跳转到内容
搜索文档

排查前缀验证故障

最后更新 查看 MarkdownAgent 设置
  1. 使用 Prefix Details(前缀详情)端点 来检查在验证期间是否发现了任何问题。

    Required API token permissions

    At least one of the following token permissions is required:
    • Magic Transit Read
    • Magic Transit Write
    • IP Prefixes: Write
    • IP Prefixes: Read
    • IP Prefixes: BGP On Demand Write
    • IP Prefixes: BGP On Demand Read
    Prefix Detailsbash
    curl "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/addressing/prefixes/$PREFIX_ID" \
    	--request GET \
    	--header "X-Auth-Email: $CLOUDFLARE_EMAIL" \
    	--header "X-Auth-Key: $CLOUDFLARE_API_KEY"
    响应json
    
     "result": {
        "id": "72823e95d6c64d48a8111fec81179816",
        "created_at": "2025-02-25T00:34:11.423722Z",
        "modified_at": "2025-02-25T00:34:11.423722Z",
        "cidr": "203.0.113.0/24",
        "account_id": "654c5f71c324478cc9f68d60065d4620",
        "description": "",
        "approved": "P",
        "on_demand_enabled": false,
        "on_demand_locked": false,
        "advertised": null,
        "advertised_modified_at": null,
        "loa_document_id": "b9ff4afe312246a8b2e7324d98f40b23",
        "asn": 13335,
        "ownership_validation_token": "<OWNERSHIP_VALIDATION_TOKEN>",
        "delegate_loa_creation" : true,
        "irr_validation_state": "valid",
        "rpki_validation_state": "valid",
        "ownership_validation_state": "missing",
      }
  2. 考虑 API 响应中返回的状态(例如,missinginvalidmismatch_asn),并据此审查您的 IRR 记录、ROA 以及所有权验证方法。

    • IRR 和 ROA 记录中的信息应满足导入先决条件

    • 所有权验证需要匹配的 ROA,且必须在所有 DNS TXT 记录或 IRR 记录中找到正确的验证令牌。

  3. 在应用了必要的更改之后,使用 Validate Prefix 端点来触发验证检查。

    Required API token permissions

    At least one of the following token permissions is required:
    • Magic Transit Write
    • IP Prefixes: Write
    Validate Prefixbash
    curl "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/addressing/prefixes/$PREFIX_ID/validate" \
    	--request POST \
    	--header "X-Auth-Email: $CLOUDFLARE_EMAIL" \
    	--header "X-Auth-Key: $CLOUDFLARE_API_KEY"

这篇文档对您有帮助吗?