Skip to content

Commit

Permalink
routinator running
Browse files Browse the repository at this point in the history
  • Loading branch information
AlexanderBand committed Jan 10, 2019
1 parent 0c6d2d1 commit b5ed2d4
Showing 1 changed file with 41 additions and 67 deletions.
108 changes: 41 additions & 67 deletions source/routinator/running.rst
Original file line number Diff line number Diff line change
@@ -1,13 +1,5 @@
.. _doc_routinator_running:

.. note:: The Routinator comes pre-installed with the Trust Anchor Locators (TALs)
of four out of the five RIRs. The ARIN TAL is not automatically loaded,
as users must confirm their acceptance of the `ARIN Relying Party Agreement
(RPA) <https://www.arin.net/resources/rpki/tal.html>`_.

When running the Routinator for the first time, follow the instructions
closely to download and include the ARIN TAL and get the full RPKI data set.

Running
=======

Expand All @@ -17,39 +9,53 @@ and providing the service for routers to access this list via a protocol
known as RPKI-to-Router protocol (RTR).

These (and all other functions) of Routinator are accessible on the
command line via sub-commands. The commands are ``vrps`` and ``rtrd``,
respectively.
command line via sub-commands. The commands are:

:vrps:
Produces a list of Validated ROA Payload

:rtrd:
Starts the RTR server

:man:
Display the manual page

.. Tip:: The manual page is available online on the `NLnetLabs documentation site
<https://www.nlnetlabs.nl/documentation/rpki/routinator/>`_.

First Launch
------------

.. WARNING:: The Routinator comes pre-installed with the Trust Anchor Locators (TALs)
of four out of the five RIRs. The ARIN TAL is not automatically loaded,
as users must confirm their acceptance of the `ARIN Relying Party Agreement
(RPA) <https://www.arin.net/resources/rpki/tal.html>`_.

To see if the Routinator is configured correctly, it is recommended to have it print
a list of Validated ROA Payload and increase the log level using ``-v``:

.. code-block:: bash
routinator -v vrps
When you run the Routinator for the very first time, it will create
``$HOME/.rpki-cache``, put the Trust Anchor Locators (TALs) of the
five RIRs there, and then complain that ARIN’s TAL is in fact not really there.

Follow the instructions provided and try again. You can also add
additional trust anchors by simple dropping their TAL file in RFC 7730
format into ``$HOME/.rpki-cache/tals``.

Now Routinator will rsync the entire RPKI repository to your machine
(which will take a while during the first run), validate it and produce
a long list of AS numbers and prefixes.


Printing a list of valid route origins
--------------------------------------

The Routinator can print a list of valid route origins in four different formats:

========= ===============================================================================
csv The list is formatted as lines of comma-separated values of the prefix in
slash notation, the maximum prefix length, the autonomous system number,
and an abbreviation for the trust anchor the entry is derived from. The
latter is the name of the TAL file without the extension *.tal*. This is
the default format used if the ``-f`` option is missing.
json The list is placed into a JSON object with a single element *roas* which
contains an array of objects with four elements each: The autonomous system
number of the network authorised to originate a prefix in *asn*, the prefix
in slash notation in *prefix*, the maximum prefix length of the announced route
in *maxLength*, and the trust anchor from which the authorisation was derived
in *ta*. This format is identical to that produced by the RIPE NCC Validator
except for different naming of the trust anchor. The Routinator uses the name
of the TAL file without the extension *.tal* whereas the RIPE NCC Validator
has a dedicated name for each.
openbgpd Choosing this format causes the Routinator to produce a *roa-set*
configuration item for the OpenBGPD configuration.
rpsl This format produces a list of RPSL objects with the authorisation in the
fields *route*, *origin*, and *source*. In addition, the fields *descr*,
*mnt-by*, *created*, and *last-modified*, are present with more or less
meaningful values.
none This format produces no output whatsoever.
========= ===============================================================================


:csv:
The list is formatted as lines of comma-separated values of the prefix in
slash notation, the maximum prefix length, the autonomous system number,
Expand All @@ -74,39 +80,7 @@ none This format produces no output whatsoever.
fields *route*, *origin*, and *source*. In addition, the fields *descr*,
*mnt-by*, *created*, and *last-modified*, are present with more or less
meaningful values.
:none:
This format produces no output whatsoever.




Usage
"""""

.. code-block:: bash
routinator vrps
If this is the first time you’ve been using the Routinator, it will create ``$HOME/.rpki-cache``, put the Trust Anchor Locators (TALs) of the five RIRs there,
and then complain that ARIN’s TAL is in fact not really there.

Follow the instructions provided and try again. You can also add
additional trust anchors by simple dropping their TAL file in RFC 7730
format into ``$HOME/.rpki-cache/tals``.

Now Routinator will rsync the entire RPKI repository to your machine
(which will take a while during the first run), validate it and produce
a long list of AS numbers and prefixes.

Information about additional command line arguments is available via the
``-h`` option or you can look at the more detailed man page via the ``man``
sub-command:

.. code-block:: bash
routinator man

It is also available online on the `NLnetLabs documentation site <https://www.nlnetlabs.nl/documentation/rpki/routinator/>`.

Feeding a Router with RPKI-RTR
------------------------------
Expand Down

0 comments on commit b5ed2d4

Please sign in to comment.