BGP Route Validation with RPKI-RTR Operational Commands

BGP RPKI-RTR Show Commands

The BGP RPKI-RTR show commands provide detailed information about the BGP RPKI-RTR route validation operations.

Validation Session

The show validation session command and options provide information about the TCP session information between RBFS and the local caches.

Syntax:

show validation session <option>

Option Description

Option	Description
`-`	Without any option, it displays information about all the validation session.
`cache`	Displays validation session information filtered by a specific cache address.
`detail`	Provides detailed information about each validation session.
`instance`	Displays validation session information for a specific instance.
`source`	Displays validation session information filtered by a specific source IP address.

-

Without any option, it displays information about all the validation session.

cache

Displays validation session information filtered by a specific cache address.

detail

Provides detailed information about each validation session.

instance

Displays validation session information for a specific instance.

source

Displays validation session information filtered by a specific source IP address.

Example: Validation session

supervisor@rtbrick: op> show validation session
Instance: default
  Cache                        Source                    State         Up/Down Time      IPv4 PDU Rcvd    IPv6 PDU Rcvd
  192.0.2.102                  192.0.2.101               Established   0d:00h:04m:06s           658188           188630
  2001:db8:101:1::2            2001:db8:101:1::1         Established   0d:00h:04m:06s           658188           188630

api To access the Operational State API that corresponds to this CLI, click include::common:partial$operational_api_links.adoc[tag=show_validation].

Validation Cache-in

The show validation cache-in command provides cache information.

Syntax:

show validation cache-in <option>

The show command and options provide detailed information about the received validation route records from the local caches.

Option Description

Option	Description
`-`	Without any option, it displays information about the prefix validation data for all caches and source IPs.
`afi`	Filters the cache-in validation data based on the address family, such as IPv4 or IPv6.
`cache`	Displays validation information related to a specific cache address.
`instance`	Filters the validation data for a specific instance.
`prefix`	Displays validation information for a specific prefix.

-

Without any option, it displays information about the prefix validation data for all caches and source IPs.

afi

Filters the cache-in validation data based on the address family, such as IPv4 or IPv6.

cache

Displays validation information related to a specific cache address.

instance

Filters the validation data for a specific instance.

prefix

Displays validation information for a specific prefix.

api To access the Operational State API that corresponds to this CLI, click include::common:partial$operational_api_links.adoc[tag=show_validation].

Example: Information for the specific cache.

supervisor@rtbrick: op> show validation cache-in instance default cache 192.0.2.102 | head -n 15
Instance: default, AFI: ipv4
  Cache IP: 192.0.2.102, Source IP: 192.0.2.101, Total Prefixes: 658188
    Prefix                                     As Num    Max Len
    80.128.0.0/11                                   0         11
    96.160.0.0/11                                   0         11
    166.240.0.0/12                                  0         12
    174.8.0.0/13                                    0         13
    174.80.0.0/13                                   0         13
    69.96.0.0/13                                    0         13
    166.152.0.0/13                                  0         13
    166.160.0.0/13                                  0         13
    31.64.0.0/14                                    0         14
    97.68.0.0/14                                    0         14
    31.72.0.0/14                                    0         14
    23.84.0.0/14                                    0         14

Validation Database

The validation database contains preferred validation route records based the cache preference. The show validation database provides detailed information about the validation database, which is used for prefix validation.

Syntax:

show validation database <option>

Option Description

Option	Description
`-`	Without any option, it displays the information about all validation databases.
`afi`	Filters the validation database based on the address family, such as IPv4 or IPv6.
`as-num`	Displays validation information for a specific Autonomous System (AS).
`cache`	Displays database entries associated with a specific cache address.
`instance`	Displays database information for a specific instance.
`prefix`	Filters the database to show validation details for a specific prefix.
`summary`	Provides a summary of the validation database.

-

Without any option, it displays the information about all validation databases.

afi

Filters the validation database based on the address family, such as IPv4 or IPv6.

as-num

Displays validation information for a specific Autonomous System (AS).

cache

Displays database entries associated with a specific cache address.

instance

Displays database information for a specific instance.

prefix

Filters the database to show validation details for a specific prefix.

summary

Provides a summary of the validation database.

api To access the Operational State API that corresponds to this CLI, click include::common:partial$operational_api_links.adoc[tag=show_validation].

Example 1: Validation database information

supervisor@rtbrick: op> show validation database | head -n 15
Instance: default, AFI: ipv4
  Prefix                                     Cache                As Num    Max Len
  1.0.0.0/24                                 2001:db8:101:1::2     13335         24
  3.0.0.0/10                                 2001:db8:101:1::2     16509         10
  3.0.0.0/15                                 2001:db8:101:1::2     16509         15
  5.0.0.0/19                                 2001:db8:101:1::2     29256         19
  5.0.0.0/21                                 2001:db8:101:1::2     29256         21
  12.0.0.0/22                                2001:db8:101:1::2      6269         22
  20.0.0.0/11                                2001:db8:101:1::2      8075         11
  23.0.0.0/12                                2001:db8:101:1::2     20940         12
  23.0.0.0/24                                2001:db8:101:1::2     20940         24
  24.0.0.0/12                                2001:db8:101:1::2      7922         12
  24.0.0.0/16                                2001:db8:101:1::2     33659         16
  27.0.0.0/22                                2001:db8:101:1::2     16509         24
  31.0.0.0/16                                2001:db8:101:1::2      8374         16

Example 2: Validation database information for a specific AS number.

supervisor@rtbrick: op> show validation database as-num 13335 | head -n 15
Instance: default, AFI: ipv4
  Prefix                                     Cache                As Num    Max Len
  1.0.0.0/24                                 2001:db8:101:1::2     13335         24
  104.16.0.0/20                              2001:db8:101:1::2     13335         20
  104.17.0.0/20                              2001:db8:101:1::2     13335         20
  104.18.0.0/20                              2001:db8:101:1::2     13335         20
  117.18.0.0/20                              2001:db8:101:1::2     13335         24
  104.19.0.0/20                              2001:db8:101:1::2     13335         20
  104.20.0.0/20                              2001:db8:101:1::2     13335         20
  143.20.0.0/24                              2001:db8:101:1::2     13335         24
  104.21.0.0/19                              2001:db8:101:1::2     13335         19
  104.21.0.0/20                              2001:db8:101:1::2     13335         20
  104.22.0.0/20                              2001:db8:101:1::2     13335         20
  104.22.0.0/24                              2001:db8:101:1::2     13335         24
  104.24.0.0/20                              2001:db8:101:1::2     13335         20

Example 3: Validation database summary

supervisor@rtbrick: op> show validation database summary | head -n 15
Instance: default
  IPv4 Prefix: 575747
  IPv6 Prefix: 160567

Clear Commands

Clear Validation Session

The clear validation session command and options are used to remove or reset data related to validation session.

Syntax:

clear validation session <option>

Option Description

Option	Description
`all`	Resets all existing validation sessions (without clearing the database).
`all soft`	Refreshes the only the validation database by sending a reset query to the cache.
`instance`	Resets validation sessions per instance.

all

Resets all existing validation sessions (without clearing the database).

all soft

Refreshes the only the validation database by sending a reset query to the cache.

instance

Resets validation sessions per instance.

Example: Clearing validation session options

clear validation session all
clear validation session all soft
clear validation session instance vrf-blue
clear validation session instance vrf-blue 192.168.5.50 source 192.168.5.20 soft

api To access the Operational State API that corresponds to this CLI, click include::common:partial$operational_api_links.adoc[tag=clear_validation_session].

Clear Validation Database

The clear validation database command is used to remove entries in the validation database.

Syntax:

clear validation database <option>

Option Description

Option	Description
`all`	Clears all entries in the validation database.
`instance`	Clears validation database for a specific instance.

all

Clears all entries in the validation database.

instance

Clears validation database for a specific instance.

Example: Clearing validation database options

clear validation database all
clear validation database instance vrf-blue
clear validation database instance vrf-blue 192.168.5.50 source 192.168.5.20

api To access the Operational State API that corresponds to this CLI, click include::common:partial$operational_api_links.adoc[tag=clear_validation_database].