BGP route hijack by AS10990

Mon Aug 3 12:36:25 UTC 2020

> On 3 Aug 2020, at 11:04, adamv0025 at netconsultings.com wrote:
> 
>> Darrell Budic
>> Sent: Sunday, August 2, 2020 6:23 PM
>> 
>> On Jul 30, 2020, at 5:37 PM, Baldur Norddahl <baldur.norddahl at gmail.com>
>> wrote:
>>> 
>>> Telia implements RPKI filtering so the question is did it work? Were any
>> affected prefixes RPKI signed? Would any prefixes have avoided being
>> hijacked if RPKI signing had been in place?
>>> 
>>> Regards
>>> 
>>> Baldur - who had to turn off RPKI filtering at the request of JTAC to stop our
>> mx204s from crashing :-(
>>> 
>> 
>> Oh uh, I’m getting close to getting RPKI going on my mx204s, or was until you
>> posted that. What’s the story there, and perhaps which junos version?
> 
> Same here, would be interested in affected Junos versions or any details you can share please,

According to the information I received from the community[1], you should read PR1461602 and PR1309944 before deploying.

-Alex

[1] https://rpki.readthedocs.io/en/latest/rpki/router-support.html