Router Keying for BGPsec, August 2019
- File formats:
- PROPOSED STANDARD
- R. Bush
- sidrops (ops)
Discuss this RFC: Send questions or comments to firstname.lastname@example.org
BGPsec-speaking routers are provisioned with private keys in order to sign BGPsec announcements. The corresponding public keys are published in the Global Resource Public Key Infrastructure (RPKI), enabling verification of BGPsec messages. This document describes two methods of generating the public-private key pairs: router-driven and operator-driven.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 8729.