[GTER] RIPE problemas no validador era: Re: RPKI no Registro.br

[Hugo Koji Kobayashi]

Tinham só reiniciado o serviço. Agora já tem novo release do Validator
3 com a correção:

https://www.ripe.net/ripe/mail/archives/routing-wg/2019-December/003946.html

"This was an interesting bug - We always relied on the idea that
serial numbers of manifest objects increase --- apparently all the
Trust Anchors so far (except for some of the sub-repositories under
APNIC) generated increasing serial numbers and it always worked. It
looks like Krill doesn't do it, that's why Validator 3 doesn't always
pick up the latest manifest and can use stale data. According to the
RFC serial numbers don't have to increase, they just need to be
different (the Krill implementation follows that RFC), so it was a bug
on our side that is now fixed."


On Mon, Dec 16, 2019 at 01:00:50PM -0200, Gondim wrote:
> Opa Federico,
> 
> Acabaram de resolver o problema. Pelo menos minha consulta está OK.
> Mandaram isso na lista lá:
> 
> Hi all,
> 
> 
> It seems that Validator 3.x (the one you see
> on https://rpki-validator.ripe.net/bgp-preview) has been hanging and not
> fetching new information from the repositories. All the other Validators
> (2.x, Routinator, OctoRPKI, RPKIclient, FORT) don’t have this problem,
> so it depends on what validator you are running, which result you see.
> Our RPKI team is currently looking into this. Meanwhile, if you are
> running Validator 3.x and you see 170.79.184.0/22 appearing as
> “unknown”, a reboot will help. 
> We have just rebooted  https://rpki-validator.ripe.net/ and as you can
> see, 170.79.184.0/22  now appears as “valid”. 
> Stay tuned, as soon as we have more information, I will report back.
> 
> Thanks,
> Nathalie Trenaman
> RIPE NCC
> 
> Em 16/12/2019 12:34, Frederico A C Neves escreveu:
> > On Mon, Dec 16, 2019 at 12:41:14AM -0200, Gondim wrote:
> > ...
> >> Entendi. Quando consulto meu ASN nesse link do RIPE [1] devolve como
> >> válido. Mas no novo sistema deles [2] dá como unknown.
> >>
> >> [1] http://localcert.ripe.net:8088/bgp-preview
> >> <http://localcert.ripe.net:8088/bgp-preview?q=AS53135>
> > Esta situação está relacionada a existência de um problema com o
> > Validador do Ripe. O assunto está em discussão e pode ser acompanhado
> > nas referências abaixo.
> >
> > https://www.ripe.net/ripe/mail/archives/routing-wg/2019-December/003939.html
> >
> > https://twitter.com/xs4ndro/status/1206346031002083328
> >
> > []
> > Fred
> > --
> > gter list    https://eng.registro.br/mailman/listinfo/gter
> 
> -- 
>   ⢀⣴⠾⠻⢶⣦⠀  Marcelo Gondim 
>   ⣾⠁⢠⠒⠀⣿⡁  Sysadmin - https://www.linuxinfo.com.br
>   ⢿⡄⠘⠷⠚⠋   DA04 922E 78B3 44A5 3C8D 23D0 8DB5 571E E151 4E19
>   ⠈⠳⣄⠀⠀⠀⠀  Logic will get you from A to B. Imagination will take you everywhere. (Albert Einstein)
> 
> 
> --
> gter list    https://eng.registro.br/mailman/listinfo/gter