we noticed today that some routes were blocked, because of invalid RPKI...
both validation sessions show State "Ex-Full".
Some routes which are valid (checked on ripe rpki server) were marked invalid, causing traffic loss towards some prefixes... :(
We have another router, which is also fed from those two servers. This other router shows "up" for both sessions, so the problem has to be with this JunOS
serv@cr1# run show validation session
Session State Flaps Uptime #IPv4/IPv6 records
x.x.x.xxxxxxxxx Ex-Full 25 02:24:02 150303/18225
xxxxxxxxxxxxxxx Ex-Full 18 00:14:13 120480/18488
I also restarted one of the RPKI servers, the router which shows "Ex-Full" did not react to the downtime, the other noticed it and showed "up" afterwards.
Seems the process hangs, any idea how to restart the RPKI backend in JunOS?
Model: mx240
Junos: 17.3R3-S6.3
Thanks before hand for any advice!