[RPKI-Discuss] Cloudflare's new RPKI Invalid Beacons

Job Snijders job at ntt.net
Sat Apr 18 11:56:37 UTC 2020


On Sat, Apr 18, 2020, at 13:34, Frank Habicht wrote:

> Thanks Job for tweeting this- "New RPKI Invalid Beacons" :

> https://blog.cloudflare.com/is-bgp-safe-yet-rpki-routing-security-initiative/

>

> https://bgp.he.net/net/103.21.244.0/24

> https://bgp.he.net/net/2606:4700:7000::/48

> # both RPKI invalid

>

> ...but:

>

> http://lg.seacomnet.com

>

> Router: lg-01-jnb.za

> Command: show bgp ipv6 unicast 2606:4700:7000::/48

>

> BGP routing table entry for 2606:4700:7000::/48,


Probably because of the legal barrier the ARIN RPKI TAL RPA imposes: https://youtu.be/oBwAQep7Q7o

As a result, ARIN prefixes simply are less protected than AFRINIC prefixes.

Kind regards,

Job



More information about the RPKI-Discuss mailing list