Show RPKI status of monitored prefixes

[kruisdraad]

Currently the dashboard lists knowns the monitored (sub)prefixes. It would be great if the engine would (if RPKI enable) check all monitored prefixes against RPKI (bonus for doing IRRDB too) against 'administrative' errors or not implementing RPKI/route objects at all.

[slowr]

Hey! Thanks for submitting the issue!
Could you provide a bit more details/example of what you want the end-product to be?

[kruisdraad]

if you monitor 8.8.8.0/24 then

• This IP space should be checked for IRR and RPKI against provided data
• Under tab monitoring it should like it with the results (e.g. OK OK or OK FAILED, etc)
• On the dashboard a summery, e.g.. X prefixes have administrative issues

This also links to other monitoring, such as visibility which can be added too and alarm raised when massive withdrawels are seen

[vkotronis]

Currently we do this for the hijack-alerted prefixes. We can also implement it for all -monitored- prefixes, but it will come at a performance cost (if we do this per update). Or you mean to do this for the monitored prefixes upon conf time and alert the operator? The latter is also feasible, we should simply understand the exact requirement. Thanks for reporting this!