{"tool":"network-report","status":"warn","input":{"query":"AS1255"},"findings":[{"level":"warn","text":"AS1255 (SMITHCOLLEGE-AS) announces 14 IPv4 and 0 IPv6 prefixes.","title":"AS1255 (SMITHCOLLEGE-AS) announces 14 IPv4 and 0 IPv6 prefixes.","params":{"query":"AS1255","who":"AS1255 (SMITHCOLLEGE-AS)","v4":14,"v6":0}},{"level":"warn","text":"No IPv6 prefixes announced.","title":"No IPv6 prefixes announced.","params":{},"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"level":"warn","text":"10 of 14 announced prefixes have no ROA (RPKI not found): 131.229.0.0/17, 131.229.0.0/24, 131.229.1.0/24, 131.229.2.0/24, 131.229.3.0/24 (+5).","title":"10 of 14 announced prefixes have no ROA (RPKI not found): 131.229.0.0/17, 131.229.0.0/24, 131.229.1.0/24, 131.229.2.0/24, 131.229.3.0/24 (+5).","params":{"count":10,"total":14,"list":"131.229.0.0/17, 131.229.0.0/24, 131.229.1.0/24, 131.229.2.0/24, 131.229.3.0/24 (+5)","asn":1255},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS1255 and a max length equal to the prefix length:","record":"131.229.0.0/17 AS1255 max-length /17\n131.229.0.0/24 AS1255 max-length /24\n131.229.1.0/24 AS1255 max-length /24\n131.229.2.0/24 AS1255 max-length /24\n131.229.3.0/24 AS1255 max-length /24\n131.229.4.0/24 AS1255 max-length /24\n131.229.5.0/24 AS1255 max-length /24\n131.229.6.0/24 AS1255 max-length /24\n131.229.8.0/24 AS1255 max-length /24\n131.229.40.0/23 AS1255 max-length /23"},{"level":"warn","text":"14 of 14 announced prefixes have no IRR route object: 131.229.1.0/24, 131.229.3.0/24, 131.229.42.0/23, 131.229.5.0/24, 131.229.2.0/24 (+9).","title":"14 of 14 announced prefixes have no IRR route object: 131.229.1.0/24, 131.229.3.0/24, 131.229.42.0/23, 131.229.5.0/24, 131.229.2.0/24 (+9).","params":{"count":14,"total":14,"list":"131.229.1.0/24, 131.229.3.0/24, 131.229.42.0/23, 131.229.5.0/24, 131.229.2.0/24 (+9)","asn":1255},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS1255 in your RIR’s IRR database (or RADB).","record":"route: 131.229.1.0/24\norigin: AS1255\n\nroute: 131.229.3.0/24\norigin: AS1255\n\nroute: 131.229.42.0/23\norigin: AS1255"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS1255","kind":"asn","special":null,"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"1991-04-24","status":"assigned","range":"AS1255","opaque_id":"2a10cb2b9cdc09004f94f2689a7cbe78","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS1255","who":"AS1255 (SMITHCOLLEGE-AS)","v4":14,"v6":0}},"seconds":2.2999999999999998,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":1255,"v4":14,"v6":0}},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"tool":["rpki",{"prefix":"131.229.0.0/17","asn":"1255"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":14,"list":"131.229.0.0/17, 131.229.0.0/24, 131.229.1.0/24, 131.229.2.0/24, 131.229.3.0/24 (+5)","asn":1255},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"131.229.0.0/17 AS1255 max-length /17\n131.229.0.0/24 AS1255 max-length /24\n131.229.1.0/24 AS1255 max-length /24\n131.229.2.0/24 AS1255 max-length /24\n131.229.3.0/24 AS1255 max-length /24\n131.229.4.0/24 AS1255 max-length /24\n131.229.5.0/24 AS1255 max-length /24\n131.229.6.0/24 AS1255 max-length /24\n131.229.8.0/24 AS1255 max-length /24\n131.229.40.0/23 AS1255 max-length /23"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":4,"asn":1255,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":14,"total":14,"list":"131.229.1.0/24, 131.229.3.0/24, 131.229.42.0/23, 131.229.5.0/24, 131.229.2.0/24 (+9)","asn":1255},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 131.229.1.0/24\norigin: AS1255\n\nroute: 131.229.3.0/24\norigin: AS1255\n\nroute: 131.229.42.0/23\norigin: AS1255"},{"level":"info","title":"One upstream or peer seen (AS:upstream): an outage there takes the whole network off the internet.","params":{"upstream":1968}}],"data":{"asn":1255,"holder":"SMITHCOLLEGE-AS - Smith College","announced":true,"v4":14,"v6":0,"prefixes":["131.229.0.0/17","131.229.0.0/24","131.229.1.0/24","131.229.2.0/24","131.229.3.0/24","131.229.4.0/24","131.229.5.0/24","131.229.6.0/24","131.229.8.0/24","131.229.40.0/23","131.229.42.0/23","131.229.44.0/23","131.229.46.0/23","131.229.67.0/24"],"rpki":{"not-found":10,"unchecked":4,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"131.229.0.0/17","state":"not-found"},{"prefix":"131.229.0.0/24","state":"not-found"},{"prefix":"131.229.1.0/24","state":"not-found"},{"prefix":"131.229.2.0/24","state":"not-found"},{"prefix":"131.229.3.0/24","state":"not-found"},{"prefix":"131.229.4.0/24","state":"not-found"},{"prefix":"131.229.5.0/24","state":"not-found"},{"prefix":"131.229.6.0/24","state":"not-found"},{"prefix":"131.229.8.0/24","state":"not-found"},{"prefix":"131.229.40.0/23","state":"not-found"}],"irr_missing":["131.229.1.0/24","131.229.3.0/24","131.229.42.0/23","131.229.5.0/24","131.229.2.0/24","131.229.46.0/23","131.229.8.0/24","131.229.67.0/24","131.229.0.0/17","131.229.4.0/24","131.229.44.0/23","131.229.40.0/23","131.229.6.0/24","131.229.0.0/24"],"irr_missing_count":14,"bogons":[],"upstreams":[{"asn":1968,"power":524,"name":"UMASSNET-AS1968 - UMASSNET, US"}],"left":1,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS1255"},"summary":{"level":"warn","title":"No IPv6 prefixes announced.","params":[]}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}],"data":{"query":"AS1255","looked_up":"AS1255","kind":"autnum","source":"https://rdap.arin.net/registry/autnum/1255","terms":"https://www.arin.net/resources/registry/whois/tou/","summary":{"Name":"SMITHCOLLEGE-AS","Handle":"AS1255","Range":"AS1255","Status":"active","Registered":"1991-04-24T00:00:00-04:00","Last changed":"2021-12-10T12:51:18-05:00","Abuse contact":"abuse@smith.edu"},"entities":[{"roles":["registrant"],"kind":"org","name":"Smith College","email":null},{"roles":["technical"],"kind":"individual","name":"John A Crowley","email":"jcrowley@smith.edu"}],"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"1991-04-24","status":"assigned","range":"AS1255","opaque_id":"2a10cb2b9cdc09004f94f2689a7cbe78","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS1255"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":1255,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"1255"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it.","section":"routing"},{"tool":["rpki",{"prefix":"131.229.0.0/17","asn":"1255"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":14,"list":"131.229.0.0/17, 131.229.0.0/24, 131.229.1.0/24, 131.229.2.0/24, 131.229.3.0/24 (+5)","asn":1255},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"131.229.0.0/17 AS1255 max-length /17\n131.229.0.0/24 AS1255 max-length /24\n131.229.1.0/24 AS1255 max-length /24\n131.229.2.0/24 AS1255 max-length /24\n131.229.3.0/24 AS1255 max-length /24\n131.229.4.0/24 AS1255 max-length /24\n131.229.5.0/24 AS1255 max-length /24\n131.229.6.0/24 AS1255 max-length /24\n131.229.8.0/24 AS1255 max-length /24\n131.229.40.0/23 AS1255 max-length /23","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":14,"total":14,"list":"131.229.1.0/24, 131.229.3.0/24, 131.229.42.0/23, 131.229.5.0/24, 131.229.2.0/24 (+9)","asn":1255},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 131.229.1.0/24\norigin: AS1255\n\nroute: 131.229.3.0/24\norigin: AS1255\n\nroute: 131.229.42.0/23\norigin: AS1255","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS1255"}