search

NICMx / FORT-validator

RPKI cache validator
MIT License
49 stars 24 forks source link

"Programming error" error message when a ROA advertise a subset that is not allowed to advertise #3

Closed TheRedTrainer closed 5 years ago

TheRedTrainer commented 5 years ago

When the rpki validator tries to validate a ROA that contains the ip resources 1.128.0.0-1.255.255.255 and its EE it is allowed to sign the ip subset 1.0.0.0-1.255.0.0, the following error message is displayed:

ERR: rsync://localhost/repository/root-roa.roa: Programming error: Unknown comparison value: 7 ERR: rsync://localhost/repository/root-roa.roa: ROA is not allowed to advertise 1.128.0.0/9. DBG: