[lacnog] anyone have a contact at 191.96.0.0/16 / Digital Energy Technologies Chile SpA?
Job Snijders
job en ntt.net
Mar Ago 14 08:40:45 BRT 2018
Dear all,
It appears that the owner of 191.96.0.0/16 (according to WHOIS "Digital
Energy Technologies Chile SpA") has introduced some connectivity issues
by misconfiguring the RPKI ROAs.
All the below announcements are "RPKI INVALID" and do not propagate
correctly in some parts of the world due to networks performing RPKI
based Origin Validation.
As can be seen for one of the prefixes:
https://stat.ripe.net/191.96.62.0%2F24#tabId=routing the prefix is only
98% visible and not the usual 100%. This means that for each of these
RPKI Invalid announcements there is reachability and connectivity
problems.
It appears that for some of the ASNs of any receipients of suballocations
within 191.96.0.0/16 RPKI ROAs are created, but not for all:
http://localcert.ripe.net:8088/roas?q=191.96.0.0/16
The current best practise is to create RPKI ROAs that match the intended
BGP announcements, and not to let any of your customers announce any
more-specific of your prefix.
If anyone can help relay this information to the appropriate contact
person that would be very much appreciated. Unnecessary RPKI Invalids in
the default-free zone hurts the effort to secure the routing system.
Or perhaps LACNIC staff can assist to help fix misconfigurations like
these?
Kind regards,
Job
INVALID 191.96.62.0/24 BGP.as_path: 40191 3257 40676 200983
INVALID 191.96.60.0/23 BGP.as_path: 50304 5588 50084 43818
INVALID 191.96.55.0/24 BGP.as_path: 3491 18403 131178
INVALID 191.96.54.0/24 BGP.as_path: 3491 18403 131178
INVALID 191.96.53.0/24 BGP.as_path: 3491 18403 131178
INVALID 191.96.52.0/22 BGP.as_path: 3491 18403 131178
INVALID 191.96.52.0/24 BGP.as_path: 3491 18403 131178
INVALID 191.96.49.0/24 BGP.as_path: 40191 36351
INVALID 191.96.48.0/24 BGP.as_path: 40191 3257 40676 200983
INVALID 191.96.40.0/24 BGP.as_path: 2914 23352 36352
INVALID 191.96.39.0/24 BGP.as_path: 2914 35415 206376
INVALID 191.96.38.0/24 BGP.as_path: 2914 20473 133537 133537
INVALID 191.96.37.0/24 BGP.as_path: 40191 3257 40676 200983
INVALID 191.96.36.0/24 BGP.as_path: 40191 36351
INVALID 191.96.35.0/24 BGP.as_path: 25091 61317
INVALID 191.96.32.0/24 BGP.as_path: 14280 27008 395378
INVALID 191.96.31.0/24 BGP.as_path: 40191 6939 17216
INVALID 191.96.25.0/24 BGP.as_path: 40191 3257 40676
INVALID 191.96.23.0/24 BGP.as_path: 40191 20473 200983
INVALID 191.96.21.0/24 BGP.as_path: 25091 61317
INVALID 191.96.18.0/24 BGP.as_path: 40191 174 46636
INVALID 191.96.16.0/24 BGP.as_path: 40191 36351
INVALID 191.96.14.0/24 BGP.as_path: 40191 6939 17216
INVALID 191.96.12.0/24 BGP.as_path: 2914 40824 394094
INVALID 191.96.8.0/24 BGP.as_path: 40191 36351
INVALID 191.96.3.0/24 BGP.as_path: 11071 50245
INVALID 191.96.0.0/24 BGP.as_path: 25091 61317
INVALID 191.96.124.0/22 BGP.as_path: 40191 174 201942
INVALID 191.96.122.0/24 BGP.as_path: 3491 17676 17941
INVALID 191.96.120.0/23 BGP.as_path: 25091 61317
INVALID 191.96.119.0/24 BGP.as_path: 25091 61317
INVALID 191.96.118.0/24 BGP.as_path: 40191 20473
INVALID 191.96.114.0/24 BGP.as_path: 25091 61317
INVALID 191.96.113.0/24 BGP.as_path: 50304 5588 50084 43818
INVALID 191.96.112.0/24 BGP.as_path: 2914 60781
INVALID 191.96.111.0/24 BGP.as_path: 11071 50245
INVALID 191.96.110.0/24 BGP.as_path: 25091 61317
INVALID 191.96.108.0/23 BGP.as_path: 11071 35916 21769
INVALID 191.96.107.0/24 BGP.as_path: 11071 15003
INVALID 191.96.105.0/24 BGP.as_path: 40191 36351
INVALID 191.96.104.0/24 BGP.as_path: 40191 3257 17090
INVALID 191.96.103.0/24 BGP.as_path: 40191 36351
INVALID 191.96.102.0/24 BGP.as_path: 40191 174 43578
INVALID 191.96.100.0/24 BGP.as_path: 11071 15003
INVALID 191.96.98.0/24 BGP.as_path: 14280 27008 395378
INVALID 191.96.97.0/24 BGP.as_path: 3491 17676 17941
INVALID 191.96.93.0/24 BGP.as_path: 40191 20473 200983
INVALID 191.96.92.0/24 BGP.as_path: 25091 61317
INVALID 191.96.88.0/22 BGP.as_path: 11071 35916 21769
INVALID 191.96.79.0/24 BGP.as_path: 2914 20473 200983
INVALID 191.96.78.0/24 BGP.as_path: 25091 61317
INVALID 191.96.76.0/24 BGP.as_path: 2914 20473 200983
INVALID 191.96.74.0/24 BGP.as_path: 2914 20473 200983
INVALID 191.96.69.0/24 BGP.as_path: 16409 33597 29713
INVALID 191.96.68.0/24 BGP.as_path: 40191 20473 200983
INVALID 191.96.64.0/24 BGP.as_path: 40191 36351
INVALID 191.96.189.0/24 BGP.as_path: 11071 40676
INVALID 191.96.188.0/24 BGP.as_path: 2914 45352 205329
INVALID 191.96.186.0/23 BGP.as_path: 11071 35916 21769
INVALID 191.96.185.0/24 BGP.as_path: 25091 49981
INVALID 191.96.178.0/23 BGP.as_path: 40191 174 61317
INVALID 191.96.177.0/24 BGP.as_path: 40191 6939 14935
INVALID 191.96.176.0/24 BGP.as_path: 14280 27008 395378
INVALID 191.96.174.0/24 BGP.as_path: 3491 32181
INVALID 191.96.172.0/24 BGP.as_path: 40191 9002 49453
INVALID 191.96.170.0/24 BGP.as_path: 3491 32181
INVALID 191.96.168.0/24 BGP.as_path: 40191 9002 49453
INVALID 191.96.167.0/24 BGP.as_path: 40191 174 61317
INVALID 191.96.166.0/24 BGP.as_path: 11071 40676
INVALID 191.96.165.0/24 BGP.as_path: 40191 1299 36352
INVALID 191.96.164.0/24 BGP.as_path: 3491 32181
INVALID 191.96.160.0/22 BGP.as_path: 11071 35916 21769
INVALID 191.96.159.0/24 BGP.as_path: 11071 40676
INVALID 191.96.157.0/24 BGP.as_path: 11071 40676
INVALID 191.96.155.0/24 BGP.as_path: 14280 27008 395378
INVALID 191.96.154.0/24 BGP.as_path: 40191 174 61317
INVALID 191.96.153.0/24 BGP.as_path: 40191 20473 200983
INVALID 191.96.152.0/24 BGP.as_path: 40191 20473 200983
INVALID 191.96.151.0/24 BGP.as_path: 40191 1299 36352
INVALID 191.96.149.0/24 BGP.as_path: 11071 3356 3549
INVALID 191.96.148.0/24 BGP.as_path: 40191 20473 200983
INVALID 191.96.136.0/24 BGP.as_path: 14280 27008 395378
INVALID 191.96.134.0/24 BGP.as_path: 2914 20473 200983
INVALID 191.96.133.0/24 BGP.as_path: 40191 1299 36352
INVALID 191.96.131.0/24 BGP.as_path: 11071 40676
INVALID 191.96.130.0/24 BGP.as_path: 40191 9304 38001 133219
INVALID 191.96.255.0/24 BGP.as_path: 40191 20473
INVALID 191.96.252.0/23 BGP.as_path: 25091 61317
INVALID 191.96.250.0/23 BGP.as_path: 25091 61317
INVALID 191.96.249.0/24 BGP.as_path: 28788 29073 64484
INVALID 191.96.246.0/24 BGP.as_path: 40191 6939 14935
INVALID 191.96.244.0/24 BGP.as_path: 40191 3257 40676 200983
INVALID 191.96.240.0/22 BGP.as_path: 25091 61317
INVALID 191.96.239.0/24 BGP.as_path: 40191 36351
INVALID 191.96.238.0/24 BGP.as_path: 11071 50245
INVALID 191.96.237.0/24 BGP.as_path: 40191 20473 200983
INVALID 191.96.233.0/24 BGP.as_path: 11071 50245
INVALID 191.96.232.0/24 BGP.as_path: 40191 20473 200983
INVALID 191.96.230.0/24 BGP.as_path: 11071 50245
INVALID 191.96.228.0/23 BGP.as_path: 40191 20473 200983
INVALID 191.96.227.0/24 BGP.as_path: 40191 3257 5580 36352 55286
INVALID 191.96.224.0/24 BGP.as_path: 11071 50245
INVALID 191.96.223.0/24 BGP.as_path: 40191 1299 36352
INVALID 191.96.222.0/24 BGP.as_path: 25091 57724 133398
INVALID 191.96.221.0/24 BGP.as_path: 14280 27008 395378
INVALID 191.96.219.0/24 BGP.as_path: 61102
INVALID 191.96.218.0/24 BGP.as_path: 61102
INVALID 191.96.215.0/24 BGP.as_path: 40191 3257 40676 200983
INVALID 191.96.214.0/24 BGP.as_path: 25091 61317
INVALID 191.96.212.0/23 BGP.as_path: 2914 54489 396194
INVALID 191.96.211.0/24 BGP.as_path: 40191 3257 40676 200983
INVALID 191.96.218.2/32 BGP.as_path: 61102
INVALID 191.96.206.0/24 BGP.as_path: 2495 6939 22177 265280 265280 265280
INVALID 191.96.204.0/23 BGP.as_path: 40191 20473 200983
INVALID 191.96.202.0/24 BGP.as_path: 40191 6939 17216
INVALID 191.96.196.0/22 BGP.as_path: 11071 35916 21769
INVALID 191.96.195.0/24 BGP.as_path: 40191 3257 40676 200983
INVALID 191.96.194.0/24 BGP.as_path: 14280 27008 395378
INVALID 191.96.192.0/24 BGP.as_path: 25091 61317
Más información sobre la lista de distribución LACNOG