[RPKI] recent increase in invalid routes: Starhub

nusenu nusenu-lists at riseup.net
Thu Dec 13 20:48:00 UTC 2018


I don't measure all invalid announcements - I just measure
unreachable IP space so my numbers are significantly lower
than yours (<2k vs. >5k prefixes) and can not be compared directly.

I use exclusively RIPE RIS dumps and publish my resulting data here:
https://nusenu.github.io/RPKI-Observatory

I can confirm an increase in unreachable IPv6 prefixes on 2018-12-12 but I'm primarily
measuring IP space by size (not by prefix count) and
by that metric I didn't see a relevant event (with a measurement probing resolution of 12h
on 2018-12-12 compared to other events when unreachable IP space changed.

According to the data I see, a single ROA for AS55430 that became effective
on 2018-12-12 10:32:10 UTC caused most of the
new unreachable prefixes.
The specific ROA contains a maxlen of /38 (typo?)
and invalidated 182 IPv6 prefixes, but since
all of them are just /48s it didn't affect to much IPv6 space
when compared with the overall numbers.

Datetime		#IPv6 prefixes		/48s
+---------------------+----------+--------------------+
| 2018-11-23 02:35:00 |      103 |            1742227 |
| 2018-11-29 14:35:00 |      140 |            2069913 |
| 2018-12-07 14:35:00 |      124 |            2532249 |
| 2018-12-10 02:35:00 |      125 |            2532250 |
| 2018-12-10 14:35:00 |      125 |            2532250 |
| 2018-12-11 02:35:00 |      125 |            2532250 |
| 2018-12-11 14:35:00 |      125 |            2532250 |
| 2018-12-12 02:35:00 |      123 |            1942426 |
| 2018-12-12 14:35:00 |      294 |            1942604 |
+---------------------+----------+--------------------+

The IPv4 numbers didn't change much on that day:

+---------------------+----------+--------------------+
| 2018-11-23 02:35:00 |     1623 |               8889 |
| 2018-11-29 14:35:00 |     1673 |               8961 |
| 2018-12-07 14:35:00 |     1620 |              10125 |
| 2018-12-10 02:35:00 |     1582 |               9068 |
| 2018-12-10 14:35:00 |     1577 |               9063 |
| 2018-12-11 02:35:00 |     1580 |               9064 |
| 2018-12-11 14:35:00 |     1614 |               9127 |
| 2018-12-12 02:35:00 |     1619 |               9132 |
| 2018-12-12 14:35:00 |     1610 |               9123 |
+---------------------+----------+--------------------+

If you would like to reduce the number of unreachable
IPv6 space effectively there are many (22) ASNs which
announce more unreachable IPv6 address space than AS55430.
https://nusenu.github.io/RPKI-Observatory/unreachable_as-v6.html

-- 
https://twitter.com/nusenu_
https://mastodon.social/@nusenu

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/rpki/attachments/20181213/800d3032/attachment.bin>


More information about the RPKI mailing list