{"tool":"network-report","status":"warn","input":{"query":"AS15743"},"findings":[{"level":"warn","text":"AS15743 (NETDE net.de AG) announces 18 IPv4 and 2 IPv6 prefixes.","title":"AS15743 (NETDE net.de AG) announces 18 IPv4 and 2 IPv6 prefixes.","params":{"query":"AS15743","who":"AS15743 (NETDE net.de AG)","v4":18,"v6":2}},{"level":"warn","text":"9 of 20 announced prefixes have no ROA (RPKI not found): 94.100.135.0/24, 192.54.43.0/24, 192.109.227.0/24, 193.96.28.0/24, 193.99.145.0/24 (+4).","title":"9 of 20 announced prefixes have no ROA (RPKI not found): 94.100.135.0/24, 192.54.43.0/24, 192.109.227.0/24, 193.96.28.0/24, 193.99.145.0/24 (+4).","params":{"count":9,"total":20,"list":"94.100.135.0/24, 192.54.43.0/24, 192.109.227.0/24, 193.96.28.0/24, 193.99.145.0/24 (+4)","asn":15743},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS15743 and a max length equal to the prefix length:","record":"94.100.135.0/24 AS15743 max-length /24\n192.54.43.0/24 AS15743 max-length /24\n192.109.227.0/24 AS15743 max-length /24\n193.96.28.0/24 AS15743 max-length /24\n193.99.145.0/24 AS15743 max-length /24\n193.100.232.0/24 AS15743 max-length /24\n193.141.98.0/23 AS15743 max-length /23\n193.186.12.0/24 AS15743 max-length /24\n2a01:6780:1::/48 AS15743 max-length /48"},{"level":"warn","text":"No public NOC, policy or technical contact.","title":"No public NOC, policy or technical contact.","params":{},"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"query":"AS15743","kind":"asn","special":null,"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"DE","country":"Germany","date":"2000-10-03","status":"allocated","range":"AS15743","opaque_id":"1f31c80e-51b0-4514-b410-3c3d424813c5","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS15743","who":"AS15743 (NETDE net.de AG)","v4":18,"v6":2}},"seconds":1.1000000000000001,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":15743,"v4":18,"v6":2}},{"tool":["rpki",{"prefix":"94.100.135.0/24","asn":"15743"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":9,"total":20,"list":"94.100.135.0/24, 192.54.43.0/24, 192.109.227.0/24, 193.96.28.0/24, 193.99.145.0/24 (+4)","asn":15743},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"94.100.135.0/24 AS15743 max-length /24\n192.54.43.0/24 AS15743 max-length /24\n192.109.227.0/24 AS15743 max-length /24\n193.96.28.0/24 AS15743 max-length /24\n193.99.145.0/24 AS15743 max-length /24\n193.100.232.0/24 AS15743 max-length /24\n193.141.98.0/23 AS15743 max-length /23\n193.186.12.0/24 AS15743 max-length /24\n2a01:6780:1::/48 AS15743 max-length /48"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":11,"total":20}},{"level":"pass","title":"Every announced prefix has an IRR route object.","params":[]},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":53,"right":3}}],"data":{"asn":15743,"holder":"NETDE net.de AG","announced":true,"v4":18,"v6":2,"prefixes":["37.131.240.0/21","62.48.64.0/19","94.100.135.0/24","192.54.43.0/24","192.109.227.0/24","192.166.167.0/24","192.166.176.0/21","193.35.198.0/23","193.35.218.0/23","193.35.218.0/24","193.35.219.0/24","193.96.28.0/24","193.98.1.0/24","193.99.145.0/24","193.100.232.0/24","193.141.98.0/23","193.186.12.0/24","217.26.224.0/21","2a00:e68::/29","2a01:6780:1::/48"],"rpki":{"valid":11,"not-found":9,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"94.100.135.0/24","state":"not-found"},{"prefix":"192.54.43.0/24","state":"not-found"},{"prefix":"192.109.227.0/24","state":"not-found"},{"prefix":"193.96.28.0/24","state":"not-found"},{"prefix":"193.99.145.0/24","state":"not-found"},{"prefix":"193.100.232.0/24","state":"not-found"},{"prefix":"193.141.98.0/23","state":"not-found"},{"prefix":"193.186.12.0/24","state":"not-found"},{"prefix":"2a01:6780:1::/48","state":"not-found"}],"irr_missing":[],"irr_missing_count":0,"bogons":[],"upstreams":[{"asn":6939,"power":399,"name":"Hurricane Electric"},{"asn":3356,"power":392,"name":"Lumen AS3356"},{"asn":1299,"power":146,"name":"Arelion (Twelve99)"},{"asn":3320,"power":35,"name":"Deutsche Telekom"},{"asn":13030,"power":16,"name":"Init7"},{"asn":5405,"power":14,"name":"Inter.link"},{"asn":33891,"power":13,"name":"Core-Backbone"},{"asn":34549,"power":12,"name":"meerfarbig GmbH & Co. KG"},{"asn":37468,"power":10,"name":"Angola Cables"},{"asn":34019,"power":9,"name":"Hivane"},{"asn":14840,"power":8,"name":"BR.Digital"},{"asn":29691,"power":8,"name":"Nine Internet Solutions AG"}],"left":53,"right":3},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS15743"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":9,"total":20,"list":"94.100.135.0/24, 192.54.43.0/24, 192.109.227.0/24, 193.96.28.0/24, 193.99.145.0/24 (+4)","asn":15743}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}],"data":{"query":"AS15743","looked_up":"AS15743","kind":"autnum","source":"https://rdap.db.ripe.net/autnum/15743","terms":"https://www.ripe.net/manage-ips-and-asns/db/support/documentation/terms/","summary":{"Name":"NETDE","Handle":"AS15743","Range":"AS15743","Status":"active","Registered":"2002-09-05T17:29:25Z","Last changed":"2020-04-27T14:39:11Z","Abuse contact":"abuse@net.de"},"entities":[{"roles":["registrant"],"kind":"individual","name":"IPH-MNT","email":null},{"roles":["registrant"],"kind":"org","name":"net.de AG","email":null},{"roles":["registrant"],"kind":"individual","name":"RIPE-NCC-END-MNT","email":null},{"roles":["abuse"],"kind":"group","name":"Technik net.de AG","email":"abuse@net.de"}],"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"DE","country":"Germany","date":"2000-10-03","status":"allocated","range":"AS15743","opaque_id":"1f31c80e-51b0-4514-b410-3c3d424813c5","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS15743"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":15743,"name":"net.DE AG"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"Present at :ix internet exchanges with :ports ports (:capacity in total).","params":{"ix":1,"ports":2,"capacity":"30G"}},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2022-07-27"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":15743,"net":{"id":2100,"name":"net.DE AG","aka":"","website":"http://www.net.de","looking_glass":"","route_server":"","irr_as_set":"AS-NETDE","info_type":"Content","info_prefixes4":100,"info_prefixes6":20,"info_traffic":"","info_ratio":"Mostly Outbound","info_scope":"Regional","info_unicast":true,"info_ipv6":true,"info_never_via_route_servers":false,"ix_count":1,"fac_count":0,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2022-07-27T05:33:40Z"},"ix_count":1,"capacity":30000,"ix":[],"ix_total":2,"fac":[],"fac_total":0,"poc":[],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"15743"},"summary":{"level":"warn","title":"No public NOC, policy or technical contact.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"94.100.135.0/24","asn":"15743"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":9,"total":20,"list":"94.100.135.0/24, 192.54.43.0/24, 192.109.227.0/24, 193.96.28.0/24, 193.99.145.0/24 (+4)","asn":15743},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"94.100.135.0/24 AS15743 max-length /24\n192.54.43.0/24 AS15743 max-length /24\n192.109.227.0/24 AS15743 max-length /24\n193.96.28.0/24 AS15743 max-length /24\n193.99.145.0/24 AS15743 max-length /24\n193.100.232.0/24 AS15743 max-length /24\n193.141.98.0/23 AS15743 max-length /23\n193.186.12.0/24 AS15743 max-length /24\n2a01:6780:1::/48 AS15743 max-length /48","section":"routing"},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS15743"}