Address Attestation

• Indicates that the final AS listed in the UPDATE is authorized by the owner of those address blocks to advertise the address blocks (NLRI) in the UPDATE

• Includes identification of:

  • owner’s certificate
  • AS to be advertising the address blocks
  • address blocks
  • expiration date

• Digitally signed by owner of the address blocks, traceable up to the IANA via certificate chain

• Used to protect BGP from erroneous UPDATEs (authenticated but misbehaving or misconfigured BGP speakers)

Previous slide

Next slide

Back to first slide

View graphic version