{"tool":"network-report","status":"warn","input":{"query":"AS14415"},"findings":[{"level":"warn","text":"AS14415 (HOSTCOLLECTIVE) announces 18 IPv4 and 0 IPv6 prefixes.","title":"AS14415 (HOSTCOLLECTIVE) announces 18 IPv4 and 0 IPv6 prefixes.","params":{"query":"AS14415","who":"AS14415 (HOSTCOLLECTIVE)","v4":18,"v6":0}},{"level":"warn","text":"No IPv6 prefixes announced.","title":"No IPv6 prefixes announced.","params":{},"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"level":"warn","text":"10 of 18 announced prefixes have no ROA (RPKI not found): 64.22.138.0/24, 64.79.160.0/24, 64.79.167.0/24, 64.79.168.0/24, 64.79.170.0/24 (+5).","title":"10 of 18 announced prefixes have no ROA (RPKI not found): 64.22.138.0/24, 64.79.160.0/24, 64.79.167.0/24, 64.79.168.0/24, 64.79.170.0/24 (+5).","params":{"count":10,"total":18,"list":"64.22.138.0/24, 64.79.160.0/24, 64.79.167.0/24, 64.79.168.0/24, 64.79.170.0/24 (+5)","asn":14415},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS14415 and a max length equal to the prefix length:","record":"64.22.138.0/24 AS14415 max-length /24\n64.79.160.0/24 AS14415 max-length /24\n64.79.167.0/24 AS14415 max-length /24\n64.79.168.0/24 AS14415 max-length /24\n64.79.170.0/24 AS14415 max-length /24\n64.209.134.0/23 AS14415 max-length /23\n64.209.142.0/24 AS14415 max-length /24\n96.31.32.0/20 AS14415 max-length /20\n162.250.72.0/22 AS14415 max-length /22\n199.233.252.0/22 AS14415 max-length /22"},{"level":"warn","text":"1 of 18 announced prefixes have no IRR route object: 64.209.134.0/23.","title":"1 of 18 announced prefixes have no IRR route object: 64.209.134.0/23.","params":{"count":1,"total":18,"list":"64.209.134.0/23","asn":14415},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS14415 in your RIR’s IRR database (or RADB).","record":"route: 64.209.134.0/23\norigin: AS14415"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS14415","kind":"asn","special":null,"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"2007-06-19","status":"assigned","range":"AS14415","opaque_id":"79ea54c30858724969ae43dfc7618f05","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS14415","who":"AS14415 (HOSTCOLLECTIVE)","v4":18,"v6":0}},"seconds":4.5999999999999996,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":14415,"v4":18,"v6":0}},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"tool":["rpki",{"prefix":"64.22.138.0/24","asn":"14415"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":18,"list":"64.22.138.0/24, 64.79.160.0/24, 64.79.167.0/24, 64.79.168.0/24, 64.79.170.0/24 (+5)","asn":14415},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"64.22.138.0/24 AS14415 max-length /24\n64.79.160.0/24 AS14415 max-length /24\n64.79.167.0/24 AS14415 max-length /24\n64.79.168.0/24 AS14415 max-length /24\n64.79.170.0/24 AS14415 max-length /24\n64.209.134.0/23 AS14415 max-length /23\n64.209.142.0/24 AS14415 max-length /24\n96.31.32.0/20 AS14415 max-length /20\n162.250.72.0/22 AS14415 max-length /22\n199.233.252.0/22 AS14415 max-length /22"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":8,"asn":14415,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":1,"total":18,"list":"64.209.134.0/23","asn":14415},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 64.209.134.0/23\norigin: AS14415"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":2,"right":0}}],"data":{"asn":14415,"holder":"HOSTCOLLECTIVE - Host Collective, Inc.","announced":true,"v4":18,"v6":0,"prefixes":["64.22.138.0/24","64.79.160.0/24","64.79.167.0/24","64.79.168.0/24","64.79.170.0/24","64.209.134.0/23","64.209.142.0/24","96.31.32.0/20","162.250.72.0/22","199.233.252.0/22","206.79.4.0/24","209.67.188.0/24","216.32.60.0/24","216.177.71.0/24","216.177.77.0/24","216.177.83.0/24","216.177.89.0/24","216.177.91.0/24"],"rpki":{"not-found":10,"unchecked":8,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"64.22.138.0/24","state":"not-found"},{"prefix":"64.79.160.0/24","state":"not-found"},{"prefix":"64.79.167.0/24","state":"not-found"},{"prefix":"64.79.168.0/24","state":"not-found"},{"prefix":"64.79.170.0/24","state":"not-found"},{"prefix":"64.209.134.0/23","state":"not-found"},{"prefix":"64.209.142.0/24","state":"not-found"},{"prefix":"96.31.32.0/20","state":"not-found"},{"prefix":"162.250.72.0/22","state":"not-found"},{"prefix":"199.233.252.0/22","state":"not-found"}],"irr_missing":["64.209.134.0/23"],"irr_missing_count":1,"bogons":[],"upstreams":[{"asn":3356,"power":129,"name":"Lumen AS3356"},{"asn":6461,"power":127,"name":"Zayo"}],"left":2,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS14415"},"summary":{"level":"warn","title":"No IPv6 prefixes announced.","params":[]}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}],"data":{"query":"AS14415","looked_up":"AS14415","kind":"autnum","source":"https://rdap.arin.net/registry/autnum/14415","terms":"https://www.arin.net/resources/registry/whois/tou/","summary":{"Name":"HOSTCOLLECTIVE","Handle":"AS14415","Range":"AS14415","Status":"active","Registered":"2007-06-19T15:08:09-04:00","Last changed":"2012-02-24T09:44:34-05:00","Abuse contact":"noc@hostcollective.com"},"entities":[{"roles":["registrant"],"kind":"org","name":"Host Collective, Inc.","email":null},{"roles":["noc","abuse","technical"],"kind":"group","name":"Network Operation","email":"noc@hostcollective.com"}],"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"2007-06-19","status":"assigned","range":"AS14415","opaque_id":"79ea54c30858724969ae43dfc7618f05","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS14415"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":14415,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"14415"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it.","section":"routing"},{"tool":["rpki",{"prefix":"64.22.138.0/24","asn":"14415"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":18,"list":"64.22.138.0/24, 64.79.160.0/24, 64.79.167.0/24, 64.79.168.0/24, 64.79.170.0/24 (+5)","asn":14415},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"64.22.138.0/24 AS14415 max-length /24\n64.79.160.0/24 AS14415 max-length /24\n64.79.167.0/24 AS14415 max-length /24\n64.79.168.0/24 AS14415 max-length /24\n64.79.170.0/24 AS14415 max-length /24\n64.209.134.0/23 AS14415 max-length /23\n64.209.142.0/24 AS14415 max-length /24\n96.31.32.0/20 AS14415 max-length /20\n162.250.72.0/22 AS14415 max-length /22\n199.233.252.0/22 AS14415 max-length /22","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":1,"total":18,"list":"64.209.134.0/23","asn":14415},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 64.209.134.0/23\norigin: AS14415","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS14415"}