

IETF RFC 6811 [Active*]

Amended by:

RFC9324 NOT IN REGISTRY

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8481, Clarifications to BGP Origin Validation Based on Resource Public Key Infrastructure (RPKI). Available at https://doi.org/10.17487/RFC8481

Snippet:

IETF RFC 8481, Clarifications to BGP Origin Validation Based on Resource Public Key Infrastructure (RPKI). Available at https://doi.org/10.17487/RFC8481

HTML (ISO 690 compliant)

Preview:

IETF RFC 8481, Clarifications to BGP Origin Validation Based on Resource Public Key Infrastructure (RPKI). Available at https://doi.org/10.17487/RFC8481

Snippet:

<span class="citation"><cite>IETF RFC 8481</cite>, Clarifications to BGP Origin Validation Based on Resource Public Key Infrastructure (RPKI). Available at <a href="https://doi.org/10.17487/RFC8481" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8481</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8481, Clarifications to BGP Origin Validation Based on Resource Public Key Infrastructure (RPKI)
doi: 10.17487/RFC8481
url: https://doi.org/10.17487/RFC8481

Snippet:

<li>
<cite id="bib-rfc8481">IETF RFC 8481</cite>, Clarifications to BGP Origin Validation Based on Resource Public Key Infrastructure (RPKI)
<span class="doi">10.17487/RFC8481</span>
</li>

Referenced By

IETF RFC 8893 [Active*]