{"tool":"network-report","status":"warn","input":{"query":"AS11590"},"findings":[{"level":"warn","text":"AS11590 (CUMBERLAND-TECH) announces 22 IPv4 and 0 IPv6 prefixes.","title":"AS11590 (CUMBERLAND-TECH) announces 22 IPv4 and 0 IPv6 prefixes.","params":{"query":"AS11590","who":"AS11590 (CUMBERLAND-TECH)","v4":22,"v6":0}},{"level":"warn","text":"No IPv6 prefixes announced.","title":"No IPv6 prefixes announced.","params":{},"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"level":"warn","text":"10 of 22 announced prefixes have no ROA (RPKI not found): 24.137.8.0/24, 66.59.96.0/24, 66.59.97.0/24, 66.59.98.0/24, 66.59.102.0/24 (+5).","title":"10 of 22 announced prefixes have no ROA (RPKI not found): 24.137.8.0/24, 66.59.96.0/24, 66.59.97.0/24, 66.59.98.0/24, 66.59.102.0/24 (+5).","params":{"count":10,"total":22,"list":"24.137.8.0/24, 66.59.96.0/24, 66.59.97.0/24, 66.59.98.0/24, 66.59.102.0/24 (+5)","asn":11590},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS11590 and a max length equal to the prefix length:","record":"24.137.8.0/24 AS11590 max-length /24\n66.59.96.0/24 AS11590 max-length /24\n66.59.97.0/24 AS11590 max-length /24\n66.59.98.0/24 AS11590 max-length /24\n66.59.102.0/24 AS11590 max-length /24\n66.59.104.0/24 AS11590 max-length /24\n66.59.107.0/24 AS11590 max-length /24\n66.59.108.0/24 AS11590 max-length /24\n66.59.109.0/24 AS11590 max-length /24\n66.59.110.0/24 AS11590 max-length /24"},{"level":"warn","text":"9 of 22 announced prefixes have no IRR route object: 24.137.8.0/24, 66.59.122.0/24, 66.59.123.0/24, 66.59.117.0/24, 66.59.114.0/24 (+4).","title":"9 of 22 announced prefixes have no IRR route object: 24.137.8.0/24, 66.59.122.0/24, 66.59.123.0/24, 66.59.117.0/24, 66.59.114.0/24 (+4).","params":{"count":9,"total":22,"list":"24.137.8.0/24, 66.59.122.0/24, 66.59.123.0/24, 66.59.117.0/24, 66.59.114.0/24 (+4)","asn":11590},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS11590 in your RIR’s IRR database (or RADB).","record":"route: 24.137.8.0/24\norigin: AS11590\n\nroute: 66.59.122.0/24\norigin: AS11590\n\nroute: 66.59.123.0/24\norigin: AS11590"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS11590","kind":"asn","special":null,"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"1998-10-14","status":"assigned","range":"AS11590","opaque_id":"1a239a418e7774278fe64dbeb3130e19","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS11590","who":"AS11590 (CUMBERLAND-TECH)","v4":22,"v6":0}},"seconds":1.3,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":11590,"v4":22,"v6":0}},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"tool":["rpki",{"prefix":"24.137.8.0/24","asn":"11590"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":22,"list":"24.137.8.0/24, 66.59.96.0/24, 66.59.97.0/24, 66.59.98.0/24, 66.59.102.0/24 (+5)","asn":11590},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"24.137.8.0/24 AS11590 max-length /24\n66.59.96.0/24 AS11590 max-length /24\n66.59.97.0/24 AS11590 max-length /24\n66.59.98.0/24 AS11590 max-length /24\n66.59.102.0/24 AS11590 max-length /24\n66.59.104.0/24 AS11590 max-length /24\n66.59.107.0/24 AS11590 max-length /24\n66.59.108.0/24 AS11590 max-length /24\n66.59.109.0/24 AS11590 max-length /24\n66.59.110.0/24 AS11590 max-length /24"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":12,"asn":11590,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":9,"total":22,"list":"24.137.8.0/24, 66.59.122.0/24, 66.59.123.0/24, 66.59.117.0/24, 66.59.114.0/24 (+4)","asn":11590},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 24.137.8.0/24\norigin: AS11590\n\nroute: 66.59.122.0/24\norigin: AS11590\n\nroute: 66.59.123.0/24\norigin: AS11590"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":2,"right":0}}],"data":{"asn":11590,"holder":"CUMBERLAND-TECH - Cumberland Technologies International","announced":true,"v4":22,"v6":0,"prefixes":["24.137.8.0/24","66.59.96.0/24","66.59.97.0/24","66.59.98.0/24","66.59.102.0/24","66.59.104.0/24","66.59.107.0/24","66.59.108.0/24","66.59.109.0/24","66.59.110.0/24","66.59.111.0/24","66.59.112.0/24","66.59.113.0/24","66.59.114.0/24","66.59.115.0/24","66.59.116.0/24","66.59.117.0/24","66.59.118.0/24","66.59.121.0/24","66.59.122.0/24","66.59.123.0/24","205.166.61.0/24"],"rpki":{"not-found":10,"unchecked":12,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"24.137.8.0/24","state":"not-found"},{"prefix":"66.59.96.0/24","state":"not-found"},{"prefix":"66.59.97.0/24","state":"not-found"},{"prefix":"66.59.98.0/24","state":"not-found"},{"prefix":"66.59.102.0/24","state":"not-found"},{"prefix":"66.59.104.0/24","state":"not-found"},{"prefix":"66.59.107.0/24","state":"not-found"},{"prefix":"66.59.108.0/24","state":"not-found"},{"prefix":"66.59.109.0/24","state":"not-found"},{"prefix":"66.59.110.0/24","state":"not-found"}],"irr_missing":["24.137.8.0/24","66.59.122.0/24","66.59.123.0/24","66.59.117.0/24","66.59.114.0/24","66.59.121.0/24","66.59.118.0/24","66.59.115.0/24","66.59.113.0/24"],"irr_missing_count":9,"bogons":[],"upstreams":[{"asn":3356,"power":279,"name":"Lumen AS3356"},{"asn":26801,"power":84,"name":"Zito Media"}],"left":2,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS11590"},"summary":{"level":"warn","title":"No IPv6 prefixes announced.","params":[]}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}],"data":{"query":"AS11590","looked_up":"AS11590","kind":"autnum","source":"https://rdap.arin.net/registry/autnum/11590","terms":"https://www.arin.net/resources/registry/whois/tou/","summary":{"Name":"CUMBERLAND-TECH","Handle":"AS11590","Range":"AS11590","Status":"active","Registered":"1998-10-14T00:00:00-04:00","Last changed":"2012-03-02T08:03:18-05:00","Abuse contact":"rbl@ctiresidential.com"},"entities":[{"roles":["registrant"],"kind":"org","name":"Cumberland Technologies International","email":null},{"roles":["technical"],"kind":"group","name":"DNS Administration","email":"dns@pa.net"}],"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"1998-10-14","status":"assigned","range":"AS11590","opaque_id":"1a239a418e7774278fe64dbeb3130e19","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS11590"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":11590,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"11590"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it.","section":"routing"},{"tool":["rpki",{"prefix":"24.137.8.0/24","asn":"11590"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":22,"list":"24.137.8.0/24, 66.59.96.0/24, 66.59.97.0/24, 66.59.98.0/24, 66.59.102.0/24 (+5)","asn":11590},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"24.137.8.0/24 AS11590 max-length /24\n66.59.96.0/24 AS11590 max-length /24\n66.59.97.0/24 AS11590 max-length /24\n66.59.98.0/24 AS11590 max-length /24\n66.59.102.0/24 AS11590 max-length /24\n66.59.104.0/24 AS11590 max-length /24\n66.59.107.0/24 AS11590 max-length /24\n66.59.108.0/24 AS11590 max-length /24\n66.59.109.0/24 AS11590 max-length /24\n66.59.110.0/24 AS11590 max-length /24","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":9,"total":22,"list":"24.137.8.0/24, 66.59.122.0/24, 66.59.123.0/24, 66.59.117.0/24, 66.59.114.0/24 (+4)","asn":11590},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 24.137.8.0/24\norigin: AS11590\n\nroute: 66.59.122.0/24\norigin: AS11590\n\nroute: 66.59.123.0/24\norigin: AS11590","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS11590"}