<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> </head> <body> <p>Hi Marco,<br> </p> <div class="moz-cite-prefix">Em 16/12/2019 10:28, Marco Paesani escreveu:<br> </div> <blockquote type="cite" cite="mid:CANiyn-0xyvsAWetQ-StAFoG+odTsx_biZUAfjE9BgefyFZ4AOQ@mail.gmail.com"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <div dir="ltr">Marcelo, <div>the route <a href="http://170.79.184.0/22" rel="noreferrer" target="_blank" moz-do-not-send="true">170.79.184.0/22</a> is not present on validator.</div> <div><font face="monospace"><br> </font></div> <font face="monospace">m.paesani@MX960-MIX-RE0# run show route <a href="http://170.79.184.0/22" moz-do-not-send="true">170.79.184.0/22</a> exact active-path<br> <br> inet.0: 782165 destinations, 5177202 routes (777291 active, 0 holddown, 20504 hidden)<br> + = Active Route, - = Last Active, * = Both<br> <br> <a href="http://170.79.184.0/22" moz-do-not-send="true">170.79.184.0/22</a> *[BGP/170] 3d 14:13:33, MED 500, localpref 100<br> AS path: 6762 53181 53135 I, validation-state: <b><font color="#ff0000">unknown</font></b><br> > to 93.186.128.48 via xe-8/0/3.100</font><br> </div> </blockquote> <p>The strange thing is that it is being validated elsewhere. What I do not understand is why in some it appears as valid and others as unknown when everyone should be seeing the same information. Or am I mistaken?</p> <p># whois -h whois.bgpmon.net " --roa 53135 170.79.184.0/22"<br> 0 - Valid<br> ------------------------<br> ROA Details<br> ------------------------<br> Origin ASN: AS53135<br> Not valid Before: 2019-12-13 19:24:16<br> Not valid After: 2020-12-13 19:29:16 Expires in 363d6h55m11s<br> Trust Anchor: rpki-repo.registro.br<br> Prefixes: 170.79.184.0/22 (max length /24)</p> <p>====================================================<br> </p> <p># whois -h whois.bgpmon.net 170.79.184.0/22<br> % This is the BGPmon.net whois Service<br> % You can use this whois gateway to retrieve information <br> % about an IP adress or prefix<br> % We support both IPv4 and IPv6 address.<br> %<br> % For more information visit:<br> % <a class="moz-txt-link-freetext" href="https://portal.bgpmon.net/bgpmonapi.php">https://portal.bgpmon.net/bgpmonapi.php</a><br> <br> Prefix: 170.79.184.0/22<br> Prefix description: Nettel Telecomunicacoes Ltda<br> Country code: BR<br> Origin AS: 53135<br> Origin AS Name: Nettel Telecomunica��es Ltda., BR<br> RPKI status: ROA validation successful<br> First seen: 2017-03-02<br> Last seen: 2019-12-14<br> Seen by #peers: 65<br> </p> <p><br> </p> <blockquote type="cite" cite="mid:CANiyn-0xyvsAWetQ-StAFoG+odTsx_biZUAfjE9BgefyFZ4AOQ@mail.gmail.com"> <div dir="ltr"> <div><br> </div> <div> <div> <div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"> <div dir="ltr"> <div> <div dir="ltr"> <div> <div dir="ltr"> <div dir="ltr"> <div dir="ltr"> <div dir="ltr"> <div dir="ltr"><font face="arial, helvetica, sans-serif" color="#000000">Marco Paesani</font></div> <div><br> </div> <div><img src="https://docs.google.com/a/paesani.it/uc?id=0B8Pjoo-dtmQtd1h1S3d4aHdRM1E&export=download" style="font-size:12.8px" moz-do-not-send="true" width="96" height="86"><br> </div> <div dir="ltr"><font style="font-size:small" color="#000000"><font face="arial, helvetica, sans-serif"><font size="2">Skype: mpaesani<br> Mobile: +39 348 6019349<br> Success depends on the right choice !<br> Email: <a href="mailto:marco@paesani.it" style="color:rgb(17,85,204)" target="_blank" moz-do-not-send="true">marco@paesani.it</a></font><br> </font><br> </font></div> <div dir="ltr"><font style="font-size:small" color="#000000"><br> </font></div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> <br> </div> </div> <br> <div class="gmail_quote"> <div dir="ltr" class="gmail_attr">Il giorno lun 16 dic 2019 alle ore 12:54 Gondim via routing-wg <<a href="mailto:routing-wg@ripe.net" moz-do-not-send="true">routing-wg@ripe.net</a>> ha scritto:<br> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi Matthias,<br> <br> Em 16/12/2019 08:43, Matthias Waehlisch escreveu:<br> > [1] and [2] use different Trust Anchors.<br> ><br> > which prefix do you check?<br> <br> For example <a href="http://170.79.184.0/22" rel="noreferrer" target="_blank" moz-do-not-send="true">170.79.184.0/22</a><br> <br> Other Autonomous Systems that I consulted also experienced this problem.<br> <br> ><br> > Cheers<br> > matthias<br> ><br> > On Mon, 16 Dec 2019, Gondim via routing-wg wrote:<br> ><br> >> Dear all,<br> >><br> >> Friday, here in Brazil, the RPKI was enabled. We have published our ROAs<br> >> and are being validated in several places but we found a divergence.<br> >> When we query our AS on this link [1] it appears to be valid but when we<br> >> query our AS on this link [2], it appears as unknown.<br> >><br> >> Is there any difference between the tools that might be causing this?<br> >><br> >> [1] <a href="http://localcert.ripe.net:8088/bgp-preview" rel="noreferrer" target="_blank" moz-do-not-send="true">http://localcert.ripe.net:8088/bgp-preview</a><br> >><br> >> [2] <a href="https://rpki-validator.ripe.net/bgp-preview" rel="noreferrer" target="_blank" moz-do-not-send="true">https://rpki-validator.ripe.net/bgp-preview</a><br> <br> </blockquote> </div> </blockquote> <pre class="moz-signature" cols="72">-- ⢀⣴⠾⠻⢶⣦⠀ Marcelo Gondim ⣾⠁⢠⠒⠀⣿⡁ Sysadmin - <a class="moz-txt-link-freetext" href="https://www.linuxinfo.com.br">https://www.linuxinfo.com.br</a> ⢿⡄⠘⠷⠚⠋ DA04 922E 78B3 44A5 3C8D 23D0 8DB5 571E E151 4E19 ⠈⠳⣄⠀⠀⠀⠀ Logic will get you from A to B. Imagination will take you everywhere. (Albert Einstein)</pre> </body> </html>