<html><head></head><body><div class="ydp4593a8c4yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div></div>
<div dir="ltr" data-setdir="false">Hi Sascha</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">If there is an existing, exact matching ROUTE object the creation of the new ROUTE object must be authorised by the existing object. There is a flow chart here explaining the sequence of checks:</div><div dir="ltr" data-setdir="false"><a href="https://www.ripe.net/support/training/material/bgp-operations-and-security-training-course/route-object-creation-flowchart.pdf" rel="nofollow" target="_blank">https://www.ripe.net/support/training/material/bgp-operations-and-security-training-course/route-object-creation-flowchart.pdf</a><br></div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">If you want to 'replace' the existing ROUTE object the maintainer of the less specific INETNUM allocation object can delete the existing ROUTE object using the authorisation of the allocation object. This is explained here:</div><div dir="ltr" data-setdir="false"><a href="https://www.ripe.net/manage-ips-and-asns/db/support/managing-route-objects-in-the-irr#4--reclaiming-access-to-blocking-route-objects" rel="nofollow" target="_blank" class="">https://www.ripe.net/manage-ips-and-asns/db/support/managing-route-objects-in-the-irr#4--reclaiming-access-to-blocking-route-objects</a><br></div><div><br></div><div dir="ltr" data-setdir="false">cheers</div><div dir="ltr" data-setdir="false">denis</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">co-chair DB-WG</div><div dir="ltr" data-setdir="false"><br></div><div><br></div><div><br></div>
</div><div id="ydpc9b9914yahoo_quoted_1955646705" class="ydpc9b9914yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Thursday, 11 June 2020, 01:31:36 CEST, Sascha E. Pollok via db-wg <db-wg@ripe.net> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div dir="ltr">Dear friendly DB people,<br></div><div dir="ltr"><br></div><div dir="ltr">here is a problem I don't find easy to solve. Would you assist me in understanding the<br></div><div dir="ltr">constraints?<br></div><div dir="ltr"><br></div><div dir="ltr">Customer has a /22 network 194.76.156.0/22 with the proper inetnum object. The inetnum<br></div><div dir="ltr">objects has a mnt-by: IPHH-NOC and mnt-routes: IPHH-NOC.<br></div><div dir="ltr"><br></div><div dir="ltr">A route object exists but with a different maintainer:<br></div><div dir="ltr"><br></div><div dir="ltr">route: 194.76.156.0/22<br></div><div dir="ltr">descr: CMELCHERS-QSC-NET<br></div><div dir="ltr">descr: via Plusnet<br></div><div dir="ltr">origin: AS20676<br></div><div dir="ltr">mnt-by: PLUSNET-NOC <<<---- not IPHH-NOC<br></div><div dir="ltr"><br></div><div dir="ltr">We are now trying to create an additional route object for a different ASN:<br></div><div dir="ltr"><br></div><div dir="ltr">route: 194.76.156.0/22<br></div><div dir="ltr">descr: C. Melchers via MEKO-S<br></div><div dir="ltr">origin: AS207630<br></div><div dir="ltr">mnt-by: IPHH-NOC <<<--- This is the maintainer in the inetnum object<br></div><div dir="ltr">source: RIPE<br></div><div dir="ltr"><br></div><div dir="ltr">The RIPE DB refuses the update:<br></div><div dir="ltr"><br></div><div dir="ltr">Create FAILED: [route] 194.76.156.0/24AS207630<br></div><div dir="ltr">route: 194.76.156.0/24<br></div><div dir="ltr">descr: C. Melchers via MEKO-S<br></div><div dir="ltr">descr: belongs to 194.76.156.0/22<br></div><div dir="ltr">origin: AS207630<br></div><div dir="ltr">mnt-by: IPHH-NOC<br></div><div dir="ltr">source: RIPE<br></div><div dir="ltr">***Error: Authorisation for [route] 194.76.156.0/22AS20676 failed<br></div><div dir="ltr"> using "mnt-by:"<br></div><div dir="ltr"> not authenticated by: PLUSNET-NOC<br></div><div dir="ltr"><br></div><div dir="ltr">So the DB expects the maintainer from the other route object. But I don't understand why<br></div><div dir="ltr">the mnt-routes in the inetnum-object doesnt give preference over the maintainer on a<br></div><div dir="ltr">different route-object.<br></div><div dir="ltr"><br></div><div dir="ltr">Anyone who could share their honest opinion?<br></div><div dir="ltr"><br></div><div dir="ltr">Cheers<br></div><div dir="ltr">Sascha<br></div><div dir="ltr"><br></div></div>
</div>
</div></body></html>