I
12 Aug
2021
5:34 p.m.
Hello everyone,
![image.png]()
--
Heard of issues in a friend's network and found that their RPKI ROAs have been tweaked. Upon noticing I see some more similar random cases where origin AS has been changed to non-existent AS in some cases. Since these pools are with IRINN, networks cannot change these directly but have to go via IRINN way.
An example of this: AS59199 - a non-existent AS with bunch of prefixes from Railtel to Microscan:
I suspect some unauthorized alteration within RPKI ROA data. Anyone else facing issues today?
Note: RPKI Invalids will face partial connectivity and many global networks would just drop them resulting in many issues.
Anurag Bhatia