Creating ROAs

The RPKI module can be accessed from the [Services] / [RPKI] option in the context menu.

In the RPKI section you will find the ROA creation interface. The option [Create an ROA] will allow you to create a single ROA: 

1) The first step for creating the ROA is to enter the following information:

• [Prefix/Length]: Block and prefix for which you wish to create the ROA.
• [Maximum length]: Prefix of the most specific block for which you wish to allow announcements.
• [ASN]: ASN that will advertise the block.

In this example, the ROA validates block 201.219.252.0/22 advertisements made by AS264845. More specific blocks up to a /23 are also allowed, such as 201.219.252.0/23 and 201.219.254.0/23 via AS264845. The advertisement for block 201.219.248.0/21 will be classified as “Not found,” as the ROA is not defined for blocks larger than 201.219.252.0/22. Finally, an advertisement via a different ASN will be Invalid.

Once you click [Guardar], you will have the option to [Confirm], [Preview], or [Cancel] the changes.

2) If you click [Confirm], the specified ROA will be created, and the following confirmation message will be displayed:

If you wish to preview how the ROA will affect your announcements before confirming the changes, select [Preview]. For more information on how the preview feature works, go to: [LINK TO “PREVIEW”]