Validating a Route

• 1 address attestation from each organization owning an address block(s) in the NLRI
• 1 address allocation certificate from each organization owning address blocks in the NLRI
• 1 route attestation from every AS along the path (AS1 to ASn), where the route attestation for ASk specifies the NLRI and the AS Path up to that point (AS1 through ASk+1)
• 1 certificate for each AS or router along the path (AS1 to ASn) to use to check signatures on the route attestations
• and, of course, all the relevant CRLs must have been verified

To validate a route from ASn, ASn+1 needs:

Previous slide

Next slide

Back to first slide

View graphic version