Junos OS

Expand all | Collapse all

RPKI "EX-Full" on validation sessions, causing invalid routes

  • 1.  RPKI "EX-Full" on validation sessions, causing invalid routes

    Posted 12-01-2020 07:09
    we noticed today that some routes were blocked, because of invalid RPKI...

    both validation sessions show State "Ex-Full".
    Some routes which are valid (checked on ripe rpki server) were marked invalid, causing traffic loss towards some prefixes... :(
    We have another router, which is also fed from those two servers. This other router shows "up" for both sessions, so the problem has to be with this JunOS

    serv@cr1# run show validation session                
    Session                                  State   Flaps     Uptime #IPv4/IPv6 records
    x.x.x.xxxxxxxxx                          Ex-Full    25   02:24:02 150303/18225
    xxxxxxxxxxxxxxx                          Ex-Full    18   00:14:13 120480/18488
    ​
    I also restarted one of the RPKI servers, the router which shows "Ex-Full" did not react to the downtime, the other noticed it and showed "up" afterwards.
    Seems the process hangs, any idea how to restart the RPKI backend in JunOS?

    Model: mx240
    Junos: 17.3R3-S6.3

    Thanks before hand for any advice!


  • 2.  RE: RPKI "EX-Full" on validation sessions, causing invalid routes

    Posted 12-01-2020 11:08
    Hi Freemind,

    could you check if the symptoms mentioned in the PR1483097 are similar to your case?

    ------------------------------
    Regards,
    Elchin
    ------------------------------



  • 3.  RE: RPKI "EX-Full" on validation sessions, causing invalid routes

    Posted 12-02-2020 12:32
    Hello E.KH,

    sadly they do not match :(