On Wed, May 02, 2018 at 08:07:16PM +0200, Gert Doering wrote:
> The information I was looking for is nicely visible, though... and
> what I was afraid I'd see... too much "N". The only "I" is something
> I was aware but had forgotten about ;-) - a sink-a-more-specific-/24
> test that nicely exposes the problem of "strict /22" ROAs.
"problem" - just create a separate additional ROA for the /24!
I recommend to make separate ROAs for everything you announce in BGP.
The use of MaxLength is easily abused. See this Internet-Draft for more
considerations:
https://tools.ietf.org/html/draft-ietf-sidrops-rpkimaxlen
Kind regards,
Job