Re: [sig-policy] Comments on prop-059-v001: Using the Resource Public Key Infrastructure to construct validated IRR data

[Randy Bush <randy@psg.com>]

> A route object is not simply a statement by the prefix holder of what
> an AS may announce, but includes the explicit authorization of the AS
> holder.

this is not the case in operational practice.  we're on the real net
now, leave your rfcs at home.

>  2 - Section 2.5.5 of the RIPE Database Update Reference Manual
>      (http://www.ripe.net/db/support/update-reference-manual.pdf) is
>      consistent with the RFC in requiring that route object creation
>      must satisfy several authentication criteria, including that:

the radb and irrd, do not follow that.

>    To be perfectly clear, yet again, to those who may otherwise
>    misconstrue the context of these comments, the above is a personal
>    comment, and in no way is intended to reflect any position of the
>    APNIC Secretariat, now or in the future.

like most of us, perhaps you should not post from your work email address.

randy