bgp: rpki: move rpki content to dedicated file

3 files changed, 47 insertions, 38 deletions

diff --git a/docs/routing/bgp.rst b/docs/routing/bgp.rst
index 1bb33aee..4fac4889 100644
--- a/docs/routing/bgp.rst
+++ b/docs/routing/bgp.rst
@@ -147,41 +147,3 @@ Route filter can be applied using a route-map:
 
 We could expand on this and also deny link local and multicast in the rule 20
 action deny.
-
-RPKI
-^^^^
-
-:abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI (Public Key Infastucrure)`
-designed to secure the Internet routing insfratructure.
-It associate a BGP route announcement with the correct originating :abbr:`ASN (Autonomus System Number)` and check it validation.
-RPKI described in :rfc:`6480`. This is a separate server. You can find more details at RIPE-NNC_.
-
-Imported prefixes during the validation may have values: valid, invalid and notfound.
-
-* The valid state means that prefix and ASN that originated it match the :abbr:`ROA (Route Origination Authorizations)` base.
-* Invalid means that prefix/prefix length and ASN that originated it doesn't match with ROA.
-* Notfound means that prefix not found in ROA.
-
-We can build route-maps for import, based on these states.
-Simple RPKI configuration, where 'routinator' - RPKI cache server with ip '10.11.11.1'.
-
-.. code-block:: none
-
-  set protocols rpki cache routinator address '10.11.11.1'
-  set protocols rpki cache routinator port '3323'
-
-Example route-map for import. We can set local-preference logic based on states.
-Also we may not import prefixes with the state 'invalid'.
-
-.. code-block:: none
-
-  set policy route-map ROUTES-IN rule 10 action 'permit'
-  set policy route-map ROUTES-IN rule 10 match rpki 'valid'
-  set policy route-map ROUTES-IN rule 10 set local-preference '300'
-  set policy route-map ROUTES-IN rule 20 action 'permit'
-  set policy route-map ROUTES-IN rule 20 match rpki 'notfound'
-  set policy route-map ROUTES-IN rule 20 set local-preference '125'
-  set policy route-map ROUTES-IN rule 30 action 'deny'
-  set policy route-map ROUTES-IN rule 30 match rpki 'invalid'
-
-.. _RIPE-NNC: https://github.com/RIPE-NCC/rpki-validator-3/wiki
diff --git a/docs/routing/index.rst b/docs/routing/index.rst
index b49120f7..26342bf2 100644
--- a/docs/routing/index.rst
+++ b/docs/routing/index.rst
@@ -9,6 +9,7 @@ Routing
 
    arp
    bgp
+   rpki
    ospf
    pbr
    rip
diff --git a/docs/routing/rpki.rst b/docs/routing/rpki.rst
new file mode 100644
index 00000000..0c41c875
--- /dev/null
+++ b/docs/routing/rpki.rst
@@ -0,0 +1,46 @@
+.. _rpki:
+
+####
+RPKI
+####
+
+:abbr:`RPKI (Resource Public Key Infrastructure)` is a framework :abbr:`PKI
+(Public Key Infastucrure)` designed to secure the Internet routing
+infrastructure. It associate a BGP route announcement with the correct
+originating :abbr:`ASN (Autonomus System Number)` and check its validity.
+
+RPKI is described in :rfc:`6480`. This is a separate server. You can find more
+details at RIPE-NNC_.
+
+Imported prefixes during the validation may have values: valid, invalid and
+not found.
+
+* The valid state means that prefix and ASN that originated it match the
+  :abbr:`ROA (Route Origination Authorizations)` base.
+* Invalid means that prefix/prefix length and ASN that originated it doesn't
+  match with ROA.
+* Notfound means that prefix not found in ROA.
+
+We can build route-maps for import, based on these states. Simple RPKI
+configuration, where 'routinator' - RPKI cache server with ip '10.11.11.1'.
+
+.. code-block:: none
+
+  set protocols rpki cache routinator address '10.11.11.1'
+  set protocols rpki cache routinator port '3323'
+
+Example route-map for import. We can set local-preference logic based on states.
+Also we may not import prefixes with the state 'invalid'.
+
+.. code-block:: none
+
+  set policy route-map ROUTES-IN rule 10 action 'permit'
+  set policy route-map ROUTES-IN rule 10 match rpki 'valid'
+  set policy route-map ROUTES-IN rule 10 set local-preference '300'
+  set policy route-map ROUTES-IN rule 20 action 'permit'
+  set policy route-map ROUTES-IN rule 20 match rpki 'notfound'
+  set policy route-map ROUTES-IN rule 20 set local-preference '125'
+  set policy route-map ROUTES-IN rule 30 action 'deny'
+  set policy route-map ROUTES-IN rule 30 match rpki 'invalid'
+
+.. _RIPE-NNC: https://github.com/RIPE-NCC/rpki-validator-3/wiki