[RPKI-Discuss] Cloudflare's new RPKI Invalid Beacons

[Frank Habicht]

Hi,

Thanks Job for tweeting this- "New RPKI Invalid Beacons" :
https://blog.cloudflare.com/is-bgp-safe-yet-rpki-routing-security-initiative/

https://bgp.he.net/net/103.21.244.0/24
https://bgp.he.net/net/2606:4700:7000::/48
# both RPKI invalid

...but:

http://lg.seacomnet.com

Router: lg-01-jnb.za
Command: show bgp ipv6 unicast 2606:4700:7000::/48

BGP routing table entry for 2606:4700:7000::/48, version 1345243992
Paths: (2 available, best #1, table default)
  Not advertised to any peer
  Refresh Epoch 1
  37100 13335, (aggregated by 13335 197.234.240.1)
    2C0F:FEB0:B:3::1 (FE80::86B5:9C00:15F5:7C00) from 2C0F:FEB0:B:3::1
(105.16.0.162)
      Origin IGP, metric 0, localpref 100, valid, external, best
      Community: 37100:10000 37100:11000 37100:11005 37100:11056
      path 3E3B7FF0 RPKI State not found
      rx pathid: 0, tx pathid: 0x0
  Refresh Epoch 1
  37100 13335, (aggregated by 13335 197.234.240.1)
    2C0F:FEB0:B:2::1 (FE80::86B5:9C00:15FC:1C54) from 2C0F:FEB0:B:2::1
(105.16.0.163)
      Origin IGP, metric 0, localpref 100, valid, external
      Community: 37100:10000 37100:11000 37100:11005 37100:11056
      path 2BC75494 RPKI State not found
      rx pathid: 0, tx pathid: 0


...and:

https://as37271.fyi/looking-glass/

BGP routing table entry for 103.21.244.0/24, version 2607625621
Paths: (22 available, best #21, table default)
Multipath: iBGP
  Additional-path-install
  Path advertised to update-groups:
     721
  Refresh Epoch 1
  13335, (aggregated by 13335 197.234.240.1)
    41.78.189.188 (metric 301) from 41.78.189.188 (41.78.189.188)
      Origin IGP, metric 0, localpref 250, valid, internal, all
      Community: 13335:10045 13335:19040 13335:20500 13335:20530 37271:2
37271:11 37271:1001 37271:2002 37271:2018 37271:2202 37271:3710
37271:4002 37271:5002 37271:5200 37271:5205
      Extended Community: 0x4300:0:1
      path 7F9A9B70E6E8 RPKI State not found
      rx pathid: 0x0, tx pathid: 0x5


BGP routing table entry for 2606:4700:7000::/48, version 634943605
Paths: (33 available, best #10, table default)
Multipath: iBGP
  Additional-path-install
  Path advertised to update-groups:
     637
  Refresh Epoch 1
  13335, (aggregated by 13335 197.234.240.1)
    ::FFFF:41.78.189.188 (metric 301) from 41.78.189.188 (41.78.189.188)
      Origin IGP, metric 0, localpref 250, valid, internal, all
      Community: 13335:10045 13335:19040 13335:20500 13335:20530 37271:2
37271:11 37271:1001 37271:2002 37271:2018 37271:2202 37271:3710
37271:4002 37271:5002 37271:5200 37271:5205
      Extended Community: 0x4300:0:1
      mpls labels in/out 2238/1293
      path 7F9AB64ED058 RPKI State not found
      rx pathid: 0xD, tx pathid: 0xC
  Path not advertised to any peer
  Refresh Epoch 1
  37100 13335, (aggregated by 13335 197.234.240.1)
    ::FFFF:41.78.189.188 (metric 301) from 41.78.189.188 (41.78.189.188)
      Origin IGP, metric 0, localpref 250, valid, internal
      Community: 37100:10000 37100:11000 37100:11005 37100:11056 37271:2
37271:11 37271:1001 37271:2002 37271:2018 37271:2202 37271:3710
37271:4002 37271:5002 37271:5200 37271:5205
      Extended Community: 0x4300:0:1
      mpls labels in/out 2238/1293
      path 7F9A6060DCF0 RPKI State not found
      rx pathid: 0x3, tx pathid: 0
  Path advertised to update-groups:
     637