Route ROA checker

whois-api/src/main/java/net/ripe/db/whois/api/rest/RpslObjectStreamer.java

@@ -1,6 +1,10 @@
 package net.ripe.db.whois.api.rest;
 
 import com.google.common.collect.Lists;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.ws.rs.WebApplicationException;
+import jakarta.ws.rs.core.Response;
+import jakarta.ws.rs.core.StreamingOutput;
 import net.ripe.db.whois.api.rest.client.StreamingException;
 import net.ripe.db.whois.api.rest.domain.Link;
 import net.ripe.db.whois.api.rest.domain.Parameters;
@@ -29,10 +33,6 @@
 import org.springframework.stereotype.Component;
 
 import javax.annotation.Nullable;
-import jakarta.servlet.http.HttpServletRequest;
-import jakarta.ws.rs.WebApplicationException;
-import jakarta.ws.rs.core.Response;
-import jakarta.ws.rs.core.StreamingOutput;
 import java.io.IOException;
 import java.io.OutputStream;
 import java.net.InetAddress;
@@ -193,6 +193,7 @@ private void streamObject(@Nullable final RpslObject rpslObject) {
                 whoisObjectServerMapper.mapAbuseContact(whoisObject, parameters, rpslObject);
                 whoisObjectServerMapper.mapManagedAttributes(whoisObject, parameters, rpslObject);
                 whoisObjectServerMapper.mapResourceHolder(whoisObject, parameters, rpslObject);
+                whoisObjectServerMapper.mapObjectInfoMessages(whoisObject, parameters, rpslObject);
 
                 if (streamingMarshal instanceof StreamingMarshalTextPlain) {
                     streamingMarshal.writeArray(rpslObject);

whois-api/src/main/java/net/ripe/db/whois/api/rest/mapper/WhoisObjectServerMapper.java

@@ -6,11 +6,12 @@
 import net.ripe.db.whois.api.rest.domain.WhoisObject;
 import net.ripe.db.whois.api.rest.domain.WhoisVersion;
 import net.ripe.db.whois.api.rest.search.AbuseContactSearch;
-import net.ripe.db.whois.common.search.ManagedAttributeSearch;
 import net.ripe.db.whois.api.rest.search.ResourceHolderSearch;
+import net.ripe.db.whois.api.rest.search.RestApiInfoMessageValidator;
 import net.ripe.db.whois.common.domain.serials.Operation;
 import net.ripe.db.whois.common.rpsl.RpslAttribute;
 import net.ripe.db.whois.common.rpsl.RpslObject;
+import net.ripe.db.whois.common.search.ManagedAttributeSearch;
 import net.ripe.db.whois.query.domain.DeletedVersionResponseObject;
 import net.ripe.db.whois.query.domain.VersionResponseObject;
 import org.springframework.beans.factory.annotation.Autowired;
@@ -28,16 +29,20 @@ public class WhoisObjectServerMapper {
     private final AbuseContactSearch abuseContactSearch;
     private final ManagedAttributeSearch managedAttributeSearch;
 
+    private final List<RestApiInfoMessageValidator> infoMessageValidators;
+
     @Autowired
     public WhoisObjectServerMapper(
             final WhoisObjectMapper whoisObjectMapper,
             final ResourceHolderSearch resourceHolderSearch,
             final AbuseContactSearch abuseContactSearch,
-            final ManagedAttributeSearch managedAttributeSearch) {
+            final ManagedAttributeSearch managedAttributeSearch,
+            final List<RestApiInfoMessageValidator> infoMessageValidators) {
         this.whoisObjectMapper = whoisObjectMapper;
         this.resourceHolderSearch = resourceHolderSearch;
         this.abuseContactSearch = abuseContactSearch;
         this.managedAttributeSearch = managedAttributeSearch;
+        this.infoMessageValidators = infoMessageValidators;
     }
 
     public List<WhoisVersion> mapVersions(final List<DeletedVersionResponseObject> deleted, final List<VersionResponseObject> versions) {
@@ -71,6 +76,12 @@ public void mapAbuseContact(final WhoisObject whoisObject, final Parameters para
         }
     }
 
+    public void mapObjectInfoMessages(final WhoisObject whoisObject, final Parameters parameters, final RpslObject rpslObject){
+        final List<String> infoMessagesFormatted = Lists.newArrayList();
+        infoMessageValidators.forEach(infoMessageValidator -> infoMessageValidator.validate(rpslObject, parameters, infoMessagesFormatted));
+        whoisObject.setObjectInfoMessages(infoMessagesFormatted);
+    }
+
     public void mapManagedAttributes(final WhoisObject whoisObject, final Parameters parameters, final RpslObject rpslObject) {
         if (Boolean.TRUE.equals(parameters.getManagedAttributes())) {
             whoisObject.setManaged(managedAttributeSearch.isCoMaintained(rpslObject));

whois-api/src/main/java/net/ripe/db/whois/api/rest/search/RestApiInfoMessageValidator.java

@@ -0,0 +1,11 @@
+package net.ripe.db.whois.api.rest.search;
+
+import net.ripe.db.whois.api.rest.domain.Parameters;
+import net.ripe.db.whois.common.rpsl.RpslObject;
+
+import java.util.List;
+
+public interface RestApiInfoMessageValidator {
+
+    void validate(final RpslObject rpslObject, final Parameters parameters, final List<String> messages);
+}

whois-api/src/main/java/net/ripe/db/whois/api/rest/search/RpkiRoaValidator.java

@@ -0,0 +1,59 @@
+package net.ripe.db.whois.api.rest.search;
+
+import com.google.common.collect.ImmutableList;
+import net.ripe.db.whois.api.rest.domain.Flag;
+import net.ripe.db.whois.api.rest.domain.Flags;
+import net.ripe.db.whois.api.rest.domain.Parameters;
+import net.ripe.db.whois.common.rpsl.ObjectType;
+import net.ripe.db.whois.common.rpsl.RpslObject;
+import net.ripe.db.whois.query.QueryMessages;
+import net.ripe.db.whois.query.rpki.Roa;
+import net.ripe.db.whois.query.rpki.RpkiDataProvider;
+import net.ripe.db.whois.query.rpki.RpkiService;
+import net.ripe.db.whois.query.rpki.WhoisRoaChecker;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Component;
+
+import java.util.List;
+
+import static net.ripe.db.whois.query.QueryFlag.ROA_VALIDATION;
+
+@Component
+public class RpkiRoaValidator implements RestApiInfoMessageValidator {
+
+    private static final ImmutableList<ObjectType> TYPES = ImmutableList.of(ObjectType.ROUTE, ObjectType.ROUTE6);
+    private final boolean isRoaChecker;
+
+    private final RpkiDataProvider rpkiDataProvider;
+
+    @Autowired
+    public RpkiRoaValidator(@Value("${roa.validator.available:false}") boolean isRoaChecker, final RpkiDataProvider dataProvider) {
+        this.isRoaChecker = isRoaChecker;
+        this.rpkiDataProvider = dataProvider;
+    }
+
+    @Override
+    public void validate(final RpslObject rpslObject, final Parameters parameters, final List<String> messages) {
+        if (!canProceed(rpslObject, parameters)){
+            return;
+        }
+        validateRoa(rpslObject, messages);
+    }
+
+    private boolean canProceed(final RpslObject rpslObject, final Parameters parameters){
+        return isRoaChecker && hasRoaValidationFlag(parameters.getFlags()) && TYPES.contains(rpslObject.getType());
+    }
+
+    private boolean hasRoaValidationFlag(Flags flags){
+        return flags.getFlags().contains(new Flag(ROA_VALIDATION));
+    }
+
+    private void validateRoa(final RpslObject rpslObject, final List<String> messages){
+        final Roa rpkiRoa = new WhoisRoaChecker(new RpkiService(rpkiDataProvider)).validateAndGetInvalidRoa(rpslObject);
+
+        if (rpkiRoa != null){
+            messages.add(QueryMessages.roaRouteConflicts(rpkiRoa.getAsn()).getFormattedText());
+        }
+    }
+}