I stand corrected (by Job). Output from our router shows that both AS-es are valid show validation database | match 35.208.0.0/15 35.208.0.0/15-15 15169 192.168.28.28 valid * 35.208.0.0/15-15 15169 192.168.28.29 valid * 35.208.0.0/15-15 19527 192.168.28.28 valid * 35.208.0.0/15-15 19527 192.168.28.29 valid * So my interpretation of info shown by routinator is not correct. Sorry for any confusion I may have caused! R. -----Original Message----- From: Outages <outages-bounces@outages.org> On Behalf Of Robert Heuvel via Outages Sent: Tuesday, January 10, 2023 06:34 PM To: Job Snijders <job@instituut.net> Cc: outages@outages.org Subject: Re: [outages] Peering issue between Cogent and Tata? Job, I have used the routinator client and that only shows AS15169 as being valid. R. -----Original Message----- From: Job Snijders <job@instituut.net> Sent: Tuesday, January 10, 2023 06:30 PM To: Robert Heuvel <RHeuvel@atom86.net> Cc: Miller, Jon <JMiller@boselaw.com>; mike tancsa <mike@sentex.net>; outages@outages.org Subject: Re: [outages] Peering issue between Cogent and Tata? Hi Robert, others, On Tue, Jan 10, 2023 at 05:23:58PM +0000, Robert Heuvel via Outages wrote:
That is a Route Validation issue.
I'm not sure it is!
The IP 35.209.30.41 is part of 35.208.0.0/15 for which a ROA has been created by AS15169 to be originated by AS15169.
If check the IP on the Cogent looking glass, Cogent shows that the IP is coming from AS19527 (which is not correct according to the ROA for this prefix…
There are two ROAs for this prefix, one authorising 15169 and the other authorising 19527: 19527: https://console.rpki-client.org/rpki.arin.net/repository/arin-rpki-ta/5e4a23... 15169: https://console.rpki-client.org/rpki.arin.net/repository/arin-rpki-ta/5e4a23... The RFC 6811 BGP route validation algorithm only requires a single (one) ROA to set the state of the route as "valid". Multiple ROAs for the same prefix do not conflict with each other. Kind regards, Job _______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages