[routing-wg] RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
- Previous message (by thread): [routing-wg] RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
- Next message (by thread): [routing-wg] RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Nathalie Trenaman
nathalie at ripe.net
Sun Mar 17 17:30:40 CET 2019
Hi nusenu, > Op 17 mrt. 2019, om 09:23 heeft nusenu <nusenu-lists at riseup.net> het volgende geschreven: > > Randy Bush: >>> Are 0.0.0.0/0 routes filtered by RIPEstat but >>> included in RIS dumps? >>> Should rpki-validator filter them out? >> >> as the rirs each have a cert for 0/0, shouldn't the validator should be >> prepared to evaluate 0/0? > > just to clarify: I didn't mean to say that validtor 3 isn't > prepared to evaluate 0/0. > The strange results originated from my tools that did not > expect 0/0 routes in validator's BGP preview - but I will fix my side. > > And to clarify "strange results": I'm regularly looking at > how we are doing with RPKI misconfigurations (RPKI Observatory) and the > last output suggested that we are down to 0 unreachable > RPKI IP address space because _every_ INVALID announcement > had an alternative path via 0/0 from AS15576 which is obviously not correct. The data in the validator is consistent with the data in RIS: https://stat.ripe.net/widget/announced-prefixes#w.resource=15576 <https://stat.ripe.net/widget/announced-prefixes#w.resource=15576> You can see 0.0.0.0/0 (and ::/0 by the way) there. Out of curiosity, did you ping them about these mis-announcements already? Nathalie -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.ripe.net/ripe/mail/archives/routing-wg/attachments/20190317/71a66737/attachment.html> -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: Message signed with OpenPGP URL: <https://lists.ripe.net/ripe/mail/archives/routing-wg/attachments/20190317/71a66737/attachment.sig>
- Previous message (by thread): [routing-wg] RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
- Next message (by thread): [routing-wg] RIS dumps, 0.0.0.0/0 routes and RPKI validator 3
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]