d000::/8 from AS28716

Anyone know why this ISP from Italy is advertising d000::/8 to the
IPv6 Internet?

show route d000::/8

inet6.0: 2446 destinations, 5143 routes (2445 active, 0 holddown, 1 hidden)
Restart Complete
+ = Active Route, - = Last Active, * = Both

d000::/8 *[BGP/170] 01:08:26, MED 760, localpref 200
                      AS path: 30071 6762 28716 I
                    > to 2001:4830:e1:10::1 via ge-0/0/0.593

aut-num: AS28716
as-name: EPLANET-AS
export: to AS49772 announce ANY
descr: ePLANET SPA
descr: Internet Service Provider
descr: Via G.Vida 19 20127 Milano - ITALY -
admin-c: GU29-RIPE
tech-c: MF8125-RIPE
mnt-by: EPLANET-MNT
mnt-routes: EPLANET-MNT
changed: hostmaster@ripe.net 20080208
source: RIPE

To be honest, when I figured a big BUNCH of d000 was going to hit the
   Internet, I did not expect it to come from Italy. :wink:
   Chuck Anderson wrote:

Anyone know why this ISP from Italy is advertising d000::/8 to the
IPv6 Internet?

show route d000::/8

inet6.0: 2446 destinations, 5143 routes (2445 active, 0 holddown, 1 hidden)
Restart Complete
+ = Active Route, - = Last Active, * = Both

d000::/8 *[BGP/170] 01:08:26, MED 760, localpref 200
                      AS path: 30071 6762 28716 I
                    > to 2001:4830:e1:10::1 via ge-0/0/0.593

aut-num: AS28716
as-name: EPLANET-AS
export: to AS49772 announce ANY
descr: ePLANET SPA
descr: Internet Service Provider
descr: Via G.Vida 19 20127 Milano - ITALY -
admin-c: GU29-RIPE
tech-c: MF8125-RIPE
mnt-by: EPLANET-MNT
mnt-routes: EPLANET-MNT
changed: [1]hostmaster@ripe.net 20080208
source: RIPE

References

   1. mailto:hostmaster@ripe.net

I'd say that is a bogus route/AS announcement.
I see nothing in the address assignment for that. But I see traffic
started originating around 12/15/2009.

Mark Jackson, CCIE #4736

Mark Jackson wrote:

I'd say that is a bogus route/AS announcement.
I see nothing in the address assignment for that. But I see traffic
started originating around 12/15/2009.

I envision that work will be done in this regard shortly.

God willing, our RIRs will be handing out prefixes to everyone from
blocks that are specifically designed for 'that purpose'.

It's interesting to know that since we are so virgin v6, that the RIRs
should have no problem shelving up address space into an
easy-to-document format. Although the RIRs can't dictate routing policy,
routing/ops people can dictate what the RIR policy states.

Then, Team Cymru will have an easy time laying base with an 'allowed' as
opposed to a 'denied' list of addresses.

Steve

.-- My secret spy satellite informs me that at Mon, 11 Jan 2010, Mark Jackson wrote:

I'd say that is a bogus route/AS announcement.
I see nothing in the address assignment for that. But I see traffic
started originating around 12/15/2009.

Actually d000::/8 has been around for 2 months already (2009-11-13 08:24:46).
Also see:
http://www.bgpmon.net/showbogons.php?inet=6

Cheers Andree

:-> "Chuck" == Chuck Anderson <cra@WPI.EDU> writes:

    > d000::/8 *[BGP/170] 01:08:26, MED 760, localpref 200
    > AS path: 30071 6762 28716 I
    >> to 2001:4830:e1:10::1 via ge-0/0/0.593

I fail to see how this could have gone through this:

ipv6 prefix-list AS28716-V6-IN: 1 entries
   seq 5 permit 2001:1BD0::/32

unless "Every IPv6 prefix list, including prefix lists that do not
have any permit and deny condition statements, has an implicit deny
any any statement as its last match condition" is not true for this
particular IOS release, or the router just went nuts.

Maybe next time drop me a line when it's happening, I don't see the
route from the customer now.

Pf

..

Maybe next time drop me a line when it's happening, I don't see the
route from the customer now.

Can still be seen on routeviews... a ghost route, perhaps?

route-views6.routeviews.org> show bgp d000::
BGP routing table entry for d000::/8
Paths: (1 available, best #1, table Default-IP-Routing-Table)
  Not advertised to any peer
  33437 29748 3257 6762 28716
    2001:4810::1 from 2001:4810::1 (66.117.34.140)
      Origin IGP, localpref 100, valid, external, best
      Community: 3257:3300 3257:3301 3257:5033
      Last update: Tue Jan 12 13:10:31 2010

:-> "James" == James Hess <mysidia@gmail.com> writes: