Re: ARIN RPKI Trust Anchor Issue

2025-01-30 Thread Job Snijders
On Thu, Jan 30, 2025 at 04:03:58PM +0100, Simon Leinen wrote: > > It is interesting that the 'trigger event' happened two days ago, > > but it is only just now that it became quite tangible! It seems this > > anomaly could've been alerted for earlier on. > > Can you elaborate how? (Looking for ove

Re: ARIN RPKI Trust Anchor Issue

2025-01-30 Thread Simon Leinen via NANOG
Dear Job, > I analysed the alert, here is my assessment. Thanks a lot for the analysis. I had also received the alert (Randy Bush and others as well, see "Subject: TA Malfunction??" thread :-) and was wondering... your analysis makes sense as far as I can judge (which is not very far). [...] >

Re: ARIN RPKI Trust Anchor Issue

2025-01-30 Thread Brad Gorman
: Thursday, January 30, 2025 at 07:57 To: Christopher Hawker Cc: NANOG Subject: Re: ARIN RPKI Trust Anchor Issue Dear all, I analysed the alert, here is my assessment. If I recall correctly, Packetvis uses multiple data sources (different versions of validator implementations) and alerts on anomalies

Re: ARIN RPKI Trust Anchor Issue

2025-01-30 Thread Job Snijders
Dear all, I analysed the alert, here is my assessment. If I recall correctly, Packetvis uses multiple data sources (different versions of validator implementations) and alerts on anomalies spotted by more than a single data source. Most RPKI Validator implementations limit the maximum allowable

ARIN RPKI Trust Anchor Issue

2025-01-30 Thread Christopher Hawker
Hello folks, Has anyone received any similar event notifications (from PacketVis or other)? Trying to work out if it's a false-positive. Regards, Christopher Hawker From: PacketVis Sent: Thursday, January 30, 2025 9:40 PM To: Christopher Hawker Subject: bgp ta-