[routing-wg] RPKI Route Origin Validation and AS3333

On 21/03/2021 13:43, Lukas Tribus wrote:
> Hello,
> 
> On Sat, 20 Mar 2021 at 20:06, Hank Nussbacher <hank at interall.co.il> wrote:
>> I am not sure it is possible, but I would love to see some centralized
>> site where all dropped ROV invalids would appear.  This way I can see if
>> I have a problem as well as if someone tried to hijack my space but was
>> thwarted by the drop.
> 
> Monitoring ROV invalids in other people's networks (validators;
> routers) is not possible and I doubt it ever will be.
> 

We managed to create "Certificate Transparency" logs where all CAs send 
their certificates so with a little bit of IETF geekery I am sure an RFC 
can be designed so that everyone dumps their RPKI drops into some 
central stream/repository.  Yeah I know - I'm dreaming :-)

Regards,
Hank

Caveat: The views expressed above are solely my own and do not express 
the views or opinions of my employer