On Fri, Sep 30, 2011 at 11:39:21AM +0900, Randy Bush wrote:
| if i publish a roa for 10.0.0.0/16-16 for AS 42 (and there are no other
| roas for 10/...)
|
| no announcement of 10.0.0.0/16 or any longer prefix thereof from any AS
| may be marked NOT FOUND, after all, a covering roa is there.
|
| any announcement of any prefixes in that space, from /16 to /32, from an
| AS other than 42 are INVALID. this is the purpose of the exercise.
i have a question then:
what is the conceptual difference between
10.0.0.0/16-16 and 10.0.0.0/16-32
following the logic above ?
my read of 10.0.0.0/16-16 is an exact match
and 10.0.0.0/16-32 is a subtree match ('orlonger' in JUNOS policy terms ;-))
_______________________________________________
sidr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/sidr