Re: BGP route hijack by AS10990

[Alex Band <alex () nlnetlabs nl>]

> On 3 Aug 2020, at 11:04, adamv0025 () netconsultings com wrote:
>
> > Darrell Budic
> > Sent: Sunday, August 2, 2020 6:23 PM
> >
> > On Jul 30, 2020, at 5:37 PM, Baldur Norddahl <baldur.norddahl () gmail com>
> > wrote:
> > > Telia implements RPKI filtering so the question is did it work? Were any
> > affected prefixes RPKI signed? Would any prefixes have avoided being
> > hijacked if RPKI signing had been in place?
> > > Regards
> > >
> > > Baldur - who had to turn off RPKI filtering at the request of JTAC to stop our
> > mx204s from crashing :-(
> > >
> >
> > Oh uh, I’m getting close to getting RPKI going on my mx204s, or was until you
> > posted that. What’s the story there, and perhaps which junos version?
>
> Same here, would be interested in affected Junos versions or any details you can share please,

According to the information I received from the community[1], you should read PR1461602 and PR1309944 before deploying.

-Alex

[1] https://rpki.readthedocs.io/en/latest/rpki/router-support.html