RE: multiple route objects and authorisation

["Jamie Stallwood" <Jamie.Stallwood@localhost]

Hi Lutz,

You are correct, you will need to get the existing route removed first, the 
responsible LIR will need to raise a ticket with RIPE to assist if PROV1-MNT 
refuses to co-operate.

One thing you can go with AS2 is to create a special MNTNER, which you give 
MNT-ROUTES to on the inetnum object. That mntner has a password that you give 
to the AS mntner, and you keep the mnt-by of it as your normal mntner. 

That way they can create the route with both your shared password and their AS 
mntner login; but you are the owner and have full control over all the objects. 
Of course it is dependent on how much trust there is :)

--
Jamie Stallwood
Security Specialist
Imerja Ltd
M: 07795 840385
jamie.stallwood@localhost
 
-----Original Message-----
From: db-help-admin@localhost [
	    
	    
] On Behalf Of 
SerNet Support Lutz Preßler
Sent: 30 January 2009 11:51
To: db-help@localhost
Subject: multiple route objects and authorisation

Hello!

Consider the following (anonymous) example:

inetnum:        192.168.137.0 - 192.168.137.255
netname:        CUSTOMER-PI-NET
descr:          ...
country:        DE
admin-c:        CUSTOMERADMIN-RIPE
tech-c:         TECHC-RIPE
mnt-by:         MAINT-MNT
status:         ASSIGNED PI
mnt-routes:     PROV1-MNT
mnt-domains:    MAINT-MNT
source:         RIPE # Filtered

% Information related to '192.168.137.0/24AS1'
route:          192.168.137.0/24
descr:          ...
origin:         AS1
mnt-by:         PROV1-MNT
source:         RIPE # Filtered


Connectivity for 192.168.137.0/24 shall be switched to PROV2 and
PROV1 may be difficult to contact.

It's possible for MAINT-MNT to add another mnt-routes:

inetnum:        192.168.137.0 - 192.168.137.255
...
mnt-routes:     PROV1-MNT
mnt-routes:     PROV2-MNT
 
But is it possible for PROV2-MNT to add another
route object 192.168.137.0/24AS2 without help from PROV1-MNT?
I read https://www.ripe.net/info/faq/db/route-creation-IP-space-check.html
that it's not possible.
Can MAINT-MNT or CUSTOMERADMIN-RIPE do anything if PROV1-MNT
is unavailable?

Thanks,
  Lutz Pressler

-- 
Lutz Preßler  <Lutz.Pressler@localhost    http://www.SerNet.DE/
SerNet Service Network GmbH, Bahnhofsallee 1b, D-37081 Göttingen
Tel.: +49-551-370000-2,      FAX: +49-551-370000-9
AG Göttingen, HRB 2816,      GF: Dr. Johannes Loxen


-- 
Imerja Limited
Tel: 0870 8611488  | Fax: 0870 8611489 | Web: www.imerja.com

Registered Office: Paragon House, Paragon Business Park, Chorley New Road, 
Horwich, Bolton BL6 6HG

Registered in England and Wales No. 5180119
VAT Registered No. 845 0647 22
ISO Registered Firm No. GB2001527

This email is confidential and intended solely for the person or 
organisation to which it is addressed. It may contain privileged and 
confidential information. If you are not the intended recipient(s) you
should not use, copy, distribute or take any action or reliance on it,
since to do so is strictly prohibited and may be unlawful. If you have
received this transmission in error please notify the sender 
immediately by email reply and delete it from your system. E-mail 
messages are not secure and attachments could contain software viruses
which may damage your system. Whilst every reasonable precaution has
been taken to minimise this risk, Imerja Limited cannot accept any
liability for any damage sustained as a result of these factors. You
are advised to carry out your own virus checks before opening any
attachment. Any views or opinions expressed in this e-mail are solely
those of the author and do not represent those of Imerja Limited 
unless otherwise stated.