RFC 8145 Root Trust Anchor Reports

Matthew Luckie <[email protected]> Fri, 7 Sep 2018 14:44:12 +1200
Newsgroups gmane.org.operators.nznog
Message-ID <[email protected]>
From http://root-trust-anchor-reports.research.icann.org/ :

  The ICANN org is publishing the IP addresses that are sending RFC
  8145 telemetry ostensibly indicating that a resolver at the reported
  address (or another resolver that is forwarding through the resolver
  at the address) is validating using only KSK-2010 as a trust
  anchor. Publishing these addresses allows ISPs and other
  organizations who know who operates resolvers at those addresses to
  contact the resolver operator and notify them of the need to update
  their DNSSEC trust anchors. Without further action, these resolvers
  will stop working after the root KSK is rolled on 11 October 2018.

http://root-trust-anchor-reports.research.icann.org/rfc8145-addresses.txt

The following ASes have their country recorded as NZ in whois, and are
in the ICANN list.  The following resolvers may or may not be operated
by the ASN identified.

4771 Spark
  122.56.234.219 122-56-234-219.mobile.spark.co.nz.
  122.57.192.56 122-57-192-56-adsl.sparkbb.co.nz.
  122.61.118.222 122-61-118-222-adsl.sparkbb.co.nz.
  219.88.186.152 rns6.xtra.co.nz.
  222.153.3.78 222-153-3-78-fibre.sparkbb.co.nz.
  222.154.149.63 222-154-149-63-fibre.sparkbb.co.nz.

9500 Vodafone
  203.96.208.52 akrdns2.akl.vf.net.nz.
  203.96.208.61 akrdns3.akl.vf.net.nz.
  203.96.208.62 akrdns4.akl.vf.net.nz.
  203.96.208.91 cbrdns1.chc.vf.net.nz.
  203.96.208.92 cbrdns2.chc.vf.net.nz.
  210.246.17.115 210-246-17-115.dsl.dyn.ihug.co.nz.
  2407:7000:ff00:5382:bd9d::1
  2407:7000:ff00:5382:bd9d::2
  49.224.251.45 45.251.224.49.dyn.cust.vf.net.nz.

23655 SNAP
  111.69.178.254 254.178.69.111.dynamic.snap.net.nz.
  111.69.195.153 153.195.69.111.dynamic.snap.net.nz.

24183 DTS
  202.174.180.228

38793 2degrees
  118.148.149.52 52-149-148-118.nzcomms.co.nz.
  118.149.151.121 121-151-149-118.nzcomms.co.nz.

45177 Vibe
  45.64.48.2 cdns-02.as45177.net.

45179 SiteHost 
  103.250.234.202 103-250-234-202.static.webslice.co.nz.

45267 Lightwire
  114.134.0.194 114-134-0-194.lightwire.co.nz.

132347 MikiPro
  2404:ab00:6:1::6

132692 GlobiCom 
  103.18.58.198 vpn2.torguardvpnaccess.com.

133607 Web Connect
  103.51.101.28

135069 Feenix
  103.208.143.164 103-208-143-164.feenix.co.nz.

Further information is available at the ICANN site, and it might pay
for other operators on NZNOG to double check the ICANN list.

http://root-trust-anchor-reports.research.icann.org

Matthew

_______________________________________________
NZNOG mailing list
[email protected]
https://list.waikato.ac.nz/mailman/listinfo/nznog
signature.asc (application/pgp-signature, 195 B)
-----BEGIN PGP SIGNATURE-----

iF0EABECAB0WIQTXPLTkr00GLuDVs20rK4MpIRAAYAUCW5Hl+gAKCRArK4MpIRAA
YOuYAKCQx5HHQyinCiBl26NLaLYycn5nNQCeJiZnMupN1dvyhlQcm/Fuvpu8Z0w=
=URTS
-----END PGP SIGNATURE-----