Your connectivity to Google may be affected – please see below
Prefixes with unknown or invalid RPKI ROAs (Route Origin Authorization)
- 2 prefixes with unknown ROAs
- 0 prefixes with invalid ROAs
What is the issue?
Your network has invalid Routing Information. This is due to prefixes with missing IRR data, prefixes with missing RPKI ROAs, or prefixes with invalid RPKI ROAs.
We apply IRR based route filters to all our BGP sessions. You are advertising prefixes for which we do not see valid IRR records.
We will soon be applying RPKI Origin Validation filtering, and we will not accept prefixes with invalid ROAs. If you have prefixes with invalid RPKI ROAs, those prefixes will stop being accepted soon. We strongly encourage you to register and maintain your routes in the RPKI to protect them and to avoid future issues with invalid or unknown ROAs.
How are my users and connectivity to Google affected?
Invalid route advertisements (due to missing IRR or invalid RPKI) can affect your connectivity to Google:
- Traffic to your network may be redirected over non-direct alternate paths that may include transit, which can result in reduced quality of experience or increased latency for your users
- If you do not have alternate paths (e.g., via public Internet), your network may become disconnected from Google
How can I fix this?
If you are using AFriNIC as your IRR, you can add ROAs for your prefixes by going to:
Resources > Resource Certification > Issue ROA
But before that, you are required to complete the BPKI Certificate Request and to also enable 2-Factor Authentication on your account.