Search RFCs

RFC Editor

Found 2 records.

Status:Verified (2)

RFC 8360, "Resource Public Key Infrastructure (RPKI) Validation Reconsidered", April 2018

Errata ID:5638
Status: Verified
Type: Technical
Publication Format(s) : TEXT
Reported By: Alberto Leiva Popper
Date Reported: 2019-02-13
Verifier Name: Warren Kumari (Ops AD)
Date Verified: 2019-02-13

Section 4.2.4.4 says:

   7.  Compute the VRS-IP and VRS-AS set values as indicated below:       *  If the IP Address Delegation extension is present in          certificate x and x=1, set the VRS-IP to the resources found          in this extension.       *  If the IP Address Delegation extension (...)       *  If the IP Address Delegation extension (...)       *  If the IP Address Delegation extension is present in          certificate x and x=1, set the VRS-IP to the resources found          in this extension.       *  If the AS Identifier Delegation extension (...)       *  If the AS Identifier Delegation extension (...)

It should say:

   7.  Compute the VRS-IP and VRS-AS set values as indicated below:       *  If the IP Address Delegation extension is present in          certificate x and x=1, set the VRS-IP to the resources found          in this extension.       *  If the IP Address Delegation extension (...)       *  If the IP Address Delegation extension (...)       *  If the AS Identifier Delegation extension is present in          certificate x and x=1, set the VRS-AS to the resources found          in this extension.       *  If the AS Identifier Delegation extension (...)       *  If the AS Identifier Delegation extension (...)

Notes:

There seems to be a copy-paste error.

There are two bullet points explaining the initialization of VRS-IP, and none explaining the initialization of VRS-AS.

All the evidence suggests that the two extensions (IP Address Delegation and AS Identifier Delegation) are meant to be handled similarly, so I believe that the last three bullet points are supposed to perfectly mirror the first three.

Errata ID:5870
Status: Verified
Type: Technical
Publication Format(s) : TEXT
Reported By: Russ Housley
Date Reported: 2019-10-04
Verifier Name: Warren Kumari (Ops AD)
Date Verified: 2019-10-08

Section 4.2.3 says:

       ext-pe-autonomousSysIds-v2 EXTENSION ::= {         SYNTAX ASIdentifiers         IDENTIFIED BY id-pe-autonomousSysIds-v2       }       id-pe-autonomousSysIds OBJECT IDENTIFIER ::= { id-pe 29 }

It should say:

       ext-pe-autonomousSysIds-v2 EXTENSION ::= {         SYNTAX ASIdentifiers         IDENTIFIED BY id-pe-autonomousSysIds-v2       }       id-pe-autonomousSysIds-v2 OBJECT IDENTIFIER ::= { id-pe 29 }

Notes:

The "-v2" is missing from the identifier. It is needed for the ASN.1 module to compile properly.

Report New Errata