{"id":6919,"date":"2024-05-22T09:10:42","date_gmt":"2024-05-22T07:10:42","guid":{"rendered":"https:\/\/www.nlogic.no\/?p=6919"},"modified":"2025-08-27T15:19:35","modified_gmt":"2025-08-27T13:19:35","slug":"bgp-route-origin-validation-och-rpki","status":"publish","type":"post","link":"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/","title":{"rendered":"Sikre BGP-infrastrukturen med Route Origin Validation (ROV)"},"content":{"rendered":"<div class=\"nlogic-hero alignfull with-pattern-cubes with-excerpt is-style-light wp-block-nlogic-hero\">\n\t\t\t<div class=\"hero-content container\">\n\t\t\t\t<svg width=\"1221\" height=\"502\" viewBox=\"0 0 1221 502\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\">\n<g opacity=\"0.5\">\n<path d=\"M853.402 388.289L733.648 320.16V183.903\" stroke=\"#111111\" stroke-width=\"0.505025\" stroke-dasharray=\"6.06 6.06\"\/>\n<path d=\"M613.469 388.711L733.646 320.159V183.901\" stroke=\"#111111\" stroke-width=\"0.505025\" stroke-dasharray=\"6.06 6.06\"\/>\n<path d=\"M724.966 185.046C730.337 181.944 736.955 181.944 742.327 185.046L847.051 245.508C852.422 248.609 855.731 254.341 855.731 260.543V381.468C855.731 387.671 852.422 393.402 847.051 396.503L742.327 456.966C736.955 460.067 730.337 460.067 724.966 456.966L620.242 396.503C614.87 393.402 611.561 387.671 611.561 381.468L611.561 260.543C611.561 254.341 614.87 248.609 620.242 245.508L724.966 185.046Z\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M853.293 252.031L736.045 320.391C734.493 321.296 733.539 322.958 733.539 324.754V458.957\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M613.363 252.666L733.648 321.853\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M1095.16 243.27L975.402 175.141V38.883\" stroke=\"#111111\" stroke-width=\"0.505025\" stroke-dasharray=\"6.06 6.06\"\/>\n<path d=\"M855.223 243.691L975.4 175.139V38.8817\" stroke=\"#111111\" stroke-width=\"0.505025\" stroke-dasharray=\"6.06 6.06\"\/>\n<path d=\"M966.724 40.0279C972.095 36.9267 978.713 36.9267 984.084 40.0279L1088.81 100.491C1094.18 103.592 1097.49 109.323 1097.49 115.525V236.451C1097.49 242.653 1094.18 248.384 1088.81 251.485L984.084 311.948C978.713 315.049 972.095 315.049 966.724 311.948L861.999 251.485C856.628 248.384 853.319 242.653 853.319 236.451L853.319 115.525C853.319 109.323 856.628 103.592 862 100.491L966.724 40.0279Z\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M1095.05 107.016L977.799 175.376C976.247 176.281 975.292 177.942 975.292 179.739V313.941\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M855.117 107.641L975.402 176.827\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M1097.7 105.504L1211.26 171.069C1216.73 174.227 1220.1 180.062 1220.1 186.377V307.302C1220.1 313.617 1216.73 319.452 1211.26 322.61L1106.54 383.073C1101.07 386.23 1094.33 386.23 1088.86 383.073L975.301 317.507\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M122.458 252.602L9.76606 316.246C4.2152 319.381 0.782472 325.262 0.782472 331.637V448.439C0.782472 454.814 4.2152 460.695 9.76607 463.83L113.765 522.565C119.16 525.611 125.755 525.611 131.15 522.565L244.133 458.756\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M852.863 234.322L852.864 115.269C852.864 109.011 849.555 103.22 844.165 100.042L741.962 39.7941C736.423 36.529 729.548 36.529 724.009 39.7941L621.807 100.042C616.416 103.22 613.107 109.011 613.107 115.269L613.107 246.506\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M608.391 529.625L488.636 461.496V325.238\" stroke=\"#111111\" stroke-width=\"0.505025\" stroke-dasharray=\"6.06 6.06\"\/>\n<path d=\"M368.457 530.047L488.635 461.495V325.237\" stroke=\"#111111\" stroke-width=\"0.505025\" stroke-dasharray=\"6.06 6.06\"\/>\n<path d=\"M479.954 326.381C485.326 323.28 491.944 323.28 497.315 326.381L602.039 386.844C607.411 389.945 610.72 395.676 610.72 401.879V522.804C610.72 529.006 607.411 534.738 602.039 537.839L497.315 598.302C491.944 601.403 485.326 601.403 479.954 598.302L375.23 537.839C369.859 534.738 366.55 529.006 366.55 522.804L366.55 401.879C366.55 395.676 369.859 389.945 375.23 386.844L479.954 326.381Z\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M608.281 393.367L491.033 461.727C489.481 462.632 488.527 464.294 488.527 466.09V600.293\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M368.352 394.002L488.636 463.189\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M363.383 388.289L243.628 320.16V183.903\" stroke=\"#111111\" stroke-width=\"0.505025\" stroke-dasharray=\"6.06 6.06\"\/>\n<path d=\"M123.449 388.711L243.627 320.159V183.901\" stroke=\"#111111\" stroke-width=\"0.505025\" stroke-dasharray=\"6.06 6.06\"\/>\n<path d=\"M234.946 185.046C240.318 181.944 246.936 181.944 252.307 185.046L357.031 245.508C362.403 248.609 365.712 254.341 365.712 260.543V381.468C365.712 387.671 362.403 393.402 357.031 396.503L252.307 456.966C246.936 460.067 240.318 460.067 234.946 456.966L130.222 396.503C124.851 393.402 121.542 387.671 121.542 381.468L121.542 260.543C121.542 254.341 124.851 248.609 130.222 245.508L234.946 185.046Z\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M363.273 252.031L246.026 320.391C244.473 321.296 243.519 322.958 243.519 324.754V458.957\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<path d=\"M123.344 252.666L243.628 321.853\" stroke=\"#111111\" stroke-width=\"0.630441\"\/>\n<\/g>\n<\/svg>\n\n\t\t\t\t<h1>Sikre BGP-infrastrukturen med Route Origin Validation (ROV)<\/h1>\n\t\t\t\t<div class=\"excerpt\"><p>I denne artikkelen og tilh\u00f8rende lab skal vi se n\u00e6rmere p\u00e5 hvordan du kan sikre BGP-infrastrukturen din med Route Origin Validation (ROV).<\/p>\n<\/div>\n\t\t\t\t\n\t\t\t\t\n\t\t\t<\/div>\n\t\t<\/div>\n<p>I denne artikkelen og tilh\u00f8rende lab skal vi se n\u00e6rmere p\u00e5 hvordan du kan sikre BGP-I denne artikkelen og tilh\u00f8rende lab ser vi n\u00e6rmere p\u00e5 hvordan du kan sikre BGP-infrastrukturen din med <strong>Route Origin Validation (ROV)<\/strong>.<\/p>\n\n\n\n<p>Internett bygger p\u00e5 tillit. Vi stoler p\u00e5 at BGP-naboer kun annonserer egne prefiks. Etter hvert som nettet har vokst, har feil, uvitenhet og ondsinnede hensikter skapt store globale BGP-forstyrrelser.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-hva-er-route-hijacking\">Hva er route hijacking?<\/h2>\n\n\n\n<p>Et alvorlig problem er \u201croute hijacking\u201d. Det skjer n\u00e5r et AS annonserer et prefiks som ikke er deres eget. Dette kan v\u00e6re en feil, for eksempel at et \/22 annonseres som et \/21. <strong>Imidlertid<\/strong> kan det ogs\u00e5 v\u00e6re ondsinnet, hvor noen bevisst fors\u00f8ker \u00e5 trekke til seg trafikk.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-hva-er-route-origin-validation-rov\">Hva er Route Origin Validation (ROV)?<\/h2>\n\n\n\n<p>L\u00f8sningen er ROV, beskrevet i RFC 6811. Ved hjelp av <strong>RPKI (Resource Public Key Infrastructure)<\/strong> kan du signere og verifisere at et AS har rett til \u00e5 annonsere et bestemt prefiks.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-hvordan-fungerer-rov\">Hvordan fungerer ROV?<\/h2>\n\n\n\n<p>ROV bygger p\u00e5 en database med <strong>Route Origin Authorizations (ROA)<\/strong>. Disse opprettes hos din RIR (RIPE, ARIN, LACNIC, AFRINIC, APNIC) eller internt dersom ansvaret er delegert.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-hva-er-en-roa\">Hva er en ROA?<\/h3>\n\n\n\n<p>I en ROA signeres det digitalt at et prefiks kun kan annonseres av et spesifikt AS. Du m\u00e5 logge inn hos RIR-en din og opprette ROAs for alle prefiksene. RIR-en publiserer disse i en database som lastes ned til en lokal cache.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-hvordan-brukes-roa-i-praksis\">Hvordan brukes ROA i praksis?<\/h3>\n\n\n\n<p>En RPKI-klient laster ned databasen til en cache. <strong>Det er denne cachen BGP-ruterne kobler seg til<\/strong> for \u00e5 validere prefikser fra naboer.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-mulige-valideringsresultater\">Mulige valideringsresultater<\/h3>\n\n\n\n<p>N\u00e5r ruteren verifiserer et prefiks, finnes tre utfall:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>NotFound (Unknown):<\/strong> Prefikset mangler ROA. Trafikk tillates.<\/li>\n\n\n\n<li><strong>Valid:<\/strong> Prefikset stemmer med ROA og tillates.<\/li>\n\n\n\n<li><strong>Invalid:<\/strong> Prefikset samsvarer ikke med ROA. Trafikken avvises.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-lab-konfigurer-din-egen-rpki-klient\">Lab: Konfigurer din egen RPKI-klient<\/h2>\n\n\n\n<p>I labben setter vi opp en RPKI-klient og bruker ROV p\u00e5 BGP-ruteren. F\u00f8rst m\u00e5 vi konfigurere en RPKI-klient. Denne henter informasjon fra RIRs og andre kilder. To popul\u00e6re klienter er:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-velg-en-rpki-klient\">Velg en RPKI-klient<\/h4>\n\n\n\n<p>To popul\u00e6re klienter er:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"https:\/\/www.nlnetlabs.nl\/projects\/rpki\/routinator\/\">Routinator<\/a><\/li>\n\n\n\n<li><a href=\"http:\/\/www.rpki-client.org\/\">rpki-client<\/a><\/li>\n<\/ul>\n\n\n\n<p>Begge er enkle \u00e5 sette opp. Derfor g\u00e5r vi ikke gjennom installasjonen her, men viser hvordan du kobler dem til BGP.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"423\" src=\"https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2024\/05\/nLogic-BGP-route-origin-1024x423.png\" alt=\"\" class=\"wp-image-6920\" srcset=\"https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2024\/05\/nLogic-BGP-route-origin-1024x423.png 1024w, https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2024\/05\/nLogic-BGP-route-origin-300x124.png 300w, https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2024\/05\/nLogic-BGP-route-origin-768x317.png 768w, https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2024\/05\/nLogic-BGP-route-origin-1536x634.png 1536w, https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2024\/05\/nLogic-BGP-route-origin.png 2000w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-slik-ser-testmiljoet-ut\">Slik ser testmilj\u00f8et ut<\/h2>\n\n\n\n<p>AS 800 annonserer to prefiks til AS 500. Prefikset <strong>2001:7fb:fd03::\/48<\/strong> eies av RIPE NCC og har en gyldig ROA, men annonseres feilaktig av AS 800. Prefikset <strong>2023:12:19::\/48<\/strong> er derimot ikke allokert og returnerer \u201cNotFound\u201d.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-resultater-fra-validering\">Resultater fra validering<\/h2>\n\n\n\n<p>N\u00e5r vi aktiverer ROV:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>2001:7fb:fd03::\/48 blir avvist som <strong>invalid<\/strong>.<\/li>\n\n\n\n<li>2023:12:19::\/48 blir akseptert som <strong>unknown<\/strong>.<\/li>\n<\/ul>\n\n\n\n<p>Dette viser hvordan ROV effektivt kan blokkere route hijacking.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>admin@as500# show routing-options validation\ngroup ROUTINATOR {\n    session 2001:11:11::2 {\n        port 3323;\n        local-address 2001:11:11::1;\n    }\n}<\/code><\/pre>\n\n\n\n<p>Etter at vi har bekreftet serverkonfigurasjonen, kan vi kontrollere at vi mottar ROA-er fra serveren:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>admin@as500&gt; show validation session detail\nSession 2001:11:11::2, State: up, Session index: 2\n  Group: ROUTINATOR, Preference: 100\n  Local IPv4 address: 2001:11:11::1, Port: 3323\n  Refresh time: 300s\n  Hold time: 600s\n  Record Life time: 3600s\n  Serial (Full Update): 98\n  Serial (Incremental Update): 99\n    Session flaps: 62\n    Session uptime: 21:14:01\n    Last PDU received: 00:01:39\n    IPv4 prefix count: 404771\n    IPv6 prefix count: 91777<\/code><\/pre>\n\n\n\n<p>Hvis \u00f8kten kommer opp uten \u00e5 se noen prefiks, kan det hende du m\u00e5 vente en liten stund. Det andre vi m\u00e5 gj\u00f8re, er \u00e5 opprette en policy som vi skal bruke til \u00e5 filtrere prefikser med:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>admin@as500# show policy-options policy-statement RPKI\nterm INVALID {\n    from {\n        protocol bgp;\n        validation-database invalid;\n    }\n    then {\n        validation-state invalid;\n        reject;\n    }\n}\nterm VALID {\n    from {\n        protocol bgp;\n        validation-database valid;\n    }\n    then {\n        validation-state valid;\n        next policy;\n    }\n}\nterm UNKNOWN {\n    then {\n        validation-state unknown;\n        next policy;\n    }\n}<\/code><\/pre>\n\n\n\n<p>Vi \u00f8nsker \u00e5 oppn\u00e5 tre ting med policyen v\u00e5r:<\/p>\n\n\n\n<ol start=\"1\" style=\"list-style-type:1\" class=\"wp-block-list\">\n<li>Avvise prefik som ikke samsvarer med prefiks ROA (Invalid)<\/li>\n\n\n\n<li>Tillate prefiks som vi kan bekrefte kommer fra riktig AS (Valid)<\/li>\n\n\n\n<li>Tillate prefiks der det mangler informasjon (Unknown)<\/li>\n<\/ol>\n\n\n\n<p>Det siste h\u00f8res kanskje rart ut, men vi gj\u00f8r dette for \u00e5 unng\u00e5 \u00e5 droppe prefiks til ASer som enn\u00e5 ikke har tatt i bruk ROV.<\/p>\n\n\n\n<p>F\u00f8r vi bruker retningslinjene v\u00e5re, kan vi se p\u00e5 hva vi f\u00e5r fra AS 800:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>admin@as500&gt; show route protocol bgp aspath-regex ^800\n\ninet6.0: 9 destinations, 9 routes (9 active, 0 holddown, 0 hidden)\n+ = Active Route, - = Last Active, * = Both\n\n2001:7fb:fd03::\/48 *&#091;BGP\/170] 00:00:16, localpref 100\n                      AS path: 800 I, validation-state: unverified\n                    &gt;  to 2001:db8:5695::2 via ge-0\/0\/2.0\n2023:12:19::\/48    *&#091;BGP\/170] 00:00:16, localpref 100\n                      AS path: 800 I, validation-state: unverified\n                    &gt;  to 2001:db8:5695::2 via ge-0\/0\/2.0<\/code><\/pre>\n\n\n\n<p>Det f\u00f8rste prefikset, 2001:7fb:fd03::\/48, eies av RIPE NCC og har en gyldig ROA. Dette prefikset skal annonseres av AS 196615 (RIPE NCC) og ikke av AS 800. Ved hjelp av ROV skal vi s\u00f8rge for at ruteren v\u00e5r i AS 500 ikke aksepterer dette prefikset.<\/p>\n\n\n\n<p>Det andre prefikset, 2023:12:19::\/48, er ikke allokert til noen p\u00e5 dette tidspunktet. Et oppslag i RPKI-databasen skal derfor returnere &#8220;NotFound&#8221;, og ruteren v\u00e5r skal, i henhold til gjeldende beste praksis, akseptere og bruke prefikset.<\/p>\n\n\n\n<p>Merk at begge prefiksene har <em>validation-state:<\/em> <strong><em>unverified<\/em><\/strong> f\u00f8r du konfigurerer RPKI.<\/p>\n\n\n\n<p>La oss n\u00e5 konfigurere RPKI-policyen v\u00e5r p\u00e5 BGP-gruppen v\u00e5r mot AS 800:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>admin@as500# set protocols bgp group AS800 import RPKI<\/code><\/pre>\n\n\n\n<p>Hvis alt fungerer som det skal, b\u00f8r vi avvise 2001:7fb:fd03::\/48, men godta 2023:12:19::\/48:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>dmin@as500&gt; show route protocol bgp aspath-regex ^800\n\ninet6.0: 9 destinations, 9 routes (8 active, 0 holddown, 1 hidden)\n+ = Active Route, - = Last Active, * = Both\n\n2023:12:19::\/48    *&#091;BGP\/170] 00:03:34, localpref 100\n                      AS path: 800 I, validation-state: unknown\n                    &gt;  to 2001:db8:5695::2 via ge-0\/0\/2.0<\/code><\/pre>\n\n\n\n<p>Veldig bra! Legg merke til at <em>validation-state<\/em> har blitt endret fra <strong><em>unverified<\/em><\/strong> til <strong><em>unknown<\/em><\/strong> p\u00e5 prefikset som mangler ROA. Hvis vi ser p\u00e5 det andre prefikset med hjelp av \u00abhidden\u00bb flagg, ser vi hvorfor 2001:7fb:fd03::\/48 har blitt nektet:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>admin@as500&gt; show route 2001:7fb:fd03::\/48 hidden\n\ninet6.0: 8 destinations, 8 routes (7 active, 0 holddown, 1 hidden)\n+ = Active Route, - = Last Active, * = Both\n\n2001:7fb:fd03::\/48  &#091;BGP ] 00:01:30, localpref 100\n                      AS path: 800 I, validation-state: invalid\n                    &gt;  to 2001:db8:5695::2 via ge-0\/0\/2.0\n\nadmin@as500&gt; show route 2001:7fb:fd03::\/48 hidden extensive | match \"Hidden reason\"\n                Hidden reason: Rejected by import policy<\/code><\/pre>\n\n\n\n<p>&#8220;<em>validation-state:<\/em> <strong>invalid<\/strong>&#8221; &#8211; ruteren har blokkert prefikset ved hjelp av ROV!<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-oppsummering\">Oppsummering<\/h2>\n\n\n\n<p>ROV gir en ekstra sikkerhet i BGP-infrastrukturen. <strong>Kort sagt:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Feil eller ondsinnede annonseringer kan stoppes.<\/li>\n\n\n\n<li>Valide prefiks aksepteres.<\/li>\n\n\n\n<li>Ukjente prefiks tillates for \u00e5 unng\u00e5 \u00e5 kutte gyldig trafikk.<\/li>\n<\/ul>\n\n\n\n<p>Vil du vite mer eller ha hjelp til \u00e5 implementere ROV? Kontakt oss \u2013 vi hjelper deg med \u00e5 sikre BGP-infrastrukturen din.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-relevant-innhold\">Relevant innhold<\/h3>\n\n\n\n<p><a href=\"https:\/\/www.nlogic.no\/nettverksteknologi\/subscriber-management\/\">Les mer om Broadband Network Gateway (BNG)<\/a> og fordelene ved \u00e5 bruke BNG.<\/p>\n\n\n<div class=\"nlogic-section alignfull layout-1-column content-align-top is-style-transparent wp-block-nlogic-section\">\n\t\t\t<div class=\"content-columns container\">\n\t\t\t\t\n\t\t\t\t\n<div class=\"nlogic-section-content wp-block-nlogic-section-content\">\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-1 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\">\n<h2 class=\"wp-block-heading\" id=\"h-kontakt-oss\">Kontakt oss<\/h2>\n\n\n\n<p>Vi hjelper deg gjerne med \u00e5 sikre BGP-infrastrukturen din i samarbeid med <a href=\"https:\/\/www.nlogic.no\/nettverksteknologi\/juniper-networks\/\">Juniper Networks<\/a>. <\/p>\n\n\n\n<p>Hvis du \u00f8nsker \u00e5 komme i kontakt med oss, fyll inn skjema nedenfor eller ta direkte kontakt med oss via e-post eller telefon.<\/p>\n\n\n<div class=\"nlogic-button-modal wp-block-nlogic-button-modal\">\n\t\t\t<div class=\"wp-block-buttons is-layout-flex\">\n\t\t\t\t<div class=\"wp-block-button nlogic-button-modal__button\">\n\t\t\t\t\t<a class=\"wp-block-button__link has-white-color has-text-color\" data-micromodal-trigger=\"nlogic-modal1\">Kontakt oss<\/a>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<div id=\"nlogic-modal1\" class=\"modal micromodal-slide\" aria-hidden=\"true\">\n\t\t\t<div class=\"modal__overlay\" tabindex=\"-1\" data-micromodal-close>\n\t\t\t\t<div class=\"modal__container\" role=\"dialog\" aria-modal=\"true\" aria-labelledby=\"Send oss en melding\" >\n\t\t\t\t\t<div class=\"modal__content_container\">\n\t\t\t\t\t\t<h2 class=\"modal__title\">Send oss en melding<\/h2>\n\t\t\t\t\t\t<main class=\"modal__content\">\n\t\t\t\t\t\t\t\n\n<p><\/p>\n\n\n\nhbspt.forms.create({\n    region: &#8220;na1&#8221;,\n    portalId: &#8220;8798010&#8221;,\n    formId: &#8220;731a863d-f99e-420c-9914-a8d5bade7aed&#8221;\n  });\n\n\n\t\t\t\t\t\t<\/main>\n\t\t\t\t\t\t<button class=\"modal__close\" aria-label=\"Close modal\" data-micromodal-close><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 24 24\" height=\"24\" width=\"24\" class=\"t2-icon\" aria-hidden=\"true\" focusable=\"false\"><path d=\"m12 13.4-4.9 4.9c-.2.2-.4.3-.7.3-.3 0-.5-.1-.7-.3-.2-.2-.3-.4-.3-.7s.1-.5.3-.7l4.9-4.9-4.9-4.9c-.2-.2-.3-.4-.3-.7 0-.3.1-.5.3-.7.2-.2.4-.3.7-.3.3 0 .5.1.7.3l4.9 4.9 4.9-4.9c.2-.2.4-.3.7-.3s.5.1.7.3c.2.2.3.4.3.7 0 .3-.1.5-.3.7L13.4 12l4.9 4.9c.2.2.3.4.3.7s-.1.5-.3.7c-.2.2-.4.3-.7.3s-.5-.1-.7-.3L12 13.4z\"\/><\/svg><\/button>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/div><\/div>\n\n\n\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\"><svg class=\"svg\">\n  <clipPath id=\"person-hexagon-mask\" clipPathUnits=\"objectBoundingBox\"><path d=\"M0.455,0.013 C0.485,-0.002,0.521,-0.002,0.551,0.013 L0.753,0.115 L0.953,0.22 C0.983,0.235,1,0.264,1,0.294 L1,0.501 L1,0.709 C1,0.739,0.983,0.767,0.953,0.783 L0.753,0.888 L0.551,0.99 C0.521,1,0.485,1,0.455,0.99 L0.253,0.888 L0.053,0.783 C0.023,0.767,0.005,0.739,0.005,0.709 L0.003,0.501 L0.005,0.294 C0.005,0.264,0.023,0.235,0.053,0.22 L0.253,0.115 L0.455,0.013\"><\/path><\/clipPath>\n<\/svg><div class=\"t2-featured-single-post t2-featured-content is-post-type-person role-business-area-manager-service-provider wp-block-t2-featured-single-post\">\n<div class=\"wp-block-group alignfull is-card-people is-layout-flow wp-block-group-is-layout-flow\">\n<figure  class=\"t2-post-featured-image has-image-ratio-16-9 wp-block-t2-post-featured-image\"><img loading=\"lazy\" decoding=\"async\" width=\"750\" height=\"750\" src=\"https:\/\/www.nlogic.no\/content\/uploads\/2023\/09\/nlogic-norway-robert-e1726492487436.png\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Bilde av Robert R. Olsen.\" srcset=\"https:\/\/www.nlogic.no\/content\/uploads\/2023\/09\/nlogic-norway-robert-e1726492487436.png 750w, https:\/\/www.nlogic.no\/content\/uploads\/2023\/09\/nlogic-norway-robert-e1726492487436-300x300.png 300w, https:\/\/www.nlogic.no\/content\/uploads\/2023\/09\/nlogic-norway-robert-e1726492487436-150x150.png 150w\" sizes=\"auto, (max-width: 750px) 100vw, 750px\" \/><\/figure>\n\n<div class=\"wp-block-group alignfull post-details is-layout-flow wp-block-group-is-layout-flow\">\n\t<h2 class=\"t2-post-title wp-block-t2-post-title\">Robert R. Olsen<\/h2>\n\t\n\t<div class=\"card-info wp-block-t2-people-meta\"><div class=\"card-info__post-meta meta-key-people_email\"><a href=\"mailto:robert.olsen@nlogic.no\">robert.olsen@nlogic.no<\/a><\/div><div class=\"card-info__post-meta meta-key-people_phone\"><a href=\"tel:+47 911 28 641\">+47 911 28 641<\/a><\/div><\/div>\n<\/div>\n\n<\/div>\n\n<\/div><\/div>\n<\/div>\n\n<\/div>\n\n\t\t\t\t\n\t\t\t<\/div>\n\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>I denne artikkelen og tilh\u00f8rende lab skal vi se n\u00e6rmere p\u00e5 hvordan du kan sikre BGP-infrastrukturen din med Route Origin Validation (ROV).<\/p>\n","protected":false},"author":5,"featured_media":6921,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"dk_card_image_id":6921,"display_contact_person_section":false,"person_post_id":0,"person_post_title":"","person_cta_url":"","person_cta_label":"","exclude_from_listing":0,"footnotes":""},"categories":[257],"class_list":["post-6919","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-nettverk"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.13 (Yoast SEO v20.13) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>BGP route origin validation og RPKI<\/title>\n<meta name=\"description\" content=\"I denne artikkelen med tilh\u00f8rende lab skal vi se n\u00e6rmere p\u00e5 hvordan du kan sikre BGP-infrastrukturen din med Route Origin Validation (ROV).\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sikre BGP-infrastrukturen med Route Origin Validation (ROV)\" \/>\n<meta property=\"og:description\" content=\"I denne artikkelen med tilh\u00f8rende lab skal vi se n\u00e6rmere p\u00e5 hvordan du kan sikre BGP-infrastrukturen din med Route Origin Validation (ROV).\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/\" \/>\n<meta property=\"og:site_name\" content=\"nLogic - Powered by Knowledge. Driven by Trust.\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/nLogicAS\" \/>\n<meta property=\"article:published_time\" content=\"2024-05-22T07:10:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-27T13:19:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2024\/05\/nLogic-news-BGP-route-origin.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"800\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"mortenpedersen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@dekode\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"mortenpedersen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/\"},\"author\":{\"name\":\"mortenpedersen\",\"@id\":\"https:\/\/www.nlogic.no\/english\/#\/schema\/person\/bf8f8ef0c201390a4867afd5f2c1d9c9\"},\"headline\":\"Sikre BGP-infrastrukturen med Route Origin Validation (ROV)\",\"datePublished\":\"2024-05-22T07:10:42+00:00\",\"dateModified\":\"2025-08-27T13:19:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/\"},\"wordCount\":840,\"publisher\":{\"@id\":\"https:\/\/www.nlogic.no\/english\/#organization\"},\"articleSection\":[\"Nettverk\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/\",\"url\":\"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/\",\"name\":\"BGP route origin validation og RPKI\",\"isPartOf\":{\"@id\":\"https:\/\/www.nlogic.no\/english\/#website\"},\"datePublished\":\"2024-05-22T07:10:42+00:00\",\"dateModified\":\"2025-08-27T13:19:35+00:00\",\"description\":\"I denne artikkelen med tilh\u00f8rende lab skal vi se n\u00e6rmere p\u00e5 hvordan du kan sikre BGP-infrastrukturen din med Route Origin Validation (ROV).\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/\"]}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.nlogic.no\/english\/#website\",\"url\":\"https:\/\/www.nlogic.no\/english\/\",\"name\":\"nLogic - Powered by Knowledge. Driven by Trust.\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.nlogic.no\/english\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.nlogic.no\/english\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.nlogic.no\/english\/#organization\",\"name\":\"nLogic - Powered by Knowledge. Driven by Trust.\",\"url\":\"https:\/\/www.nlogic.no\/english\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.nlogic.no\/english\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2023\/09\/nlogic-logo-1.svg\",\"contentUrl\":\"https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2023\/09\/nlogic-logo-1.svg\",\"caption\":\"nLogic - Powered by Knowledge. Driven by Trust.\"},\"image\":{\"@id\":\"https:\/\/www.nlogic.no\/english\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/nLogicAS\",\"https:\/\/www.linkedin.com\/company\/nlogic-as\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.nlogic.no\/english\/#\/schema\/person\/bf8f8ef0c201390a4867afd5f2c1d9c9\",\"name\":\"mortenpedersen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.nlogic.no\/english\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9afbe8946b0d6bbeadfcdca35bba6e4d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9afbe8946b0d6bbeadfcdca35bba6e4d?s=96&d=mm&r=g\",\"caption\":\"mortenpedersen\"},\"sameAs\":[\"https:\/\/twitter.com\/dekode\"],\"url\":\"https:\/\/www.nlogic.no\/english\/aktuelt\/author\/mortenpedersen\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"BGP route origin validation og RPKI","description":"I denne artikkelen med tilh\u00f8rende lab skal vi se n\u00e6rmere p\u00e5 hvordan du kan sikre BGP-infrastrukturen din med Route Origin Validation (ROV).","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Sikre BGP-infrastrukturen med Route Origin Validation (ROV)","og_description":"I denne artikkelen med tilh\u00f8rende lab skal vi se n\u00e6rmere p\u00e5 hvordan du kan sikre BGP-infrastrukturen din med Route Origin Validation (ROV).","og_url":"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/","og_site_name":"nLogic - Powered by Knowledge. Driven by Trust.","article_publisher":"https:\/\/www.facebook.com\/nLogicAS","article_published_time":"2024-05-22T07:10:42+00:00","article_modified_time":"2025-08-27T13:19:35+00:00","og_image":[{"width":1200,"height":800,"url":"https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2024\/05\/nLogic-news-BGP-route-origin.png","type":"image\/png"}],"author":"mortenpedersen","twitter_card":"summary_large_image","twitter_creator":"@dekode","twitter_misc":{"Written by":"mortenpedersen","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/#article","isPartOf":{"@id":"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/"},"author":{"name":"mortenpedersen","@id":"https:\/\/www.nlogic.no\/english\/#\/schema\/person\/bf8f8ef0c201390a4867afd5f2c1d9c9"},"headline":"Sikre BGP-infrastrukturen med Route Origin Validation (ROV)","datePublished":"2024-05-22T07:10:42+00:00","dateModified":"2025-08-27T13:19:35+00:00","mainEntityOfPage":{"@id":"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/"},"wordCount":840,"publisher":{"@id":"https:\/\/www.nlogic.no\/english\/#organization"},"articleSection":["Nettverk"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/","url":"https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/","name":"BGP route origin validation og RPKI","isPartOf":{"@id":"https:\/\/www.nlogic.no\/english\/#website"},"datePublished":"2024-05-22T07:10:42+00:00","dateModified":"2025-08-27T13:19:35+00:00","description":"I denne artikkelen med tilh\u00f8rende lab skal vi se n\u00e6rmere p\u00e5 hvordan du kan sikre BGP-infrastrukturen din med Route Origin Validation (ROV).","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.nlogic.no\/english\/aktuelt\/bgp-route-origin-validation-och-rpki\/"]}]},{"@type":"WebSite","@id":"https:\/\/www.nlogic.no\/english\/#website","url":"https:\/\/www.nlogic.no\/english\/","name":"nLogic - Powered by Knowledge. Driven by Trust.","description":"","publisher":{"@id":"https:\/\/www.nlogic.no\/english\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.nlogic.no\/english\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.nlogic.no\/english\/#organization","name":"nLogic - Powered by Knowledge. Driven by Trust.","url":"https:\/\/www.nlogic.no\/english\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.nlogic.no\/english\/#\/schema\/logo\/image\/","url":"https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2023\/09\/nlogic-logo-1.svg","contentUrl":"https:\/\/www.nlogic.no\/content\/uploads\/sites\/6\/2023\/09\/nlogic-logo-1.svg","caption":"nLogic - Powered by Knowledge. Driven by Trust."},"image":{"@id":"https:\/\/www.nlogic.no\/english\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/nLogicAS","https:\/\/www.linkedin.com\/company\/nlogic-as\/"]},{"@type":"Person","@id":"https:\/\/www.nlogic.no\/english\/#\/schema\/person\/bf8f8ef0c201390a4867afd5f2c1d9c9","name":"mortenpedersen","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.nlogic.no\/english\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9afbe8946b0d6bbeadfcdca35bba6e4d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9afbe8946b0d6bbeadfcdca35bba6e4d?s=96&d=mm&r=g","caption":"mortenpedersen"},"sameAs":["https:\/\/twitter.com\/dekode"],"url":"https:\/\/www.nlogic.no\/english\/aktuelt\/author\/mortenpedersen\/"}]}},"_links":{"self":[{"href":"https:\/\/www.nlogic.no\/english\/wp-json\/wp\/v2\/posts\/6919","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.nlogic.no\/english\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.nlogic.no\/english\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.nlogic.no\/english\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.nlogic.no\/english\/wp-json\/wp\/v2\/comments?post=6919"}],"version-history":[{"count":4,"href":"https:\/\/www.nlogic.no\/english\/wp-json\/wp\/v2\/posts\/6919\/revisions"}],"predecessor-version":[{"id":8905,"href":"https:\/\/www.nlogic.no\/english\/wp-json\/wp\/v2\/posts\/6919\/revisions\/8905"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.nlogic.no\/english\/wp-json\/wp\/v2\/media\/6921"}],"wp:attachment":[{"href":"https:\/\/www.nlogic.no\/english\/wp-json\/wp\/v2\/media?parent=6919"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.nlogic.no\/english\/wp-json\/wp\/v2\/categories?post=6919"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}