1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
|
# $Id$
#
# Copyright (C) 2015--2016 Parsons Government Services ("PARSONS")
# Portions copyright (C) 2014 Dragon Research Labs ("DRL")
# Portions copyright (C) 2010--2012 Internet Systems Consortium ("ISC")
#
# Permission to use, copy, modify, and distribute this software for any
# purpose with or without fee is hereby granted, provided that the above
# copyright notices and this permission notice appear in all copies.
#
# THE SOFTWARE IS PROVIDED "AS IS" AND PARSONS, DRL, AND ISC DISCLAIM
# ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED
# WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL
# PARSONS, DRL, OR ISC BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR
# CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
# OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
# NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION
# WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
"""
Generate IRR route and route6 objects from ROAs.
"""
import os
import sys
import argparse
import errno
import rpki.x509
from socket import gethostname
from textwrap import dedent
from time import time, strftime, gmtime, asctime
args = None
class route(object):
"""
Interesting parts of a route object.
"""
def __init__(self, label, uri, asnum, date, prefix, prefixlen, max_prefixlen):
self.label = label
self.uri = uri
self.asn = asnum
self.date = date
self.prefix = prefix
self.prefixlen = prefixlen
self.max_prefixlen = self.prefixlen if max_prefixlen is None else max_prefixlen
def __cmp__(self, other):
result = cmp(self.asn, other.asn)
if result == 0:
result = cmp(self.prefix, other.prefix)
if result == 0:
result = cmp(self.prefixlen, other.prefixlen)
if result == 0:
result = cmp(self.max_prefixlen, other.max_prefixlen)
if result == 0:
result = cmp(self.date, other.date)
return result
def __str__(self):
lines = "\n" if args.email else ""
lines += dedent('''\
{self.label:<14s}{self.prefix}/{self.prefixlen}
descr: {self.prefix}/{self.prefixlen}-{self.max_prefixlen}
origin: AS{self.asn:d}
notify: {args.notify}
mnt-by: {args.mnt_by}
changed: {args.changed_by} {self.date}
source: {args.source}
''').format(self = self, args = args)
if args.password is not None:
lines += "override: {}\n".format(args.password)
return lines
def write(self, output_directory):
name = "{0.prefix}-{0.prefixlen}-{0.max_prefixlen}-AS{0.asn:d}-{0.date}".format(self)
with open(os.path.join(output_directory, name), "w") as f:
f.write(str(self))
class route_list(list):
"""
A list of route objects.
"""
def __init__(self, rcynic_dir):
for root, dirs, files in os.walk(rcynic_dir):
for f in files:
if f.endswith(".roa"):
path = os.path.join(root, f)
uri = "rsync://" + path[len(rcynic_dir):].lstrip("/")
roa = rpki.x509.ROA(DER_file = path)
roa.extract()
assert roa.get_POW().getVersion() == 0, "ROA version is {:d}, expected 0".format(roa.get_POW().getVersion())
asnum = roa.get_POW().getASID()
notBefore = roa.get_POW().certs()[0].getNotBefore().strftime("%Y%m%d")
v4, v6 = roa.get_POW().getPrefixes()
if v4 is not None:
for prefix, prefixlen, max_prefixlen in v4:
self.append(route("route:", uri, asnum, notBefore, prefix, prefixlen, max_prefixlen))
if v6 is not None:
for prefix, prefixlen, max_prefixlen in v6:
self.append(route("route6:", uri, asnum, notBefore, prefix, prefixlen, max_prefixlen))
self.sort()
for i in xrange(len(self) - 2, -1, -1):
if self[i] == self[i + 1]:
del self[i + 1]
def email_header(f):
if args.email:
now = time()
f.write(dedent('''\
From {from_} {ctime}
Date: {date}
From: {from_}
Subject: Fake email header to make irr_rpsl_submit happy
Message-Id: <{pid}.{seconds}@{hostname}>
''').format(from_ = args.from_,
ctime = asctime(gmtime(now)),
date = strftime("%d %b %Y %T %z", gmtime(now)),
pid = os.getpid(),
seconds = now,
hostname = gethostname()))
def main():
global args
whoami = "{}@{}".format(os.getlogin(), gethostname())
parser = argparse.ArgumentParser(description = __doc__)
parser.add_argument("-c", "--changed_by", default = whoami, help = "override \"changed:\" value")
parser.add_argument("-f", "--from", dest="from_", default = whoami, help = "override \"from:\" header when using --email")
parser.add_argument("-m", "--mnt_by", default = "MAINT-RPKI", help = "override \"mnt-by:\" value")
parser.add_argument("-n", "--notify", default = whoami, help = "override \"notify:\" value")
parser.add_argument("-p", "--password", help = "specify \"override:\" password")
parser.add_argument("-s", "--source", default = "RPKI", help = "override \"source:\" value")
group = parser.add_mutually_exclusive_group()
group.add_argument("-e", "--email", action = "store_true", help = "generate fake RFC 822 header suitable for piping to irr_rpsl_submit")
group.add_argument("-d", "--output-directory", help = "write route and route6 objects to directory OUTPUT, one object per file")
parser.add_argument("authenticated_directory", help = "directory tree containing authenticated rcynic output")
args = parser.parse_args()
if not os.path.isdir(args.authenticated_directory):
sys.exit('"{}" is not a directory'.format(args.authenticated_directory))
routes = route_list(args.authenticated_directory)
if args.output_directory:
if not os.path.isdir(args.output_directory):
os.makedirs(args.output_directory)
for r in routes:
r.write(args.output_directory)
else:
email_header(sys.stdout)
for r in routes:
sys.stdout.write(str(r))
if __name__ == "__main__":
main()
|
