On Measuring RPKI Relying Parties

Research output: Contribution to book/Conference proceedings/Anthology/ReportConference contributionContributedpeer-review

Contributors

  • John Kristoff - , University of Illinois at Chicago (Author)
  • Randy Bush - , Internet Initiative Japan Inc., Arrcus Inc. (Author)
  • Chris Kanich - , University of Illinois at Chicago (Author)
  • George Michaelson - , APNIC (Author)
  • Amreesh Phokeer - , AFRINIC (Author)
  • Thomas C. Schmidt - , Hamburg University of Applied Sciences (Author)
  • Matthias Wählisch - , Chair of Distributed and Networked Systems, Free University of Berlin (Author)

Abstract

In this paper, we introduce a framework to observe RPKI relying parties (i.e., those that fetch RPKI data from the distributed repository) and present insights into this ecosystem for the first time. Our longitudinal study of data gathered from three RPKI certification authorities (AFRINIC, APNIC, and our own CA) identifies different deployment models of relying parties and (surprisingly) prevalent inconsistent fetching behavior that affects Internet routing robustness. Our results reveal nearly 90% of relying parties are unable to connect to delegated publication points under certain conditions, which leads to erroneous invalidation of IP prefixes and likely widespread loss of network reachability.

Details

Original languageEnglish
Title of host publicationIMC 2020 - Proceedings of the 2020 ACM Internet Measurement Conference
PublisherAssociation for Computing Machinery
Pages484-491
Number of pages8
ISBN (electronic)9781450381383
Publication statusPublished - 27 Oct 2020
Peer-reviewedYes

Publication series

SeriesProceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Conference

Title20th ACM Internet Measurement Conference, IMC 2020
Duration27 - 29 October 2020
CityVirtual, Online
CountryUnited States of America

Keywords

Research priority areas of TU Dresden

DFG Classification of Subject Areas according to Review Boards

Subject groups, research areas, subject areas according to Destatis

Keywords

  • Internet, Routing, Security