<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Hi Job,<div><br></div><div>Oh the Whois for AS 61440 there is an email address <span style="background-color: rgba(255, 255, 255, 0);"><a href="mailto:noc@AS61440.NET">noc@AS61440.NET</a> . Did you try sending e-mail there?</span><div><br><div id="AppleMailSignature"><div><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><br></p><table class="MsoNormalTable" border="0" cellspacing="1" cellpadding="0" width="401" style="width: 301pt;"><tbody><tr style="height: 92.85pt;"><td width="149" style="width: 111.55pt; padding: 0.75pt; height: 92.85pt;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><span style="background-color: rgba(255, 255, 255, 0);"> <o:p></o:p></span></p></td><td width="250" style="width: 187.35pt; padding: 0.75pt; height: 92.85pt;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><span style="background-color: rgba(255, 255, 255, 0);"><b><i>Ivan Žilić Schmidt</i></b></span></p><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><br></p></td></tr></tbody></table><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><o:p style="background-color: rgba(255, 255, 255, 0);"> </o:p></p></div><div><span style="background-color: rgba(255, 255, 255, 0);"><br></span></div><blockquote type="cite"><div class="WordSection1" style="page: WordSection1;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><o:p style="background-color: rgba(255, 255, 255, 0);"> </o:p></p><table class="MsoNormalTable" border="0" cellspacing="1" cellpadding="0" width="401" style="width: 301pt;"><tbody><tr style="height: 92.85pt;"><td width="149" style="width: 111.55pt; padding: 0.75pt; height: 92.85pt;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><br></p></td><td width="250" style="width: 187.35pt; padding: 0.75pt; height: 92.85pt;"><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><span style="background-color: rgba(255, 255, 255, 0);"><i><br></i></span></p><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><br></p></td></tr></tbody></table><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;"><o:p style="background-color: rgba(255, 255, 255, 0);"> </o:p></p><p class="MsoNormal" style="margin: 0cm 0cm 0.0001pt;">Message sent from a mobile device using my <a href="http://www.mainmail.net">www.mainmail.net</a> e-mail account.</p></div></blockquote></div><div><br>On Aug 14, 2018, at 08:40, Job Snijders <<a href="mailto:job@ntt.net">job@ntt.net</a>> wrote:<br><br></div><blockquote type="cite"><div><span>Dear all,</span><br><span></span><br><span>It appears that the owner of 191.96.0.0/16 (according to WHOIS "Digital</span><br><span>Energy Technologies Chile SpA") has introduced some connectivity issues</span><br><span>by misconfiguring the RPKI ROAs.</span><br><span></span><br><span>All the below announcements are "RPKI INVALID" and do not propagate</span><br><span>correctly in some parts of the world due to networks performing RPKI</span><br><span>based Origin Validation.</span><br><span></span><br><span>As can be seen for one of the prefixes:</span><br><span><a href="https://stat.ripe.net/191.96.62.0%2F24#tabId=routing">https://stat.ripe.net/191.96.62.0%2F24#tabId=routing</a> the prefix is only</span><br><span>98% visible and not the usual 100%. This means that for each of these</span><br><span>RPKI Invalid announcements there is reachability and connectivity</span><br><span>problems.</span><br><span></span><br><span>It appears that for some of the ASNs of any receipients of suballocations</span><br><span>within 191.96.0.0/16 RPKI ROAs are created, but not for all:</span><br><span><a href="http://localcert.ripe.net:8088/roas?q=191.96.0.0/16">http://localcert.ripe.net:8088/roas?q=191.96.0.0/16</a></span><br><span></span><br><span>The current best practise is to create RPKI ROAs that match the intended</span><br><span>BGP announcements, and not to let any of your customers announce any</span><br><span>more-specific of your prefix.</span><br><span></span><br><span>If anyone can help relay this information to the appropriate contact</span><br><span>person that would be very much appreciated. Unnecessary RPKI Invalids in</span><br><span>the default-free zone hurts the effort to secure the routing system.</span><br><span></span><br><span>Or perhaps LACNIC staff can assist to help fix misconfigurations like</span><br><span>these?</span><br><span></span><br><span>Kind regards,</span><br><span></span><br><span>Job</span><br><span></span><br><span>INVALID 191.96.62.0/24 BGP.as_path: 40191 3257 40676 200983</span><br><span>INVALID 191.96.60.0/23 BGP.as_path: 50304 5588 50084 43818</span><br><span>INVALID 191.96.55.0/24 BGP.as_path: 3491 18403 131178</span><br><span>INVALID 191.96.54.0/24 BGP.as_path: 3491 18403 131178</span><br><span>INVALID 191.96.53.0/24 BGP.as_path: 3491 18403 131178</span><br><span>INVALID 191.96.52.0/22 BGP.as_path: 3491 18403 131178</span><br><span>INVALID 191.96.52.0/24 BGP.as_path: 3491 18403 131178</span><br><span>INVALID 191.96.49.0/24 BGP.as_path: 40191 36351</span><br><span>INVALID 191.96.48.0/24 BGP.as_path: 40191 3257 40676 200983</span><br><span>INVALID 191.96.40.0/24 BGP.as_path: 2914 23352 36352</span><br><span>INVALID 191.96.39.0/24 BGP.as_path: 2914 35415 206376</span><br><span>INVALID 191.96.38.0/24 BGP.as_path: 2914 20473 133537 133537</span><br><span>INVALID 191.96.37.0/24 BGP.as_path: 40191 3257 40676 200983</span><br><span>INVALID 191.96.36.0/24 BGP.as_path: 40191 36351</span><br><span>INVALID 191.96.35.0/24 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.32.0/24 BGP.as_path: 14280 27008 395378</span><br><span>INVALID 191.96.31.0/24 BGP.as_path: 40191 6939 17216</span><br><span>INVALID 191.96.25.0/24 BGP.as_path: 40191 3257 40676</span><br><span>INVALID 191.96.23.0/24 BGP.as_path: 40191 20473 200983</span><br><span>INVALID 191.96.21.0/24 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.18.0/24 BGP.as_path: 40191 174 46636</span><br><span>INVALID 191.96.16.0/24 BGP.as_path: 40191 36351</span><br><span>INVALID 191.96.14.0/24 BGP.as_path: 40191 6939 17216</span><br><span>INVALID 191.96.12.0/24 BGP.as_path: 2914 40824 394094</span><br><span>INVALID 191.96.8.0/24 BGP.as_path: 40191 36351</span><br><span>INVALID 191.96.3.0/24 BGP.as_path: 11071 50245</span><br><span>INVALID 191.96.0.0/24 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.124.0/22 BGP.as_path: 40191 174 201942</span><br><span>INVALID 191.96.122.0/24 BGP.as_path: 3491 17676 17941</span><br><span>INVALID 191.96.120.0/23 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.119.0/24 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.118.0/24 BGP.as_path: 40191 20473</span><br><span>INVALID 191.96.114.0/24 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.113.0/24 BGP.as_path: 50304 5588 50084 43818</span><br><span>INVALID 191.96.112.0/24 BGP.as_path: 2914 60781</span><br><span>INVALID 191.96.111.0/24 BGP.as_path: 11071 50245</span><br><span>INVALID 191.96.110.0/24 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.108.0/23 BGP.as_path: 11071 35916 21769</span><br><span>INVALID 191.96.107.0/24 BGP.as_path: 11071 15003</span><br><span>INVALID 191.96.105.0/24 BGP.as_path: 40191 36351</span><br><span>INVALID 191.96.104.0/24 BGP.as_path: 40191 3257 17090</span><br><span>INVALID 191.96.103.0/24 BGP.as_path: 40191 36351</span><br><span>INVALID 191.96.102.0/24 BGP.as_path: 40191 174 43578</span><br><span>INVALID 191.96.100.0/24 BGP.as_path: 11071 15003</span><br><span>INVALID 191.96.98.0/24 BGP.as_path: 14280 27008 395378</span><br><span>INVALID 191.96.97.0/24 BGP.as_path: 3491 17676 17941</span><br><span>INVALID 191.96.93.0/24 BGP.as_path: 40191 20473 200983</span><br><span>INVALID 191.96.92.0/24 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.88.0/22 BGP.as_path: 11071 35916 21769</span><br><span>INVALID 191.96.79.0/24 BGP.as_path: 2914 20473 200983</span><br><span>INVALID 191.96.78.0/24 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.76.0/24 BGP.as_path: 2914 20473 200983</span><br><span>INVALID 191.96.74.0/24 BGP.as_path: 2914 20473 200983</span><br><span>INVALID 191.96.69.0/24 BGP.as_path: 16409 33597 29713</span><br><span>INVALID 191.96.68.0/24 BGP.as_path: 40191 20473 200983</span><br><span>INVALID 191.96.64.0/24 BGP.as_path: 40191 36351</span><br><span>INVALID 191.96.189.0/24 BGP.as_path: 11071 40676</span><br><span>INVALID 191.96.188.0/24 BGP.as_path: 2914 45352 205329</span><br><span>INVALID 191.96.186.0/23 BGP.as_path: 11071 35916 21769</span><br><span>INVALID 191.96.185.0/24 BGP.as_path: 25091 49981</span><br><span>INVALID 191.96.178.0/23 BGP.as_path: 40191 174 61317</span><br><span>INVALID 191.96.177.0/24 BGP.as_path: 40191 6939 14935</span><br><span>INVALID 191.96.176.0/24 BGP.as_path: 14280 27008 395378</span><br><span>INVALID 191.96.174.0/24 BGP.as_path: 3491 32181</span><br><span>INVALID 191.96.172.0/24 BGP.as_path: 40191 9002 49453</span><br><span>INVALID 191.96.170.0/24 BGP.as_path: 3491 32181</span><br><span>INVALID 191.96.168.0/24 BGP.as_path: 40191 9002 49453</span><br><span>INVALID 191.96.167.0/24 BGP.as_path: 40191 174 61317</span><br><span>INVALID 191.96.166.0/24 BGP.as_path: 11071 40676</span><br><span>INVALID 191.96.165.0/24 BGP.as_path: 40191 1299 36352</span><br><span>INVALID 191.96.164.0/24 BGP.as_path: 3491 32181</span><br><span>INVALID 191.96.160.0/22 BGP.as_path: 11071 35916 21769</span><br><span>INVALID 191.96.159.0/24 BGP.as_path: 11071 40676</span><br><span>INVALID 191.96.157.0/24 BGP.as_path: 11071 40676</span><br><span>INVALID 191.96.155.0/24 BGP.as_path: 14280 27008 395378</span><br><span>INVALID 191.96.154.0/24 BGP.as_path: 40191 174 61317</span><br><span>INVALID 191.96.153.0/24 BGP.as_path: 40191 20473 200983</span><br><span>INVALID 191.96.152.0/24 BGP.as_path: 40191 20473 200983</span><br><span>INVALID 191.96.151.0/24 BGP.as_path: 40191 1299 36352</span><br><span>INVALID 191.96.149.0/24 BGP.as_path: 11071 3356 3549</span><br><span>INVALID 191.96.148.0/24 BGP.as_path: 40191 20473 200983</span><br><span>INVALID 191.96.136.0/24 BGP.as_path: 14280 27008 395378</span><br><span>INVALID 191.96.134.0/24 BGP.as_path: 2914 20473 200983</span><br><span>INVALID 191.96.133.0/24 BGP.as_path: 40191 1299 36352</span><br><span>INVALID 191.96.131.0/24 BGP.as_path: 11071 40676</span><br><span>INVALID 191.96.130.0/24 BGP.as_path: 40191 9304 38001 133219</span><br><span>INVALID 191.96.255.0/24 BGP.as_path: 40191 20473</span><br><span>INVALID 191.96.252.0/23 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.250.0/23 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.249.0/24 BGP.as_path: 28788 29073 64484</span><br><span>INVALID 191.96.246.0/24 BGP.as_path: 40191 6939 14935</span><br><span>INVALID 191.96.244.0/24 BGP.as_path: 40191 3257 40676 200983</span><br><span>INVALID 191.96.240.0/22 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.239.0/24 BGP.as_path: 40191 36351</span><br><span>INVALID 191.96.238.0/24 BGP.as_path: 11071 50245</span><br><span>INVALID 191.96.237.0/24 BGP.as_path: 40191 20473 200983</span><br><span>INVALID 191.96.233.0/24 BGP.as_path: 11071 50245</span><br><span>INVALID 191.96.232.0/24 BGP.as_path: 40191 20473 200983</span><br><span>INVALID 191.96.230.0/24 BGP.as_path: 11071 50245</span><br><span>INVALID 191.96.228.0/23 BGP.as_path: 40191 20473 200983</span><br><span>INVALID 191.96.227.0/24 BGP.as_path: 40191 3257 5580 36352 55286</span><br><span>INVALID 191.96.224.0/24 BGP.as_path: 11071 50245</span><br><span>INVALID 191.96.223.0/24 BGP.as_path: 40191 1299 36352</span><br><span>INVALID 191.96.222.0/24 BGP.as_path: 25091 57724 133398</span><br><span>INVALID 191.96.221.0/24 BGP.as_path: 14280 27008 395378</span><br><span>INVALID 191.96.219.0/24 BGP.as_path: 61102</span><br><span>INVALID 191.96.218.0/24 BGP.as_path: 61102</span><br><span>INVALID 191.96.215.0/24 BGP.as_path: 40191 3257 40676 200983</span><br><span>INVALID 191.96.214.0/24 BGP.as_path: 25091 61317</span><br><span>INVALID 191.96.212.0/23 BGP.as_path: 2914 54489 396194</span><br><span>INVALID 191.96.211.0/24 BGP.as_path: 40191 3257 40676 200983</span><br><span>INVALID 191.96.218.2/32 BGP.as_path: 61102</span><br><span>INVALID 191.96.206.0/24 BGP.as_path: 2495 6939 22177 265280 265280 265280</span><br><span>INVALID 191.96.204.0/23 BGP.as_path: 40191 20473 200983</span><br><span>INVALID 191.96.202.0/24 BGP.as_path: 40191 6939 17216</span><br><span>INVALID 191.96.196.0/22 BGP.as_path: 11071 35916 21769</span><br><span>INVALID 191.96.195.0/24 BGP.as_path: 40191 3257 40676 200983</span><br><span>INVALID 191.96.194.0/24 BGP.as_path: 14280 27008 395378</span><br><span>INVALID 191.96.192.0/24 BGP.as_path: 25091 61317</span><br><span>_______________________________________________</span><br><span>LACNOG mailing list</span><br><span><a href="mailto:LACNOG@lacnic.net">LACNOG@lacnic.net</a></span><br><span><a href="https://mail.lacnic.net/mailman/listinfo/lacnog">https://mail.lacnic.net/mailman/listinfo/lacnog</a></span><br><span>Cancelar suscripcion: <a href="https://mail.lacnic.net/mailman/options/lacnog">https://mail.lacnic.net/mailman/options/lacnog</a></span><br></div></blockquote></div></div></body></html>