diff options
Diffstat (limited to 'scripts/rcynic-lta.yaml')
| -rw-r--r-- | scripts/rcynic-lta.yaml | 64 |
1 files changed, 45 insertions, 19 deletions
diff --git a/scripts/rcynic-lta.yaml b/scripts/rcynic-lta.yaml index c80224d2..076f0e5d 100644 --- a/scripts/rcynic-lta.yaml +++ b/scripts/rcynic-lta.yaml @@ -13,27 +13,53 @@ tal-directory: keyfile: /u/sra/rpki/subvert-rpki.hactrn.net/trunk/scripts/rcynic-lta.key -shared-strings: - - - &GB1 | - BEGIN:VCARD - VERSION:4.0 - FN:R0 - ORG:Organizational Entity - ADR;TYPE=WORK:;;42 Twisty Passage;Deep Cavern;WA;98666;U.S.A. - TEL;TYPE=VOICE,TEXT,WORK;VALUE=uri:tel:+1-666-555-1212 - TEL;TYPE=FAX,WORK;VALUE=uri:tel:+1-666-555-1213 - EMAIL:human@example.com - END:VCARD +common: + + - &VCARD-1 | + BEGIN:VCARD + VERSION:4.0 + FN:R0 + ORG:Organizational Entity + ADR;TYPE=WORK:;;42 Twisty Passage;Deep Cavern;WA;98666;U.S.A. + TEL;TYPE=VOICE,TEXT,WORK;VALUE=uri:tel:+1-666-555-1212 + TEL;TYPE=FAX,WORK;VALUE=uri:tel:+1-666-555-1213 + EMAIL:human@example.com + END:VCARD + - &GBR-1 { gbr: *VCARD-1 } + + - &VCARD-2 | + BEGIN:VCARD + VERSION:4.0 + ORG:Epilogue Technology Corporation + EMAIL:sra@epilogue.com + END:VCARD + - &GBR-2 { gbr: *VCARD-2 } + + - &ROA-666 { roa: { asn: 666 } } constraints: - - prefix: 10.0.0.0/8 - roa: { asn: 666, maxlen: 16 } - ghostbuster: *GB1 + - prefix: 10.0.0.0/8 + add: [ { roa: { asn: 666, maxlen: 16 }}, *GBR-1 ] + + - prefix: 192.168.0.0/16 + drop: all + + - asn: 666 + add: [ *GBR-1 ] + + - prefix: 128.224.0.0/16 + drop: all + add: [ *GBR-2 ] + + - prefix: 128.224.1.0/24 + add: [ *GBR-2, *ROA-666 ] + + - prefix: 128.224.2.0/24 + add: [ *GBR-2, *ROA-666 ] - - prefix: 192.168.0.0/16 + - prefix: 149.20.0.0/16 + add: [ *ROA-666 ] - - asn: 666 - ghostbuster: *GB1 - #router-cert: { ski: "B8:14:5D:13:53:7D:AE:6E:E2:E3:95:84:A8:99:EB:7D:1A:7D:E5:DF" } + - prefix: 2001:4f8:3:d::/64 + add: [ *ROA-666 ] |