Subject: Re: [Sidrops] AS0 testbed at APNIC

From: Job Snijders <[email-masked]>
Date: Thu, 5 Mar 2020 18:16:08 +0000

On Wed, Feb 26, 2020 at 04:27:39PM +1000, George Michaelson wrote:
> If people would like to look at an AS0 state,
> 
> APNIC's AS0 testbed TAL:
> 
> https://registry-testbed.apnic.net/as0-test-ta.tal
> 
> APNIC's AS0 testbed SLURM file:
> 
> https://registry-testbed.apnic.net/as0-test-slurm.json
> 
> ~3500 objects, we do not publish one ROA per prefix to avoid a large
> object set, we do not publish one ROA for all AS0 to avoid a single
> large object parsing burden.
> 
> ~65000 prefixes, because of sparse V6 allocation outcomes fragmenting
> the allocation spaces.

OpenBSD's rpki-client seems to be able to work with this:

    job@vurt rpki$ doas ftp https://registry-testbed.apnic.net/as0-test-ta.tal
    Trying 203.119.106.17...
    Requesting https://registry-testbed.apnic.net/as0-test-ta.tal
    454 bytes received in 0.00 seconds (1.99 MB/s)
    job@vurt rpki$ doas rpki-client -v -t as0-test-ta.tal
    rpki-client: registry-testbed.apnic.net/as0-test: loading
    rpki-client: period stats: 1 pending repos
    rpki-client: period stats: 1 pending entries
    rpki-client: period stats: 1 pending repos
    rpki-client: period stats: 1 pending entries
    rpki-client: period stats: 1 pending repos
    rpki-client: period stats: 1 pending entries
    rpki-client: period stats: 1 pending repos
    rpki-client: period stats: 1 pending entries
    rpki-client: period stats: 1 pending repos
    rpki-client: period stats: 1 pending entries
    rpki-client: period stats: 1 pending repos
    rpki-client: period stats: 1 pending entries
    rpki-client: registry-testbed.apnic.net/as0-test: loaded
    rpki-client: all files parsed: generating output
    rpki-client: Route Origin Authorizations: 3525 (0 failed parse, 0 invalid)
    rpki-client: Certificates: 3 (0 failed parse, 0 invalid)
    rpki-client: Trust Anchor Locators: 1
    rpki-client: Manifests: 3 (0 failed parse, 0 stale)
    rpki-client: Certificate revocation lists: 3
    rpki-client: Repositories: 1
    rpki-client: VRP Entries: 62315 (62315 unique)
    job@vurt rpki$ grep -cv :: /var/db/rpki-client/openbgpd
    1399
    job@vurt rpki$ grep -c :: /var/db/rpki-client/openbgpd
    60918
    job@vurt rpki$ doas du -sh /var/cache/rpki-client/registry-testbed.apnic.net/
    20.9M    /var/cache/rpki-client/registry-testbed.apnic.net/

Kind regards,

Job

---

From: George Michaelson <[email-masked]>
Date: Fri, 6 Mar 2020 08:17:23 +1000

Thanks. Much appreciated.

-G