Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Vultr RPKI Email
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Vultr RPKI Email

SplitIceSplitIce Member, Host Rep

Before anyone gets stressed, Vultr incorrectly emailed some clients about invalid RPKI entries. Nothing to worry about, their auditing system seems to have been faulty.

--

Dear Customer,

Routine audits of our network configurations have revealed that one or more prefixes have invalid RPKI settings. This issue may prevent your BGP announced IP space from being reachable from all parts of the internet.

We have identified the following problems:

***/24 invalid origin ASN
***/24 invalid origin ASN
***/24 invalid origin ASN

Based on your current settings, we expect that your announcements will be originating from AS136165. Please review https://www.vultr.com/docs/rpki for more information on RPKI.

If these are leased IPs, you will need to contact the owner of the address space for assistance. Only the owner of the space can make changes to the RPKI setup.

If you are no longer using these announcements, please let us know.

-- Vultr.com Support Team --

Thanked by 1dedicados

Comments

  • xxslxxsl Member, LIR

    They may want all the prefixes to have RPKI records, not only ROA

  • SplitIceSplitIce Member, Host Rep

    @xxsl

    Greetings,

    There appears to be an issue on our side with this RPKI auditing system. We're investigating and determining whether any corrections need to be made. No action is required from you at this time, and we'll let you know if anything changes.

    Regards,

  • xxslxxsl Member, LIR

    Oh, sounds good. Got scared before. ;-)

    @SplitIce said:
    @xxsl

    Greetings,

    There appears to be an issue on our side with this RPKI auditing system. We're investigating and determining whether any corrections need to be made. No action is required from you at this time, and we'll let you know if anything changes.

    Regards,

  • FHRFHR Member, Host Rep

    As far as I can tell, the issue is that they sent "invalid origin ASN" warnings for prefixes which don't have RPKI at all.

  • zenkizenki Member

    I got the same email this morning

  • eLohkCalbeLohkCalb Member
    edited June 2019

    You will get this email as well if you announce both /23 and /24 (split the /23 into 2 more specific announcements), even though ROA and RPKI are setup correctly.

    They seem to be pulling records from RIR or perhaps RADB. I'd say what they sent contain partly incorrect information.

Sign In or Register to comment.