From nobody Thu May 18 04:42:18 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B6CB1293DB for ; Thu, 18 May 2017 04:42:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wBGMNwOrHIqw for ; Thu, 18 May 2017 04:42:15 -0700 (PDT) Received: from molamola.ripe.net (molamola.ripe.net [IPv6:2001:67c:2e8:11::c100:1371]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80D8B12EBC1 for ; Thu, 18 May 2017 04:36:48 -0700 (PDT) Received: from titi.ripe.net ([193.0.23.11]) by molamola.ripe.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.88) (envelope-from ) id 1dBJja-0008Nv-6T for sidrops@ietf.org; Thu, 18 May 2017 13:36:47 +0200 Received: from sslvpn.ipv6.ripe.net ([2001:67c:2e8:9::c100:14e6] helo=[IPv6:2001:67c:2e8:5009::21]) by titi.ripe.net with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dBJja-0004r8-4F for sidrops@ietf.org; Thu, 18 May 2017 13:36:46 +0200 From: Alex Band Content-Type: multipart/alternative; boundary="Apple-Mail=_3420DDD7-7195-4797-816C-760B8F5BC5D7" Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) Message-Id: <9C01478A-B764-48C4-AB93-4DEACB229A09@ripe.net> References: To: sidrops@ietf.org Date: Thu, 18 May 2017 13:36:45 +0200 X-Mailer: Apple Mail (2.3273) X-ACL-Warn: Delaying message X-RIPE-Spam-Level: ------- X-RIPE-Spam-Report: Spam Total Points: -7.5 points pts rule name description ---- ---------------------- ------------------------------------ -7.5 ALL_TRUSTED Passed through trusted hosts only via SMTP 0.0 HTML_MESSAGE BODY: HTML included in message X-RIPE-Signature: ddd0bbf11d1e21354000f5f053f5ae69592dfc399fb508b25de5f6be3f50fbe8 Archived-At: Subject: [Sidrops] Block ROA creation for AS23456? X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 May 2017 11:42:17 -0000 --Apple-Mail=_3420DDD7-7195-4797-816C-760B8F5BC5D7 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hello SidrOps folks, One of our members argues that we should be preventing that ROAs are = created which authorise AS23456, as referred to in RFC6793 [1]. It would = allegedly open up possibilities for abuse. You could make the same = argument for several other special registry AS Numbers [2].=20 I=E2=80=99m curious to hear if you think this argument holds any truth, = and if we should be thinking about such measures. Cheers, Alex Band Product Manager RIPE NCC [1] https://tools.ietf.org/html/rfc6793 = [2] = https://www.iana.org/assignments/iana-as-numbers-special-registry/iana-as-= numbers-special-registry.xhtml = = --Apple-Mail=_3420DDD7-7195-4797-816C-760B8F5BC5D7 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hello SidrOps folks,

One of our members argues that we should be preventing = that ROAs are created which authorise AS23456, as referred to in RFC6793 = [1]. It would allegedly open up possibilities for abuse. You could make = the same argument for several other special registry AS Numbers = [2]. 

I=E2=80=99m curious to hear if you think this argument holds = any truth, and if we should be thinking about such measures.

Cheers,

Alex Band
Product Manager
RIPE NCC

[1] https://tools.ietf.org/html/rfc6793
[2] https://www.iana.org/assignments/iana-as-numbers-special-regist= ry/iana-as-numbers-special-registry.xhtml
= --Apple-Mail=_3420DDD7-7195-4797-816C-760B8F5BC5D7-- From nobody Thu May 18 05:30:47 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 747C212EB7D for ; Thu, 18 May 2017 05:30:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.521 X-Spam-Level: X-Spam-Status: No, score=-14.521 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eVhSVH28Vik3 for ; Thu, 18 May 2017 05:30:44 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 500F3129AA8 for ; Thu, 18 May 2017 05:25:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3355; q=dns/txt; s=iport; t=1495110341; x=1496319941; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=voMdMMnjon7wpJ7mN/h+5JllxGxi9MMEYN9UtWH19kc=; b=czjzAmuF1YVUFhQU9KwctP+7rfF18woOCga+zwTxHO/mKxbzQ9bcmFPo OgPMK9X5OH56iiTmfxnV9Ze9PjnJQ26oiEkUqsjJKpAfmF0xGkYFcq60v uN+i1lIVvpvZvXLOEvz8Uu2YVajT6WghnrO9XbMsgIXFwhTeDjvUxE7Pe 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CYAADtkR1Z/4sNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1VigQyOBZFrkD6FOIIPMIV0AoVsPxgBAgEBAQEBAQFrKIUYAQE?= =?us-ascii?q?BAQOBCQIBCAQNAwECLzIdCAIEARIIihsOsGWKfwEBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBARgFhl+EeYE8g0eFUgWeEwGHG4t2kXeURQEfOIEKcBWHPHYBhXYrghABAQE?= X-IronPort-AV: E=Sophos;i="5.38,359,1491264000"; d="scan'208,217";a="236547319" Received: from alln-core-6.cisco.com ([173.36.13.139]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 18 May 2017 12:25:40 +0000 Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id v4ICPdII018413 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 18 May 2017 12:25:40 GMT Received: from xch-rtp-011.cisco.com (64.101.220.151) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 18 May 2017 08:25:39 -0400 Received: from xch-rtp-011.cisco.com ([64.101.220.151]) by XCH-RTP-011.cisco.com ([64.101.220.151]) with mapi id 15.00.1210.000; Thu, 18 May 2017 08:25:39 -0400 From: "Roque Gagliano (rogaglia)" To: Alex Band , "sidrops@ietf.org" Thread-Topic: [Sidrops] Block ROA creation for AS23456? Thread-Index: AQHSz8vQ4v467+xHeUe7nzVTaE8HHqH6BCCW Date: Thu, 18 May 2017 12:25:39 +0000 Message-ID: <06d5677bff924ad0b23e56c685369fc1@XCH-RTP-011.cisco.com> References: , <9C01478A-B764-48C4-AB93-4DEACB229A09@ripe.net> In-Reply-To: <9C01478A-B764-48C4-AB93-4DEACB229A09@ripe.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted Content-Type: multipart/alternative; boundary="_000_06d5677bff924ad0b23e56c685369fc1XCHRTP011ciscocom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Sidrops] Block ROA creation for AS23456? X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 May 2017 12:30:46 -0000 --_000_06d5677bff924ad0b23e56c685369fc1XCHRTP011ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Alex, Are we talking about the CA should prevent creation and/or the RP should ig= nore it when validating? Roque ----- Reply message ----- From: "Alex Band" To: "sidrops@ietf.org" Subject: [Sidrops] Block ROA creation for AS23456? Date: Thu, May 18, 2017 13:42 Hello SidrOps folks, One of our members argues that we should be preventing that ROAs are create= d which authorise AS23456, as referred to in RFC6793 [1]. It would allegedl= y open up possibilities for abuse. You could make the same argument for sev= eral other special registry AS Numbers [2]. I'm curious to hear if you think this argument holds any truth, and if we s= hould be thinking about such measures. Cheers, Alex Band Product Manager RIPE NCC [1] https://tools.ietf.org/html/rfc6793 [2] https://www.iana.org/assignments/iana-as-numbers-special-registry/iana-= as-numbers-special-registry.xhtml --_000_06d5677bff924ad0b23e56c685369fc1XCHRTP011ciscocom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hi Alex,

Are we talking about the CA should prevent creation and/or= the RP should ignore it when validating?

Roque

----- Reply message -----
From: "Alex Band" <alexb@ripe.net>
To: "sidrops@ietf.org" <sidrops@ietf.org>
Subject: [Sidrops] Block ROA creation for AS23456?
Date: Thu, May 18, 2017 13:42

Hello SidrOps folks,

One of our members argues that we should be preventing that ROAs are create= d which authorise AS23456, as referred to in RFC6793 [1]. It would allegedl= y open up possibilities for abuse. You could make the same argument for sev= eral other special registry AS Numbers [2]. 

I’m curious to hear if you think this argument holds = any truth, and if we should be thinking about such measures.

Cheers,

Alex Band
Product Manager
RIPE NCC

[1] https:/= /tools.ietf.org/html/rfc6793
[2] https://www.i= ana.org/assignments/iana-as-numbers-special-registry/iana-as-numbers-specia= l-registry.xhtml
--_000_06d5677bff924ad0b23e56c685369fc1XCHRTP011ciscocom_-- From nobody Thu May 18 05:37:11 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E708C129B5B for ; Thu, 18 May 2017 05:37:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ek9PmGjhQNHR for ; Thu, 18 May 2017 05:37:03 -0700 (PDT) Received: from molamola.ripe.net (molamola.ripe.net [IPv6:2001:67c:2e8:11::c100:1371]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42689129549 for ; Thu, 18 May 2017 05:31:42 -0700 (PDT) Received: from nene.ripe.net ([193.0.23.10]) by molamola.ripe.net with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.88) (envelope-from ) id 1dBKag-0000XF-VG; Thu, 18 May 2017 14:31:40 +0200 Received: from sslvpn.ipv6.ripe.net ([2001:67c:2e8:9::c100:14e6] helo=[IPv6:2001:67c:2e8:5009::21]) by nene.ripe.net with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dBKag-0000v0-Pw; Thu, 18 May 2017 14:31:38 +0200 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\)) From: Alex Band In-Reply-To: <06d5677bff924ad0b23e56c685369fc1@XCH-RTP-011.cisco.com> Date: Thu, 18 May 2017 14:31:38 +0200 Cc: "sidrops@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <9C01478A-B764-48C4-AB93-4DEACB229A09@ripe.net> <06d5677bff924ad0b23e56c685369fc1@XCH-RTP-011.cisco.com> To: "Roque Gagliano (rogaglia)" X-Mailer: Apple Mail (2.3273) X-ACL-Warn: Delaying message X-RIPE-Spam-Level: ------- X-RIPE-Spam-Report: Spam Total Points: -7.5 points pts rule name description ---- ---------------------- ------------------------------------ -7.5 ALL_TRUSTED Passed through trusted hosts only via SMTP X-RIPE-Signature: ddd0bbf11d1e21354000f5f053f5ae69998123fa77ad94843288220f51b9d041 Archived-At: Subject: Re: [Sidrops] Block ROA creation for AS23456? X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 May 2017 12:37:10 -0000 Hi Roque, We=E2=80=99re only talking about actively preventing creation of the ROA = under the CA. Cheers, Alex > On 18 May 2017, at 14:25, Roque Gagliano (rogaglia) = wrote: >=20 > Hi Alex, >=20 > Are we talking about the CA should prevent creation and/or the RP = should ignore it when validating? >=20 > Roque >=20 > ----- Reply message ----- > From: "Alex Band" > To: "sidrops@ietf.org" > Subject: [Sidrops] Block ROA creation for AS23456? > Date: Thu, May 18, 2017 13:42 >=20 > Hello SidrOps folks, >=20 > One of our members argues that we should be preventing that ROAs are = created which authorise AS23456, as referred to in RFC6793 [1]. It would = allegedly open up possibilities for abuse. You could make the same = argument for several other special registry AS Numbers [2].=20 >=20 > I=E2=80=99m curious to hear if you think this argument holds any = truth, and if we should be thinking about such measures. >=20 > Cheers, >=20 > Alex Band > Product Manager > RIPE NCC >=20 > [1] https://tools.ietf.org/html/rfc6793 > [2] = https://www.iana.org/assignments/iana-as-numbers-special-registry/iana-as-= numbers-special-registry.xhtml From nobody Thu May 18 05:45:19 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E429129C71 for ; Thu, 18 May 2017 05:45:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.3 X-Spam-Level: X-Spam-Status: No, score=-2.3 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-2.8, RCVD_IN_SORBS_SPAM=0.5] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YkIeMVJYpfWr for ; Thu, 18 May 2017 05:45:15 -0700 (PDT) Received: from mail-wr0-f169.google.com (mail-wr0-f169.google.com [209.85.128.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 59D5712EAEC for ; Thu, 18 May 2017 05:40:06 -0700 (PDT) Received: by mail-wr0-f169.google.com with SMTP id l9so33070361wre.1 for ; Thu, 18 May 2017 05:40:06 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=BOO3p4W3WjYAkCuuNj3WrgLuGJPd9461ukWMPfBeCCQ=; b=kjF3UsPZMmIBybpfJ1JKac+vVVIhUpZwL071Bo8wBtPa8hDhbZ9VIA3T72OJnUIA1H 1L86VK+uBzCh1ahrr87VMSJzxVLePxqKzEbiX8arvWGPTbTzB/JttEM6xc85QesoiItW 6etyNj47v2UVSKVqeHS7HXGeaP2CZQsi6vypigbBL8CcT/U1xfcXKqaTxfdHxeVBX1Ia O79eLGrlAS3Eyx1is+104u3H9M03gRDuQGW/C0TGaSdZsNZfn2U52lTJxPaV2Gu7ylIh 3psIm1ySrWM2deOUh/6xUw+QyuQJdCTCXtr9fGNvRcInDsIw71extlIYjyUcncOyQ7ht wr3Q== X-Gm-Message-State: AODbwcCdaZPnnAyX54jZg7CFOfi4T5WOBg3yWMv4CucCMG2k/FCykM4V eqZL8iBMROIqkpKcarCKsA== X-Received: by 10.80.148.194 with SMTP id t2mr3148440eda.128.1495111204633; Thu, 18 May 2017 05:40:04 -0700 (PDT) Received: from localhost ([89.200.40.67]) by smtp.gmail.com with ESMTPSA id m9sm2574346edm.62.2017.05.18.05.40.03 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 18 May 2017 05:40:03 -0700 (PDT) Date: Thu, 18 May 2017 14:39:59 +0200 From: Job Snijders To: Alex Band Cc: sidrops@ietf.org Message-ID: <20170518123959.clizw3w7sp7hrplk@Vurt.local> References: <9C01478A-B764-48C4-AB93-4DEACB229A09@ripe.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <9C01478A-B764-48C4-AB93-4DEACB229A09@ripe.net> X-Clacks-Overhead: GNU Terry Pratchett User-Agent: NeoMutt/20170306 (1.8.0) Archived-At: Subject: Re: [Sidrops] Block ROA creation for AS23456? X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 May 2017 12:45:18 -0000 On Thu, May 18, 2017 at 01:36:45PM +0200, Alex Band wrote: > One of our members argues that we should be preventing that ROAs are > created which authorise AS23456, as referred to in RFC6793 [1]. It > would allegedly open up possibilities for abuse. You could make the > same argument for several other special registry AS Numbers [2]. One probably has to carefully assess per 'special ASN' whether it makes sense or not. Preventing that ROAs are created with AS0 would be counter productive in some scenarios. > I’m curious to hear if you think this argument holds any truth, and if > we should be thinking about such measures. Did the member elaborate on what problem the restriction would resolve? I'd be interested to learn more about the possibilities for abuse. Kind regards, Job From nobody Thu May 18 05:56:15 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D56B128DE5 for ; Thu, 18 May 2017 05:56:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.522 X-Spam-Level: X-Spam-Status: No, score=-14.522 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lFU-Cs3wQ_hV for ; Thu, 18 May 2017 05:56:12 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 739E5129467 for ; Thu, 18 May 2017 05:51:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2402; q=dns/txt; s=iport; t=1495111871; x=1496321471; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=vx/q62GGbO2CVZ37YzKFeADffpeA5EjgbGMpCO7foKE=; b=cTNY68dYdgUY7LSSrSPGg0vl+pMDNgP5gwQgm99AP1uzMpX0vpqFjJ85 Dny2b1n/9goNDLY+eCi2nqJc9VyR5RdM3U2MLyf+vehviv1azoX7bXfq2 Nv0hz+qkzv44IEd+DQHvXGPNrLje5I94HO7oxLpKH8Lc+d3IYpAyBf2tI A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BDAQCJlx1Z/4cNJK1cGQEBAQEBAQEBA?= =?us-ascii?q?QEBBwEBAQEBg1VigQwHg2aKGJFKIZV2gg8whXQCGoVTPxgBAgEBAQEBAQFrKIU?= =?us-ascii?q?YAQEBAQIBIxFFEAIBCBEDAQIBAgImAgICMBUICAIEDgUbigAIDq5XgiaKfwEBA?= =?us-ascii?q?QEBAQEBAQEBAQEBAQEBAQEBARgFgQuFVIIJC4JlgTyDJxeCey+CMQWeEwGHG4t?= =?us-ascii?q?/kW6URQEfOD9LcBVYAYRwgXN2AYV2K4EDgQ0BAQE?= X-IronPort-AV: E=Sophos;i="5.38,359,1491264000"; d="scan'208";a="28978973" Received: from alln-core-2.cisco.com ([173.36.13.135]) by rcdn-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 18 May 2017 12:51:10 +0000 Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id v4ICpA6T028931 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 18 May 2017 12:51:10 GMT Received: from xch-rtp-011.cisco.com (64.101.220.151) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1210.3; Thu, 18 May 2017 08:51:09 -0400 Received: from xch-rtp-011.cisco.com ([64.101.220.151]) by XCH-RTP-011.cisco.com ([64.101.220.151]) with mapi id 15.00.1210.000; Thu, 18 May 2017 08:51:09 -0400 From: "Roque Gagliano (rogaglia)" To: Alex Band CC: "sidrops@ietf.org" Thread-Topic: [Sidrops] Block ROA creation for AS23456? Thread-Index: AQHSz8vQ4v467+xHeUe7nzVTaE8HHqH6BCCWgABEugCAACb5AA== Date: Thu, 18 May 2017 12:51:09 +0000 Message-ID: References: <9C01478A-B764-48C4-AB93-4DEACB229A09@ripe.net> <06d5677bff924ad0b23e56c685369fc1@XCH-RTP-011.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.20.0.170309 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.61.109.198] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Sidrops] Block ROA creation for AS23456? X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 May 2017 12:56:14 -0000 SGksDQoNCkkgd291bGQgYmUgbW9yZSBpbmNsaW5lZCB0byBsZXQgdGhlIFJQIHRvIHNvbHZlIGl0 LiBNYXliZSB3aXRoIGEgc3dpdGNoIHRvIOKAnGlnbm9yZS1yb2FzLXdpdGgtcmVzZXJ2ZWQtYXNu LW90aGVyLXRoYW4tMOKAnSBhbmQgbGV0IHRoYXQgdG8gYmUgYSBTUCBkZWNpc2lvbiB0byB0dXJu IGl0IE9OL09GRiB3aXRoIG1heWJlIHRoZSBkZWZhdWx0IHRvIGJlIHRvIGlnbm9yZSB0aGVtLg0K DQpSZWdhcmRzLA0KUm9xdWUNCiAgICANCg0KDQrigJQgDQpSb3F1ZSBHYWdsaWFubw0KVGFpbC1m IFNvbHV0aW9ucyBBcmNoaXRlY3QgU291dGhlcm4gRXVyb3BlDQorNDEgNzYgNDQ5IDg4NjcNCg0K DQpPbiAxOC8wNS8xNyAxNDozMSwgIkFsZXggQmFuZCIgPGFsZXhiQHJpcGUubmV0PiB3cm90ZToN Cg0KICAgIEhpIFJvcXVlLA0KICAgIA0KICAgIFdl4oCZcmUgb25seSB0YWxraW5nIGFib3V0IGFj dGl2ZWx5IHByZXZlbnRpbmcgY3JlYXRpb24gb2YgdGhlIFJPQSB1bmRlciB0aGUgQ0EuDQogICAg DQogICAgQ2hlZXJzLA0KICAgIA0KICAgIEFsZXgNCiAgICANCiAgICANCiAgICA+IE9uIDE4IE1h eSAyMDE3LCBhdCAxNDoyNSwgUm9xdWUgR2FnbGlhbm8gKHJvZ2FnbGlhKSA8cm9nYWdsaWFAY2lz Y28uY29tPiB3cm90ZToNCiAgICA+IA0KICAgID4gSGkgQWxleCwNCiAgICA+IA0KICAgID4gQXJl IHdlIHRhbGtpbmcgYWJvdXQgdGhlIENBIHNob3VsZCBwcmV2ZW50IGNyZWF0aW9uIGFuZC9vciB0 aGUgUlAgc2hvdWxkIGlnbm9yZSBpdCB3aGVuIHZhbGlkYXRpbmc/DQogICAgPiANCiAgICA+IFJv cXVlDQogICAgPiANCiAgICA+IC0tLS0tIFJlcGx5IG1lc3NhZ2UgLS0tLS0NCiAgICA+IEZyb206 ICJBbGV4IEJhbmQiIDxhbGV4YkByaXBlLm5ldD4NCiAgICA+IFRvOiAic2lkcm9wc0BpZXRmLm9y ZyIgPHNpZHJvcHNAaWV0Zi5vcmc+DQogICAgPiBTdWJqZWN0OiBbU2lkcm9wc10gQmxvY2sgUk9B IGNyZWF0aW9uIGZvciBBUzIzNDU2Pw0KICAgID4gRGF0ZTogVGh1LCBNYXkgMTgsIDIwMTcgMTM6 NDINCiAgICA+IA0KICAgID4gSGVsbG8gU2lkck9wcyBmb2xrcywNCiAgICA+IA0KICAgID4gT25l IG9mIG91ciBtZW1iZXJzIGFyZ3VlcyB0aGF0IHdlIHNob3VsZCBiZSBwcmV2ZW50aW5nIHRoYXQg Uk9BcyBhcmUgY3JlYXRlZCB3aGljaCBhdXRob3Jpc2UgQVMyMzQ1NiwgYXMgcmVmZXJyZWQgdG8g aW4gUkZDNjc5MyBbMV0uIEl0IHdvdWxkIGFsbGVnZWRseSBvcGVuIHVwIHBvc3NpYmlsaXRpZXMg Zm9yIGFidXNlLiBZb3UgY291bGQgbWFrZSB0aGUgc2FtZSBhcmd1bWVudCBmb3Igc2V2ZXJhbCBv dGhlciBzcGVjaWFsIHJlZ2lzdHJ5IEFTIE51bWJlcnMgWzJdLiANCiAgICA+IA0KICAgID4gSeKA mW0gY3VyaW91cyB0byBoZWFyIGlmIHlvdSB0aGluayB0aGlzIGFyZ3VtZW50IGhvbGRzIGFueSB0 cnV0aCwgYW5kIGlmIHdlIHNob3VsZCBiZSB0aGlua2luZyBhYm91dCBzdWNoIG1lYXN1cmVzLg0K ICAgID4gDQogICAgPiBDaGVlcnMsDQogICAgPiANCiAgICA+IEFsZXggQmFuZA0KICAgID4gUHJv ZHVjdCBNYW5hZ2VyDQogICAgPiBSSVBFIE5DQw0KICAgID4gDQogICAgPiBbMV0gaHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL3JmYzY3OTMNCiAgICA+IFsyXSBodHRwczovL3d3dy5pYW5hLm9y Zy9hc3NpZ25tZW50cy9pYW5hLWFzLW51bWJlcnMtc3BlY2lhbC1yZWdpc3RyeS9pYW5hLWFzLW51 bWJlcnMtc3BlY2lhbC1yZWdpc3RyeS54aHRtbA0KICAgIA0KICAgIA0KDQo= From nobody Thu May 18 06:43:56 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03CC412947D for ; Thu, 18 May 2017 06:43:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.921 X-Spam-Level: X-Spam-Status: No, score=-1.921 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=skyglobal.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gjdUzADTjzae for ; Thu, 18 May 2017 06:43:52 -0700 (PDT) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50044.outbound.protection.outlook.com [40.107.5.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F0D7128DF3 for ; Thu, 18 May 2017 06:38:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=skyglobal.onmicrosoft.com; s=selector1-skyglobal-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ofecaF3F4YcJgOriMfAjb7tLJexZznxTBgEBIBjw07Y=; b=FG/7Dl10hTRocKnkNq/JUQrpOUFda4T6oLOtVuIilqo64rbaJ/Jr00cd+l8tENIKx4EoSYFu+lSVz7cu5Jng9m1/SaJre8rGlORFl7gV1cLrae+s4ZA72OH552UQU6TU93QhE49kep0/heE7iPM1bY+BNRSU4viToS+xCHaO8d4= Authentication-Results: spf=pass (sender IP is 176.255.244.223) smtp.mailfrom=sky.uk; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=pass action=none header.from=sky.uk; Received-SPF: Pass (protection.outlook.com: domain of sky.uk designates 176.255.244.223 as permitted sender) receiver=protection.outlook.com; client-ip=176.255.244.223; helo=mail.bskyb.com; From: "Dickinson, Ian" To: Job Snijders , Alex Band CC: "sidrops@ietf.org" Thread-Topic: [Sidrops] Block ROA creation for AS23456? Thread-Index: AQHSz8vRbsH1TDKRKUyNLdyzcZyjj6H5912AgAAf7tA= Date: Thu, 18 May 2017 13:38:23 +0000 Message-ID: <9B3BFE0A18160E40BAF1950414D10FAE8989A960@WPMBX010.bskyb.com> References: <9C01478A-B764-48C4-AB93-4DEACB229A09@ripe.net> <20170518123959.clizw3w7sp7hrplk@Vurt.local> In-Reply-To: <20170518123959.clizw3w7sp7hrplk@Vurt.local> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.105.64.253] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:176.255.244.223; IPV:CAL; SCL:-1; CTRY:GB; EFV:NLI; SFV:NSPM; SFS:(10009020)(6009001)(39400400002)(39850400002)(39840400002)(39860400002)(39450400003)(39410400002)(2980300002)(438002)(189002)(199003)(24454002)(13464003)(55846006)(305945005)(229853002)(54356999)(50986999)(47776003)(3846002)(6116002)(102836003)(106466001)(7736002)(76176999)(8936002)(23676002)(2920100001)(53546009)(5660300001)(2950100002)(9686003)(86362001)(6306002)(966005)(4326008)(189998001)(33656002)(5890100001)(6246003)(74482002)(38730400002)(2906002)(81166006)(478600001)(50466002)(72206003)(11286001)(8676002); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6PR0601MB2342; H:mail.bskyb.com; FPR:; SPF:Pass; MLV:sfv; MX:1; A:0; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; VE1EUR01FT015; 1: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 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB6PR0601MB2342: X-MS-Office365-Filtering-Correlation-Id: f0f9af18-74a3-40a4-2a4e-08d49df32a77 X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(8251501002)(2017030254075)(201703131423075)(201703031133081); SRVR:DB6PR0601MB2342; X-Microsoft-Exchange-Diagnostics: 1; DB6PR0601MB2342; 3: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 X-Microsoft-Exchange-Diagnostics: 1; DB6PR0601MB2342; 25:VaVm5lbRxM5raj/aXvuUVVj6LCVnLBCUiqfJYzWMfwVuyd7NGv6Nxo24qqWZoVjsW5iAO47a2iXQJy9VWygyQMrryN6LfU3DkxYoYsM3Jm/rFw6WZHrhduF2RHanvpQjD6+Mqud8osArEjyx9sbPsjRrcBKPe3TNnO9gCrUppaMxSBE1IC+X2U4FOhg1Yw2X36RexTJCx9fd+BBvc/KVI4fEx8ASxxOsyo1H3cW55yk4Mvck5DOXgTBWLNP3r12LQWNrpjU5AlG8ZA3HfdBb6YMNYwVaOk67UMQBxDu/B5YQ3oDySoterWwGNPj7JoH9jb52EeAKq4k6pf3ec4SIPKhHXZ4Z73KInEFtdyYOBL7DX3eQUtdTrmeIvJxr97MGTInENIgw6EsZ3855qJUhitrZvE04PjO6uBCBZHaX9oq6Qs4BzGgRJZYbbVXQVqeQGb8WD1fPyZQVKF/TEPPWqI9Nm5y6Z4ae4/0pu/fci4o=; 31:GJuLoVXti+R8ydi9y4ztUcwTWN9xTjbi6on+ga+sHGuJSg2MimJ3FUAkNzNaYWM6+WHiUWjvpjS00pJdsKE+rE/PWQqqY8AQ5quwdQ86TmM5zYqdSvNKjuzbGZRFmErsdncPJFYHQNKke0pmfQlSymz21phZBU0C3Tf5jQXJZWec/VSXmMIQVJ4+Mn56KamG1XjuYM5fOfPmv2rGPKVT1ksIA7heXRwLmbvpKah2Cq9ZlPmAmxW3q/ly+nwzVky5o6Zv4Oa4jLYrKhE+Hzr16Q== X-Microsoft-Exchange-Diagnostics: 1; DB6PR0601MB2342; 20:X/qxGzCyeMiQIMkl5+8Cl7dgWWnlK4KrfiYOGm11fghloDVWmvH3n/D18tvcy05ZaUwzwChKOog3dBncqAPP8JwsDwWiAPxukuHzwHLCtG1gXoYWPjn94Tmj6LMK1h4YoSaTbP54vB/UprpFebAJXnQaN8ZGFYD/n3KiGsHN4qM/pC3rpy+DZwJ4+mY6ffyaJ8gXF8kkxNH0IUE68kEE0R4TXk+qAmHRmL1/ZqU7BnBX6iNVPl5SURNnBUSgZy8ZAG+cG+0a5o0n7U42L5quN9awSS21Du/4pJQGEf5YcgiehzZuHiXVhx6BbmDUvdMr1ym8OdwbwgvZ6pkNMN8QN+wTDZnkiUrfY7BqpkQS+d0+R89Q4+Cf8kMwv8YTaAstke3ki6obzHxElaYL0rivF8cAmZgjhQJP2n2VLtapvfb5hCVV5xja1oBcq3qyECYV3y/oHIi5TTds8nES73cIq+LBAOvDY5Lo1cFY8Vn1O/bXwjvVILcxj/xbI3yGgs0u X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(601004)(2401047)(5005006)(13012025)(13020025)(8121501046)(10201501046)(3002001)(93006095)(93004095)(6041248)(20161123564025)(20161123562025)(20161123558100)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123560025)(20161123555025)(6072148); SRVR:DB6PR0601MB2342; BCL:0; PCL:0; RULEID:; SRVR:DB6PR0601MB2342; X-Microsoft-Exchange-Diagnostics: 1; DB6PR0601MB2342; 4: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 X-Forefront-PRVS: 0311124FA9 X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtEQjZQUjA2MDFNQjIzNDI7MjM6V0FyRXE3VUdoemhVbEc0Tk9udTkraGE1?= =?utf-8?B?VHJZSDNJUlN0NEF5a1BvaFZqVjhuckk3Ri8xckhhUnZNVmtjMVJvNlZDUW9Q?= =?utf-8?B?bE5DamFWUk5HdFFCQkpOaVZySHc5d0dkdHlHOU9WQlJmcEp6LzRjUWlzSVUv?= =?utf-8?B?QmppY0ZJamxUejNpOWphZjMzazN3WWtrK2o5em91WFl6K2FsSERDd0VRelU3?= =?utf-8?B?N1RCcWRUbnRQNUtKTW0vY0tPRHRxYSt0Z0tDYmFBVFY4bGcyWExmRWNPbUdq?= =?utf-8?B?d3pSSWNySHZDODRTWGZETUUrbHVHSi9tOEJwdDhENUtHbmZyMElKdW5vNk1U?= =?utf-8?B?c2ZCNC9mTXg4U1c3NEV2T2RrRnA5dDBIK0xLRG5NZDJTU2NvTnFSbFNocGxK?= =?utf-8?B?bW1PcGZNbUxJelNPenp3ZDZlZjFmK1BJdkFhc1JxcFBlalUvS0w5VXFlQ0NB?= =?utf-8?B?TW4vbHNpTEIzaWdDb0VaMWtKRmhDazNYZ3V3b1BUZXZSdnBoMyt3cENrWDJ6?= =?utf-8?B?MUZSY1MxcjN6a0NERmFoSVd4akI3U2hJSktSMmlXcXRFRGZjazQ3UkZMMnMv?= =?utf-8?B?WEFsVVpzOGxDcWlQNWwxa2JyMXVvVXNscTVSVmpWWTVxWGQrR3JDYkNsMEZO?= =?utf-8?B?MmZ0QUNVc0VvRStObEdGWjRmeGdDdm9nYXRIVks2M0ptOG94dEJwRDE3ckJh?= =?utf-8?B?S3lQZ1p0d1hNS284MEtRcUs1aTdWbThWQTdyNko5OXVveDgzL0p6UVVCcGNi?= =?utf-8?B?NmJUM1IwZ3c4L1lMN3FSNlQ5VWYyS1lSQmc1a2hkdGk0QWtQLzRtUCtpdExk?= =?utf-8?B?VnJGd0FWVTBZQnZPdE0zUFdYWXFtUWpDem1iTWJYYktWVjFjQ3FHWGk2ZDJt?= =?utf-8?B?aW9pS1ova0hUR2FHNWdIeHpIbTkvUWdHTnVSNHpuNzNtMW9TQnBvbjJnZW94?= =?utf-8?B?clJTYjg2L3FZU3ZvU29BOEVCWEdDVjI4bEFYU1lhNWFwMTVLU05KOG9EbVdV?= =?utf-8?B?RTBwSnFzbFJUUFRxTE1IVHA3UXRnYjB4NWlLOXZ2TkV1dTZZNlVsRXd0Y2VU?= =?utf-8?B?MDNOeGk3ZENkdFI4YUhldlFBbzZmOHZyVkhEZjl4WGVzNDdSQUN0MDhNbEhj?= =?utf-8?B?YVBheDJvdWQ0NjM5dGIrU2J3b1cxU2RuWGNtRzVjV0FwV0tCbnZ3SGRrMFRD?= =?utf-8?B?SXRaTnNvMjI1ejBqRlBULzhibmlTRjkvUUFlZjdQZE9TM1k2UFBJTmpBN2JJ?= =?utf-8?B?c0F0Y3k1MWhjdEZsZWhFZEhPRk1aV3R1YWFPU0l1Y3VaYnFVWGhMbmY5Z1NK?= =?utf-8?B?R1dIQ0pib2NFaGsvclBMYitERSswczI1eVBzZXRiVG54bVI1SC9zbndSd1Vn?= =?utf-8?B?ckxxcnpzNWRPeHp0TkdxaHdhUC9uakl3RlprV253U0J1T1FhWGFxWHB0bmZL?= =?utf-8?B?SkVqNVBXRVA5SzRTSDlkQXVaSE1pRnNRQzBBd3gzb2dUZERkTkQwamZyd2w3?= =?utf-8?B?ZHJVMXc0NDljcytzTFNiS1Q4SlIvZGR2dnJEblpQVFJSNTFJc1dib3pZMDB1?= =?utf-8?B?bkdYOVpZUUU3bWVBd0cyN09UUjRROG4yYmdJdHhjTTBjalZiaENoMjNoN0k2?= =?utf-8?Q?ljuoJPqYhW0v13BK2ZItIq?= X-Microsoft-Exchange-Diagnostics: 1; DB6PR0601MB2342; 6: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; 5:o9Vkfq5amsZiiDKC0+3cD26y9MZUMc2xDtND612VZVoeZrHnYaQSfE2TduPhvJY5GLa6vR0/UPRVgfyJ9Un2r0j4AnSPVReVW9wpeB3tzeQO68TLh99ktAaSkxvQSCVJpMAS9sxv39glIfB/cfyTzQ==; 24:WzGjxWRquacr3sIo/ifxgSnbyqNM9WW1xseMY8ur0Qiljk4cN52r4ztWFQ4cLtAvYE8V8DtFci9ZmWPnNrNeZPzW/Qpy000JIjdh0h5/3DU= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1; DB6PR0601MB2342; 7:u96hmcRk1dVD+d2BzylixHNUYR7HoZGdgK6q20Hrzxoe8HmfwEYP1PcceLIwn1AjRyaW3/f3OgLRH4aQiGpM/uXFWFHgu0hs0Zb9gqALSEWRRfHYHv/79jw9rbNEV7qyinxCh2fUiMN0yz6Q0wd2RNr8O5dPlsDh1Gix0mBteVGqQYiVg9Azz42FqtIi5qN4DA/JuAPlGoNFA3ojGKkzv/LcoAk/qPrmSqiW1b7x+lXI+shRphSbPFqRvzZxdakpvMzE9EZLCI1dza2hlhf4vkT8rEjjLVkXh+Hpsgb8spuurUEpmj8nRWzc7Kfl8fR2n5Nn5GSg6s1/LonGAk+JbA== X-OriginatorOrg: sky.uk X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 May 2017 13:38:27.8336 (UTC) X-MS-Exchange-CrossTenant-Id: 68b865d5-cf18-4b2b-82a4-a4eddb9c5237 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=68b865d5-cf18-4b2b-82a4-a4eddb9c5237; Ip=[176.255.244.223]; Helo=[mail.bskyb.com] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0601MB2342 Archived-At: Subject: Re: [Sidrops] Block ROA creation for AS23456? X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 May 2017 13:43:55 -0000 SW5saW5lIFtJYW5dDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBTaWRyb3Bz IFttYWlsdG86c2lkcm9wcy1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgSm9iIFNuaWpk ZXJzDQpTZW50OiAxOCBNYXkgMjAxNyAxMzo0MA0KVG86IEFsZXggQmFuZCA8YWxleGJAcmlwZS5u ZXQ+DQpDYzogc2lkcm9wc0BpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtTaWRyb3BzXSBCbG9jayBS T0EgY3JlYXRpb24gZm9yIEFTMjM0NTY/DQoNCk9uIFRodSwgTWF5IDE4LCAyMDE3IGF0IDAxOjM2 OjQ1UE0gKzAyMDAsIEFsZXggQmFuZCB3cm90ZToNCj4gT25lIG9mIG91ciBtZW1iZXJzIGFyZ3Vl cyB0aGF0IHdlIHNob3VsZCBiZSBwcmV2ZW50aW5nIHRoYXQgUk9BcyBhcmUNCj4gY3JlYXRlZCB3 aGljaCBhdXRob3Jpc2UgQVMyMzQ1NiwgYXMgcmVmZXJyZWQgdG8gaW4gUkZDNjc5MyBbMV0uIEl0 DQo+IHdvdWxkIGFsbGVnZWRseSBvcGVuIHVwIHBvc3NpYmlsaXRpZXMgZm9yIGFidXNlLiBZb3Ug Y291bGQgbWFrZSB0aGUNCj4gc2FtZSBhcmd1bWVudCBmb3Igc2V2ZXJhbCBvdGhlciBzcGVjaWFs IHJlZ2lzdHJ5IEFTIE51bWJlcnMgWzJdLg0KDQpPbmUgcHJvYmFibHkgaGFzIHRvIGNhcmVmdWxs eSBhc3Nlc3MgcGVyICdzcGVjaWFsIEFTTicgd2hldGhlciBpdCBtYWtlcw0Kc2Vuc2Ugb3Igbm90 LiBQcmV2ZW50aW5nIHRoYXQgUk9BcyBhcmUgY3JlYXRlZCB3aXRoIEFTMCB3b3VsZCBiZSBjb3Vu dGVyDQpwcm9kdWN0aXZlIGluIHNvbWUgc2NlbmFyaW9zLg0KDQpbSWFuXSBJbmRlZWQgLSBodHRw czovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNjQ4MyNzZWN0aW9uLTQgd2lsbCBzZXJ2ZSBhIHVz ZWZ1bCBwdXJwb3NlIHdoZW4gc3VmZmljaWVudCBmaWx0ZXJpbmcgc3VwcG9ydCBpcyBkZXBsb3ll ZC4NCg0KPiBJ4oCZbSBjdXJpb3VzIHRvIGhlYXIgaWYgeW91IHRoaW5rIHRoaXMgYXJndW1lbnQg aG9sZHMgYW55IHRydXRoLCBhbmQgaWYNCj4gd2Ugc2hvdWxkIGJlIHRoaW5raW5nIGFib3V0IHN1 Y2ggbWVhc3VyZXMuDQoNCkRpZCB0aGUgbWVtYmVyIGVsYWJvcmF0ZSBvbiB3aGF0IHByb2JsZW0g dGhlIHJlc3RyaWN0aW9uIHdvdWxkIHJlc29sdmU/DQpJJ2QgYmUgaW50ZXJlc3RlZCB0byBsZWFy biBtb3JlIGFib3V0IHRoZSBwb3NzaWJpbGl0aWVzIGZvciBhYnVzZS4NCg0KW0lhbl0gWWVzLiBN ZSB0b28uIEJ1dCBJJ20gY2VydGFpbmx5IG5vdCBpbmhlcmVudGx5IGFnYWluc3Qgd2VsbCBkZWZp bmVkIGJlc3QgcHJhY3RpY2UgYmVpbmcgZGV2ZWxvcGVkLg0KDQpLaW5kIHJlZ2FyZHMsDQoNCkpv Yg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KU2lk cm9wcyBtYWlsaW5nIGxpc3QNClNpZHJvcHNAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vc2lkcm9wcw0KSW5mb3JtYXRpb24gaW4gdGhpcyBlbWFpbCBpbmNs dWRpbmcgYW55IGF0dGFjaG1lbnRzIG1heSBiZSBwcml2aWxlZ2VkLCBjb25maWRlbnRpYWwgYW5k IGlzIGludGVuZGVkIGV4Y2x1c2l2ZWx5IGZvciB0aGUgYWRkcmVzc2VlLiBUaGUgdmlld3MgZXhw cmVzc2VkIG1heSBub3QgYmUgb2ZmaWNpYWwgcG9saWN5LCBidXQgdGhlIHBlcnNvbmFsIHZpZXdz IG9mIHRoZSBvcmlnaW5hdG9yLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCBpdCBpbiBlcnJvciwgcGxl YXNlIG5vdGlmeSB0aGUgc2VuZGVyIGJ5IHJldHVybiBlLW1haWwgYW5kIGRlbGV0ZSBpdCBmcm9t IHlvdXIgc3lzdGVtLiBZb3Ugc2hvdWxkIG5vdCByZXByb2R1Y2UsIGRpc3RyaWJ1dGUsIHN0b3Jl LCByZXRyYW5zbWl0LCB1c2Ugb3IgZGlzY2xvc2UgaXRzIGNvbnRlbnRzIHRvIGFueW9uZS4gUGxl YXNlIG5vdGUgd2UgcmVzZXJ2ZSB0aGUgcmlnaHQgdG8gbW9uaXRvciBhbGwgZS1tYWlsIGNvbW11 bmljYXRpb24gdGhyb3VnaCBvdXIgaW50ZXJuYWwgYW5kIGV4dGVybmFsIG5ldHdvcmtzLiBTS1kg YW5kIHRoZSBTS1kgbWFya3MgYXJlIHRyYWRlbWFya3Mgb2YgU2t5IHBsYyBhbmQgU2t5IEludGVy bmF0aW9uYWwgQUcgYW5kIGFyZSB1c2VkIHVuZGVyIGxpY2VuY2UuDQoNClNreSBVSyBMaW1pdGVk IChSZWdpc3RyYXRpb24gTm8uIDI5MDY5OTEpLCBTa3ktSW4tSG9tZSBTZXJ2aWNlIExpbWl0ZWQg KFJlZ2lzdHJhdGlvbiBOby4gMjA2NzA3NSkgYW5kIFNreSBTdWJzY3JpYmVycyBTZXJ2aWNlcyBM aW1pdGVkIChSZWdpc3RyYXRpb24gTm8uIDIzNDAxNTApIGFyZSBkaXJlY3Qgb3IgaW5kaXJlY3Qg c3Vic2lkaWFyaWVzIG9mIFNreSBwbGMgKFJlZ2lzdHJhdGlvbiBOby4gMjI0NzczNSkuIEFsbCBv ZiB0aGUgY29tcGFuaWVzIG1lbnRpb25lZCBpbiB0aGlzIHBhcmFncmFwaCBhcmUgaW5jb3Jwb3Jh dGVkIGluIEVuZ2xhbmQgYW5kIFdhbGVzIGFuZCBzaGFyZSB0aGUgc2FtZSByZWdpc3RlcmVkIG9m ZmljZSBhdCBHcmFudCBXYXksIElzbGV3b3J0aCwgTWlkZGxlc2V4IFRXNyA1UUQuDQo= From nobody Thu May 18 06:57:34 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 84E2F12EB03 for ; Thu, 18 May 2017 06:57:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.749 X-Spam-Level: X-Spam-Status: No, score=-1.749 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6ogE_cqJz2-z for ; Thu, 18 May 2017 06:57:31 -0700 (PDT) Received: from mail-qt0-x22b.google.com (mail-qt0-x22b.google.com [IPv6:2607:f8b0:400d:c0d::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 538D3129BD7 for ; Thu, 18 May 2017 06:51:50 -0700 (PDT) Received: by mail-qt0-x22b.google.com with SMTP id t26so34397869qtg.0 for ; Thu, 18 May 2017 06:51:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=zPmF6ePf54eTjmzwtZVGyoRyIvmD4wD/WRJ6XwuWaMo=; b=H+Yj00Xl24hZor/PI/Ao/+Vu1VT0lQrIjboiSFtVpq3Z/ZscNBWbu2eBy5LlRaRfJt m9my8r1wuDg7NWBIxHLDqTAVcH86aYR1QRuo6HciZAjDHpZJHYMYYiPlRkzelQ5SRy1B dN4UVKXQ8lXYD9wAmAWq0ANopcy7f+mXRTNMea/QLNJt8j9wEB5P3rYPRyOsX8zKkCE6 cq+P4OLCI3MTAJ8Mnl6e61iT53+2SfOnYIUXzSa202Tf90J/94DH8xEpuP7+Oq8Qtrno XZP/WEzxvCXwm7zNYzoGIBHvbrDTMsTAfFHfP8G/24eea0X4a82Wmd3ItURWxkvylTyT supA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=zPmF6ePf54eTjmzwtZVGyoRyIvmD4wD/WRJ6XwuWaMo=; b=Uz06eNSzpBYzlYCdsSa33wIASrU+6/g7Ig8m7UEP2qqnRYIsUKGg+n2zzBF6lcJjYf q8u8QIjYnr0bXcqDGXORMSvflZSIlyHPrYjBqSVOEcf/JLa7XtQKh0QaBwwkunFdedxW sdWMAaF1NsaQGxh8Pytlc1rBT/KaEPVfcy9z3b/SnlR9yjWsN3CuNToiMdC+/wJaGW2Z VuPNqahYv7sycFcW0sqez8dppLFUFwVaNpQHnJ/m4Xmp4+9C2YrGUcV4xWTphC1urUO9 GLUxolqjZR8rf/J2lVr6mokNa42NosdnoCsaq3+Om8BZQ0lEhdJWxRzhYhjO9+lCz1d0 laZg== X-Gm-Message-State: AODbwcAWLuWT2NOBHcFbXdMJ9RA+swN/X4yS3G7Z2jXpI5KxubI8ljYS GDA4iW0uRKn45A== X-Received: by 10.200.34.109 with SMTP id p42mr4182940qtp.17.1495115509515; Thu, 18 May 2017 06:51:49 -0700 (PDT) Received: from [200.7.87.72] ([200.7.87.72]) by smtp.gmail.com with ESMTPSA id x31sm3757651qtx.12.2017.05.18.06.51.47 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 18 May 2017 06:51:48 -0700 (PDT) From: "Carlos M. Martinez" To: "Roque Gagliano" Cc: "Alex Band" , "sidrops@ietf.org" Date: Thu, 18 May 2017 10:51:43 -0300 Message-ID: <4CB56A31-0242-4F2B-89C0-F216571E815E@gmail.com> In-Reply-To: References: <9C01478A-B764-48C4-AB93-4DEACB229A09@ripe.net> <06d5677bff924ad0b23e56c685369fc1@XCH-RTP-011.cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable X-Mailer: MailMate (1.9.6r5347) Archived-At: Subject: Re: [Sidrops] Block ROA creation for AS23456? X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 May 2017 13:57:32 -0000 Indeed. This should be an RP=E2=80=99s call to make IMO. On 18 May 2017, at 9:51, Roque Gagliano (rogaglia) wrote: > Hi, > > I would be more inclined to let the RP to solve it. Maybe with a = > switch to =E2=80=9Cignore-roas-with-reserved-asn-other-than-0=E2=80=9D = and let = > that to be a SP decision to turn it ON/OFF with maybe the default to = > be to ignore them. > > Regards, > Roque > > > > =E2=80=94 > Roque Gagliano > Tail-f Solutions Architect Southern Europe > +41 76 449 8867 > > > On 18/05/17 14:31, "Alex Band" wrote: > > Hi Roque, > > We=E2=80=99re only talking about actively preventing creation of th= e ROA = > under the CA. > > Cheers, > > Alex > > > > On 18 May 2017, at 14:25, Roque Gagliano (rogaglia) = > wrote: > > > > Hi Alex, > > > > Are we talking about the CA should prevent creation and/or the = > RP should ignore it when validating? > > > > Roque > > > > ----- Reply message ----- > > From: "Alex Band" > > To: "sidrops@ietf.org" > > Subject: [Sidrops] Block ROA creation for AS23456? > > Date: Thu, May 18, 2017 13:42 > > > > Hello SidrOps folks, > > > > One of our members argues that we should be preventing that ROAs = > are created which authorise AS23456, as referred to in RFC6793 [1]. It = > would allegedly open up possibilities for abuse. You could make the = > same argument for several other special registry AS Numbers [2]. > > > > I=E2=80=99m curious to hear if you think this argument holds any = > truth, and if we should be thinking about such measures. > > > > Cheers, > > > > Alex Band > > Product Manager > > RIPE NCC > > > > [1] https://tools.ietf.org/html/rfc6793 > > [2] = > https://www.iana.org/assignments/iana-as-numbers-special-registry/iana-= as-numbers-special-registry.xhtml > > > > _______________________________________________ > Sidrops mailing list > Sidrops@ietf.org > https://www.ietf.org/mailman/listinfo/sidrops From yang.yu.list@gmail.com Thu May 18 11:33:47 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FAAF129C21 for ; Thu, 18 May 2017 11:33:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dl7KOrGQ8czc for ; Thu, 18 May 2017 11:33:45 -0700 (PDT) Received: from mail-oi0-x242.google.com (mail-oi0-x242.google.com [IPv6:2607:f8b0:4003:c06::242]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3526D129B2F for ; Thu, 18 May 2017 11:28:43 -0700 (PDT) Received: by mail-oi0-x242.google.com with SMTP id w138so8763169oiw.3 for ; Thu, 18 May 2017 11:28:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=reply-to:subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language:content-transfer-encoding; bh=cksVqn1nrXJZBJHofdbfKyfYCYUEdaUwFVhKqBuqY3s=; b=DgFGx943MX0j4MlNFYAIFlNfqcOgJMTiiYy/+BacGElILu2S1/OANCa0Mj6y7DqQxm Fd+CmHV5OfyhppPrBxpNGQzTNqa7QW3o2QgpTCMqURjvuykDmXOGBcYrcMNiFvXdXGDY bDwL35uHWbX196iHyMC0Vp0Qa6QAPCKkj/A909Xu7xIjZSRPtobNc6f3e3AjRicXI+Iw 8VV/zJdggLOyOFdrGRIrJuSRiG7ux0yoTkzuun1M1j4i5I1zrDntPZZk/LTKvGnz9GUd Uybk+8F2GqJW5DSWPis6D3v5c3sEb93uZ4VtZGXiWvbe9RAz4+RDgfP8IqUAJZiE1zs5 eB+A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:reply-to:subject:to:cc:references:from :message-id:date:user-agent:mime-version:in-reply-to :content-language:content-transfer-encoding; bh=cksVqn1nrXJZBJHofdbfKyfYCYUEdaUwFVhKqBuqY3s=; b=s7/xipYOSG/bflYPTEzOedxZyqq/Fik8+oihxzE8DipTvL8+PgaIp3l0mQVVtm90U0 qVeY3rqyH8tqUjZS/5k8Q5kxpv2Mh/8BuQSUJDs8hkyZZf9KKxIikS6sQqKiwRj2qOM0 pFahvmmxbsp2aW/VdFZJ12X3QdX90ekmCLwHnkECEyp+G3eGEkZK4mkS5qA/SA1Y5mtb ZNvV/5PyyynsEsVRnZZCmfrRNI45tGbWQbtZHgjx45vOl1FYylVUSDvro80vOcmHbals +9qVzJpLVw6675UTfZKPmHAilSvGs/FsKGKVCZNaPVDqGIWfBLJUBzgYe+Q/dK8h9w2Z mB3w== X-Gm-Message-State: AODbwcAKQZbZLnSlADJ+KPpK+jWfynIyyGpgva3fUXvmpThKYBTMUeis yeec/HKd4qc58A== X-Received: by 10.157.7.130 with SMTP id 2mr2751592oto.99.1495132122612; Thu, 18 May 2017 11:28:42 -0700 (PDT) Received: from ?IPv6:2605:6000:8cc6:4381:8d1b:7d71:c5ed:54be? ([2605:6000:8cc6:4381:8d1b:7d71:c5ed:54be]) by smtp.gmail.com with ESMTPSA id 14sm2929404oib.11.2017.05.18.11.28.40 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 18 May 2017 11:28:42 -0700 (PDT) Reply-To: yang.yu.list@gmail.com To: "Carlos M. Martinez" , Roque Gagliano Cc: Alex Band , "sidrops@ietf.org" References: <9C01478A-B764-48C4-AB93-4DEACB229A09@ripe.net> <06d5677bff924ad0b23e56c685369fc1@XCH-RTP-011.cisco.com> <4CB56A31-0242-4F2B-89C0-F216571E815E@gmail.com> From: Yang Yu Message-ID: <4a81aa22-b76b-4455-8576-ad666491fec3@gmail.com> Date: Thu, 18 May 2017 13:28:38 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.1.1 MIME-Version: 1.0 In-Reply-To: <4CB56A31-0242-4F2B-89C0-F216571E815E@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Sidrops] Block ROA creation for AS23456? X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 May 2017 18:50:06 -0000 Is there a legitimate use of AS23456 ROA? >rfc7115 section 6 Routers that perform RPKI-based origin validation must support Four- octet AS Numbers (see [RFC6793]), as, among other things, it is not reasonable to generate ROAs for AS 23456. Yang On 05/18/2017 08:51 AM, Carlos M. Martinez wrote: > Indeed. This should be an RP’s call to make IMO. > > On 18 May 2017, at 9:51, Roque Gagliano (rogaglia) wrote: > >> Hi, >> >> I would be more inclined to let the RP to solve it. Maybe with a >> switch to “ignore-roas-with-reserved-asn-other-than-0” and let that to >> be a SP decision to turn it ON/OFF with maybe the default to be to >> ignore them. >> >> Regards, >> Roque >> >> >> >> — >> Roque Gagliano >> Tail-f Solutions Architect Southern Europe >> +41 76 449 8867 >> >> >> On 18/05/17 14:31, "Alex Band" wrote: >> >> Hi Roque, >> >> We’re only talking about actively preventing creation of the ROA >> under the CA. >> >> Cheers, >> >> Alex >> >> >> > On 18 May 2017, at 14:25, Roque Gagliano (rogaglia) >> wrote: >> > >> > Hi Alex, >> > >> > Are we talking about the CA should prevent creation and/or the >> RP should ignore it when validating? >> > >> > Roque >> > >> > ----- Reply message ----- >> > From: "Alex Band" >> > To: "sidrops@ietf.org" >> > Subject: [Sidrops] Block ROA creation for AS23456? >> > Date: Thu, May 18, 2017 13:42 >> > >> > Hello SidrOps folks, >> > >> > One of our members argues that we should be preventing that ROAs >> are created which authorise AS23456, as referred to in RFC6793 [1]. It >> would allegedly open up possibilities for abuse. You could make the >> same argument for several other special registry AS Numbers [2]. >> > >> > I’m curious to hear if you think this argument holds any truth, >> and if we should be thinking about such measures. >> > >> > Cheers, >> > >> > Alex Band >> > Product Manager >> > RIPE NCC >> > >> > [1] https://tools.ietf.org/html/rfc6793 >> > [2] >> https://www.iana.org/assignments/iana-as-numbers-special-registry/iana-as-numbers-special-registry.xhtml >> >> >> >> >> _______________________________________________ >> Sidrops mailing list >> Sidrops@ietf.org >> https://www.ietf.org/mailman/listinfo/sidrops > From nobody Thu May 18 19:49:36 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61B2D129C6B for ; Thu, 18 May 2017 19:49:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C4ErtMlm6YpN for ; Thu, 18 May 2017 19:49:34 -0700 (PDT) Received: from ran.psg.com (ran.psg.com [IPv6:2001:418:8006::18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A14D612E048 for ; Thu, 18 May 2017 19:44:23 -0700 (PDT) Received: from localhost ([127.0.0.1] helo=ryuu.psg.com) by ran.psg.com with esmtp (Exim 4.86_2) (envelope-from ) id 1dBXtq-0000XX-Mf; Fri, 19 May 2017 02:44:18 +0000 Date: Fri, 19 May 2017 11:44:16 +0900 Message-ID: From: Randy Bush To: "Roque Gagliano (rogaglia)" Cc: Alex Band , "sidrops@ietf.org" In-Reply-To: <06d5677bff924ad0b23e56c685369fc1@XCH-RTP-011.cisco.com> References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/24.5 Mule/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue") Content-Type: text/plain; charset=US-ASCII Archived-At: Subject: Re: [Sidrops] Block ROA creation for AS23456? X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 May 2017 02:49:35 -0000 > Are we talking about the CA should prevent creation and/or the RP > should ignore it when validating? imiho, ideally, it would be covered in 6811 randy From nobody Mon May 29 19:01:49 2017 Return-Path: X-Original-To: sidrops@ietfa.amsl.com Delivered-To: sidrops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6825C128B90; Mon, 29 May 2017 19:01:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.349 X-Spam-Level: X-Spam-Status: No, score=-0.349 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uo7R6b4hFSYj; Mon, 29 May 2017 19:01:40 -0700 (PDT) Received: from mail-qt0-x230.google.com (mail-qt0-x230.google.com [IPv6:2607:f8b0:400d:c0d::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBE5F124D85; Mon, 29 May 2017 19:01:39 -0700 (PDT) Received: by mail-qt0-x230.google.com with SMTP id v27so60275342qtg.2; Mon, 29 May 2017 19:01:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references :mime-version:content-transfer-encoding; bh=OGqteUPhwYvPxjdn0QSqixybNuEvZxI6Apt+SHsEi94=; b=seyQR26JTFkxL9uHA7EOwXrTxbY7EMmFEIEUojH0nm6QURvIKj23ZDLxp6Rl04CF/F SvVWr+s2R5m9M9nEv5B2Mzq4tyMe8M66oYas4jRSnpCc+siOXT5dc8jNbHPRIIq4Tk1Z ALqaSeNha8DixyTvWLMJd1T79GNeoeWi23z18iz0wJMmFusi4Y/Ac3I3G2/Z0OTFETb0 I3rnPn1oK/KsbG9QzdaxrfPUFCsgsuxn8/RU+ynrs2yCEYIZ/luQirV3Wgcp3dFhUEPo hoXyZcrO6h2R65AP8aNutNNUxNemqfRqvjjiOrx7qvDmv3jHh/Rb7iK8XHUZTGhOTIa7 JkzQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=OGqteUPhwYvPxjdn0QSqixybNuEvZxI6Apt+SHsEi94=; b=lef2vHpa9oMuaNNj/D/J94227C9dJLx44gnfXzIbBc7dfTPMP7QbjbO08sDRF7fuLg p0Cw4cM4ibyTkYOb4o6lSe5iOvVnNNLA3zIzdRG6GAQ4kFfvonVPnorQtudTxPF3lSHp PGlgwDlS51Nzu5jTAUS7eSpMe7JSIJ7+J9zYJN7Hz3gIXn8UykZghacxU1JDUFdLdMrh Tag0dJ2tcE92M7jq05F6W0XTYJoWSWiJAnbtsJT1Jwftti6vC4NSmsfDh541ZFRXuBVT ueRyMwhz/ELy+UVewtXWqVQOh7kjswoGK2XqNaTtFtfuKf7XDjf18wIer2Nxor9wOIbO Q4ew== X-Gm-Message-State: AODbwcAGgMKaiqIXmS9WZc3gyYT3iV4IzhXFMjgiOPbntJXKiatFuNd3 TvWROZlnWzL/iVVYQ3Q= X-Received: by 10.237.54.193 with SMTP id f59mr19994370qtb.63.1496109698837; Mon, 29 May 2017 19:01:38 -0700 (PDT) Received: from [10.71.10.169] (r167-58-103-8.dialup.adsl.anteldata.net.uy. [167.58.103.8]) by smtp.gmail.com with ESMTPSA id i51sm7576999qte.28.2017.05.29.19.01.36 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 29 May 2017 19:01:37 -0700 (PDT) From: "Carlos M. Martinez" To: "Declan Ma" Cc: "sidr wg list" , sidrops@ietf.org Date: Mon, 29 May 2017 23:01:34 -0300 Message-ID: <457EED60-10C5-4445-AD63-6916A1738484@gmail.com> In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-Mailer: MailMate (1.9.6r5347) Archived-At: Subject: Re: [Sidrops] [sidr] RPSTIR updated X-BeenThere: sidrops@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 May 2017 02:01:41 -0000 Thanks ! I’ll give it a try. On 25 Mar 2017, at 4:09, Declan Ma wrote: > Hi, folks, > > We RPSTIR team just had the very software updated to support the > algorithm specified by Validation Reconsidered > (draft-ietf-sidr-rpki-validation-reconsidered-07) . > > Given the SIDR WG has not reach the agreement whether and how new OIDs > should be employed, this release, for the time being, is counting on > the old OIDs. > > And we will shift into new OIDs accordingly once the IETF has come > into a conclusion about that. > > Welcome to have a try on this new version of RPSTIR. > > We would appreciate your feedbacks. > > https://github.com/bgpsecurity/rpstir/releases > > > > Declan(Di) Ma > > ZDNS > > > > > > _______________________________________________ > sidr mailing list > sidr@ietf.org > https://www.ietf.org/mailman/listinfo/sidr