Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: BGP Security and PKI Hierarchies (was: Re: Wifi Security)

  • From: George Michaelson
  • Date: Wed Nov 23 22:45:59 2005

On Wed, 23 Nov 2005 17:42:21 -1000
Randy Bush <randy@psg.com> wrote:

> > We need prefix ownership certs; these need a special field
> > identifying the prefix owned.  (See RFC 3779, which also describes
> > AS certificates).  We need the latter in CA form, for delegation.

yes. the resource certs we are making, the test certs, have CA bit set,
and include RFC3779 fields for ASN, IPv4 and IPv6 ranges, using the
range ASN.1 notation for ASN ranges.

> 
> sorry to complicate, by iana allocates as ranges which are then
> subbed to rirs.  so the ca bit could be set on these

for the APNIC resource certificates in test, they are.

cheers

-George

> 
> randy
> 


-- 
George Michaelson       |  APNIC                 
Email: ggm@apnic.net    |  PO Box 2131 Milton    
Phone: +61 7 3858 3150  |  QLD 4064 Australia    
  Fax: +61 7 3858 3199  |  http://www.apnic.net  




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.