Hi,

on 2018-11-12 16:00 UTC AS3215 (Orange France) started to announce /17s prefixes
for IP space that was previously announced as /16.
https://twitter.com/nusenu_/status/1063375690144337921

This causes RPKI INVALID announcements since the related RPKI ROAs have a max 
length of 16
and have not been updated to match the change in BGP configuration.

This in turn significantly affects the visibility of the affected prefixes, 
example:
https://stat.ripe.net/widget/visibility#w.resource=83.114.0.0%2F17

List of affected prefixes in AS3215:
https://nusenu.github.io/RPKI-Observatory/unreachable_AS3215-v4.html
(data as of 2018-11-16 02:35:00 UTC)


Since I'm already here, this is the complete list for ASes located in France
who's visibility is reduced due to RPKI misconfigurations.

#       ASN             (announcing) AS name                                    
        prefixes unreachable /24s
------------------------------------------------------------------------------------------------------
0       AS3215          AS3215 - Orange S.A.                                    
        8       960
1       AS62192         EFFI-NET - Efficiency Network SARL                      
        2       5
2       AS202328        AOCTEL-AS - AOC TELECOM SARL                            
        4       4
3       AS35393         EURO-WEB-AS - SAS CTS Computers and Telecommunications 
Systems  2       3
4       AS199727        EVOTYS - EVOTYS SARL                                    
        2       2
5       AS200283        Romuald Richard trading as R RICHARD INFORMATIQUE EIRL  
        1       2
6       AS48702         ENGIE-AS - ENGIE SA                                     
        1       1
7       AS205329        ASCHOONTRADING - choon trading & marketing              
        1       1
8       AS62000         NETRIX-AS - Netrix SAS                                  
        1       1
9       AS44850         IRD-AS - EPA Institut de Recherche pour le 
Developpement        1       1

regularly updated list can be found on the RPKI Oberservatory page:
https://nusenu.github.io/RPKI-Observatory/unreachable_fr-v4.html

kind regards,
nusenu
-- 
https://twitter.com/nusenu_
https://mastodon.social/@nusenu

Attachment: signature.asc
Description: OpenPGP digital signature

Répondre à