Show bgp routes with RPKI-invalid state

General questions
, , ,
1

Hi,

is there a possibility to get a list of rejected BGP routes when using a configuration like the following to reject them?

route-map rpki {
     rule 30 {
         action deny
         match {
             rpki invalid
         }
     }
 }

RPKI-invalid routes are then no longer in BGP table so they are not shown in a show bgp.
It would be great to have a list for debugging and statistical purposes.

Is there another way of rejecting the routes from the routing table without removing them from the BGP table?

Kind regards
Simon

2

Im guessing enabling debugging for rpki would yield some logs.

Otherwise there are show commands to display which routes have been identified as invalid:

https://docs.frrouting.org/en/latest/bgp.html#enabling-rpki

https://docs.frrouting.org/en/latest/bgp.html#clicmd-show-bgp-afi-safi-rpki-valid-invalid-notfound