{"tool":"network-report","status":"warn","input":{"query":"AS10396"},"findings":[{"level":"warn","text":"AS10396 (COQUI-NET) announces 137 IPv4 and 82 IPv6 prefixes.","title":"AS10396 (COQUI-NET) announces 137 IPv4 and 82 IPv6 prefixes.","params":{"query":"AS10396","who":"AS10396 (COQUI-NET)","v4":137,"v6":82}},{"level":"warn","text":"10 of 219 announced prefixes have no ROA (RPKI not found): 63.135.240.0/20, 63.135.253.0/24, 63.135.254.0/24, 64.237.128.0/17, 64.237.128.0/20 (+5).","title":"10 of 219 announced prefixes have no ROA (RPKI not found): 63.135.240.0/20, 63.135.253.0/24, 63.135.254.0/24, 64.237.128.0/17, 64.237.128.0/20 (+5).","params":{"count":10,"total":219,"list":"63.135.240.0/20, 63.135.253.0/24, 63.135.254.0/24, 64.237.128.0/17, 64.237.128.0/20 (+5)","asn":10396},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS10396 and a max length equal to the prefix length:","record":"63.135.240.0/20 AS10396 max-length /20\n63.135.253.0/24 AS10396 max-length /24\n63.135.254.0/24 AS10396 max-length /24\n64.237.128.0/17 AS10396 max-length /17\n64.237.128.0/20 AS10396 max-length /20\n64.237.128.0/21 AS10396 max-length /21\n64.237.143.0/24 AS10396 max-length /24\n64.237.144.0/20 AS10396 max-length /20\n64.237.144.0/21 AS10396 max-length /21\n64.237.152.0/21 AS10396 max-length /21"},{"level":"warn","text":"146 of 219 announced prefixes have no IRR route object: 2606:5f00:a101::/48, 63.135.253.0/24, 72.50.3.0/24, 2606:5f00:a11f::/48, 65.23.222.0/23 (+141).","title":"146 of 219 announced prefixes have no IRR route object: 2606:5f00:a101::/48, 63.135.253.0/24, 72.50.3.0/24, 2606:5f00:a11f::/48, 65.23.222.0/23 (+141).","params":{"count":146,"total":219,"list":"2606:5f00:a101::/48, 63.135.253.0/24, 72.50.3.0/24, 2606:5f00:a11f::/48, 65.23.222.0/23 (+141)","asn":10396},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS10396 in your RIR’s IRR database (or RADB).","record":"route6: 2606:5f00:a101::/48\norigin: AS10396\n\nroute: 63.135.253.0/24\norigin: AS10396\n\nroute: 72.50.3.0/24\norigin: AS10396"},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","text":"No public NOC, policy or technical contact.","title":"No public NOC, policy or technical contact.","params":{},"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"query":"AS10396","kind":"asn","special":null,"allocation":{"rir":"arin","registry":"ARIN","cc":"PR","country":"Puerto Rico","date":"1997-07-11","status":"assigned","range":"AS10396","opaque_id":"d1d344f10884780acd5a590bcbac023f","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS10396","who":"AS10396 (COQUI-NET)","v4":137,"v6":82}},"seconds":3.5,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":10396,"v4":137,"v6":82}},{"tool":["rpki",{"prefix":"63.135.240.0/20","asn":"10396"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":219,"list":"63.135.240.0/20, 63.135.253.0/24, 63.135.254.0/24, 64.237.128.0/17, 64.237.128.0/20 (+5)","asn":10396},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"63.135.240.0/20 AS10396 max-length /20\n63.135.253.0/24 AS10396 max-length /24\n63.135.254.0/24 AS10396 max-length /24\n64.237.128.0/17 AS10396 max-length /17\n64.237.128.0/20 AS10396 max-length /20\n64.237.128.0/21 AS10396 max-length /21\n64.237.143.0/24 AS10396 max-length /24\n64.237.144.0/20 AS10396 max-length /20\n64.237.144.0/21 AS10396 max-length /21\n64.237.152.0/21 AS10396 max-length /21"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":209,"asn":10396,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":146,"total":219,"list":"2606:5f00:a101::/48, 63.135.253.0/24, 72.50.3.0/24, 2606:5f00:a11f::/48, 65.23.222.0/23 (+141)","asn":10396},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2606:5f00:a101::/48\norigin: AS10396\n\nroute: 63.135.253.0/24\norigin: AS10396\n\nroute: 72.50.3.0/24\norigin: AS10396"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":7,"right":28}}],"data":{"asn":10396,"holder":"COQUI-NET - DATACOM CARIBE, INC.","announced":true,"v4":137,"v6":82,"prefixes":["63.135.240.0/20","63.135.253.0/24","63.135.254.0/24","64.237.128.0/17","64.237.128.0/20","64.237.128.0/21","64.237.143.0/24","64.237.144.0/20","64.237.144.0/21","64.237.152.0/21","64.237.160.0/20","64.237.176.0/20","64.237.192.0/20","64.237.208.0/20","64.237.208.0/21","64.237.216.0/21","64.237.224.0/20","64.237.240.0/20","64.237.240.0/21","64.237.248.0/21","65.23.192.0/18","65.23.212.0/24","65.23.214.0/24","65.23.215.0/24","65.23.216.0/24","65.23.221.0/24","65.23.222.0/23","65.23.225.0/24","65.23.226.0/23","65.23.228.0/22","66.50.0.0/16","66.50.0.0/20","66.50.16.0/20","66.50.22.0/24","66.50.26.0/24","66.50.28.0/24","66.50.32.0/20","66.50.40.0/24","66.50.48.0/20","66.50.50.0/24","66.50.53.0/24","66.50.64.0/20","66.50.80.0/20","66.50.96.0/20","66.50.101.0/24","66.50.112.0/20","66.50.124.0/24","66.50.128.0/20","66.50.144.0/20","66.50.160.0/20","66.50.176.0/20","66.50.192.0/20","66.50.208.0/20","66.50.208.0/24","66.50.209.0/24","66.50.215.0/24","66.50.224.0/20","66.50.240.0/20","67.224.128.0/18","67.224.128.0/24","67.224.136.0/21","67.224.192.0/18","67.224.217.0/24","72.50.0.0/17","72.50.0.0/20","72.50.0.0/22","72.50.0.0/24","72.50.1.0/24","72.50.2.0/24","72.50.3.0/24","72.50.4.0/22","72.50.4.0/24","72.50.5.0/24","72.50.6.0/24","72.50.7.0/24","72.50.16.0/20","72.50.16.0/24","72.50.24.0/24","72.50.27.0/24","72.50.28.0/22","72.50.32.0/20","72.50.34.0/24","72.50.35.0/24","72.50.36.0/22","72.50.40.0/21","72.50.48.0/20","72.50.48.0/21","72.50.64.0/20","72.50.72.0/21","72.50.80.0/20","72.50.96.0/20","72.50.96.0/21","72.50.104.0/21","72.50.112.0/20","72.50.112.0/21","72.50.120.0/21","173.215.128.0/17","173.215.144.0/21","173.215.177.0/24","173.215.216.0/21"],"rpki":{"not-found":10,"unchecked":209,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"63.135.240.0/20","state":"not-found"},{"prefix":"63.135.253.0/24","state":"not-found"},{"prefix":"63.135.254.0/24","state":"not-found"},{"prefix":"64.237.128.0/17","state":"not-found"},{"prefix":"64.237.128.0/20","state":"not-found"},{"prefix":"64.237.128.0/21","state":"not-found"},{"prefix":"64.237.143.0/24","state":"not-found"},{"prefix":"64.237.144.0/20","state":"not-found"},{"prefix":"64.237.144.0/21","state":"not-found"},{"prefix":"64.237.152.0/21","state":"not-found"}],"irr_missing":["2606:5f00:a101::/48","63.135.253.0/24","72.50.3.0/24","2606:5f00:a11f::/48","65.23.222.0/23","2606:5f00:a003::/48","66.50.22.0/24","65.23.226.0/23","2606:5f00:a005::/48","66.50.215.0/24","2606:5f00:9001::/48","196.42.3.0/24","2606:5f00:a115::/48","196.42.34.0/24","65.23.225.0/24","2606:5f00:9440::/48","72.50.4.0/22","2606:5f00:9041::/48","2606:5f00:a00b::/48","196.42.40.0/22","2606:5f00:a002::/48","2606:5f00:a11a::/48","72.50.104.0/21","72.50.35.0/24","2606:5f00:a10f::/48","72.50.112.0/21","72.50.48.0/21","2606:5f00:a00e::/48","2606:5f00:8000::/33","2606:5f00:a102::/48"],"irr_missing_count":146,"bogons":[],"upstreams":[{"asn":1299,"power":3525,"name":"Arelion (Twelve99)"},{"asn":6453,"power":2103,"name":"TATA Communications Ltd"},{"asn":174,"power":1680,"name":"Cogent Communications, Inc."},{"asn":701,"power":1149,"name":"Verizon"},{"asn":3356,"power":456,"name":"Lumen AS3356"},{"asn":30526,"power":39,"name":"Neptuno Media"},{"asn":11367,"power":5,"name":"WORLDNETPR"}],"left":7,"right":28},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS10396"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":219,"list":"63.135.240.0/20, 63.135.253.0/24, 63.135.254.0/24, 64.237.128.0/17, 64.237.128.0/20 (+5)","asn":10396}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}],"data":{"query":"AS10396","looked_up":"AS10396","kind":"autnum","source":"https://rdap.arin.net/registry/autnum/10396","terms":"https://www.arin.net/resources/registry/whois/tou/","summary":{"Name":"COQUI-NET","Handle":"AS10396","Range":"AS10396","Status":"active","Registered":"1997-07-11T00:00:00-04:00","Last changed":"1997-07-11T17:10:20-04:00","Abuse contact":"domains@coqui.net"},"entities":[{"roles":["registrant"],"kind":"org","name":"DATACOM CARIBE, INC.","email":null},{"roles":["technical"],"kind":"group","name":"IP Address Administrator","email":"tvadmins@claropr.com"}],"allocation":{"rir":"arin","registry":"ARIN","cc":"PR","country":"Puerto Rico","date":"1997-07-11","status":"assigned","range":"AS10396","opaque_id":"d1d344f10884780acd5a590bcbac023f","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS10396"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":10396,"name":"Claro Puerto Rico"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Selective"},"detail":"Peers when the traffic exchange makes sense to them; contact them with your traffic figures."},{"level":"info","title":"No internet exchange ports are listed.","params":[]},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2022-07-27"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":10396,"net":{"id":7278,"name":"Claro Puerto Rico","aka":"PRTC Claro Puerto Rico","website":"http://www.claropr.com","looking_glass":"","route_server":"","irr_as_set":"","info_type":"Cable/DSL/ISP","info_prefixes4":525000,"info_prefixes6":26250,"info_traffic":"","info_ratio":"Balanced","info_scope":"North America","info_unicast":true,"info_ipv6":true,"info_never_via_route_servers":false,"ix_count":0,"fac_count":3,"policy_url":"","policy_general":"Selective","policy_locations":"Preferred","policy_ratio":true,"policy_contracts":"Required","updated":"2022-07-27T05:33:32Z"},"ix_count":0,"capacity":0,"ix":[],"ix_total":0,"fac":[],"fac_total":3,"poc":[],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"10396"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"63.135.240.0/20","asn":"10396"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":219,"list":"63.135.240.0/20, 63.135.253.0/24, 63.135.254.0/24, 64.237.128.0/17, 64.237.128.0/20 (+5)","asn":10396},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"63.135.240.0/20 AS10396 max-length /20\n63.135.253.0/24 AS10396 max-length /24\n63.135.254.0/24 AS10396 max-length /24\n64.237.128.0/17 AS10396 max-length /17\n64.237.128.0/20 AS10396 max-length /20\n64.237.128.0/21 AS10396 max-length /21\n64.237.143.0/24 AS10396 max-length /24\n64.237.144.0/20 AS10396 max-length /20\n64.237.144.0/21 AS10396 max-length /21\n64.237.152.0/21 AS10396 max-length /21","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":146,"total":219,"list":"2606:5f00:a101::/48, 63.135.253.0/24, 72.50.3.0/24, 2606:5f00:a11f::/48, 65.23.222.0/23 (+141)","asn":10396},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2606:5f00:a101::/48\norigin: AS10396\n\nroute: 63.135.253.0/24\norigin: AS10396\n\nroute: 72.50.3.0/24\norigin: AS10396","section":"routing"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS10396"}