Rogue objects in routing databases

Stephane Bortzmeyer bortzmeyer at nic.fr
Mon Jan 27 18:03:36 UTC 2020


On Sat, Jan 25, 2020 at 12:06:51AM +0100,
Florian Brandstetter <florianb at globalone.io> wrote 
 a message of 53 lines which said:

> Examples of affected networks are:
> 
> 193.30.32.0/23
> 45.129.92.0/23
> 45.129.94.0/24

Note that 193.30.32.0/23 has also a ROA (announces by 42198). So,
announces by AS8100 would be RPKI-invalid.

45.129.92.0/23 also has a ROA. Strangely, the prefix stopped being
announced on sunday 26.

45.129.94.0/24 has a ROA and is normally announced.

So, if AS8100 were to use its abnormal route objects , announces would
still be refused by ROA-validating routers.





More information about the NANOG mailing list