{"tool":"network-report","status":"warn","input":{"query":"AS17381"},"findings":[{"level":"warn","text":"AS17381 (AS-WSI-ECOM-WEST) announces 13 IPv4 and 0 IPv6 prefixes.","title":"AS17381 (AS-WSI-ECOM-WEST) announces 13 IPv4 and 0 IPv6 prefixes.","params":{"query":"AS17381","who":"AS17381 (AS-WSI-ECOM-WEST)","v4":13,"v6":0}},{"level":"warn","text":"No IPv6 prefixes announced.","title":"No IPv6 prefixes announced.","params":{},"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"level":"warn","text":"10 of 13 announced prefixes have no ROA (RPKI not found): 45.45.128.0/24, 45.45.129.0/24, 45.45.130.0/24, 45.45.131.0/24, 199.87.8.0/24 (+5).","title":"10 of 13 announced prefixes have no ROA (RPKI not found): 45.45.128.0/24, 45.45.129.0/24, 45.45.130.0/24, 45.45.131.0/24, 199.87.8.0/24 (+5).","params":{"count":10,"total":13,"list":"45.45.128.0/24, 45.45.129.0/24, 45.45.130.0/24, 45.45.131.0/24, 199.87.8.0/24 (+5)","asn":17381},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS17381 and a max length equal to the prefix length:","record":"45.45.128.0/24 AS17381 max-length /24\n45.45.129.0/24 AS17381 max-length /24\n45.45.130.0/24 AS17381 max-length /24\n45.45.131.0/24 AS17381 max-length /24\n199.87.8.0/24 AS17381 max-length /24\n199.87.9.0/24 AS17381 max-length /24\n199.87.10.0/24 AS17381 max-length /24\n199.87.11.0/24 AS17381 max-length /24\n199.87.12.0/24 AS17381 max-length /24\n199.87.13.0/24 AS17381 max-length /24"},{"level":"warn","text":"8 of 13 announced prefixes have no IRR route object: 199.87.14.0/23, 199.87.15.0/24, 199.87.11.0/24, 199.87.8.0/24, 199.87.9.0/24 (+3).","title":"8 of 13 announced prefixes have no IRR route object: 199.87.14.0/23, 199.87.15.0/24, 199.87.11.0/24, 199.87.8.0/24, 199.87.9.0/24 (+3).","params":{"count":8,"total":13,"list":"199.87.14.0/23, 199.87.15.0/24, 199.87.11.0/24, 199.87.8.0/24, 199.87.9.0/24 (+3)","asn":17381},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS17381 in your RIR’s IRR database (or RADB).","record":"route: 199.87.14.0/23\norigin: AS17381\n\nroute: 199.87.15.0/24\norigin: AS17381\n\nroute: 199.87.11.0/24\norigin: AS17381"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS17381","kind":"asn","special":null,"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"2006-11-14","status":"assigned","range":"AS17381","opaque_id":"eda578c998e54e8d275db6befb0b8766","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS17381","who":"AS17381 (AS-WSI-ECOM-WEST)","v4":13,"v6":0}},"seconds":1.6000000000000001,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":17381,"v4":13,"v6":0}},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"tool":["rpki",{"prefix":"45.45.128.0/24","asn":"17381"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":13,"list":"45.45.128.0/24, 45.45.129.0/24, 45.45.130.0/24, 45.45.131.0/24, 199.87.8.0/24 (+5)","asn":17381},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"45.45.128.0/24 AS17381 max-length /24\n45.45.129.0/24 AS17381 max-length /24\n45.45.130.0/24 AS17381 max-length /24\n45.45.131.0/24 AS17381 max-length /24\n199.87.8.0/24 AS17381 max-length /24\n199.87.9.0/24 AS17381 max-length /24\n199.87.10.0/24 AS17381 max-length /24\n199.87.11.0/24 AS17381 max-length /24\n199.87.12.0/24 AS17381 max-length /24\n199.87.13.0/24 AS17381 max-length /24"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":3,"asn":17381,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":8,"total":13,"list":"199.87.14.0/23, 199.87.15.0/24, 199.87.11.0/24, 199.87.8.0/24, 199.87.9.0/24 (+3)","asn":17381},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 199.87.14.0/23\norigin: AS17381\n\nroute: 199.87.15.0/24\norigin: AS17381\n\nroute: 199.87.11.0/24\norigin: AS17381"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":5,"right":0}}],"data":{"asn":17381,"holder":"AS-WSI-ECOM-WEST - Williams-Sonoma","announced":true,"v4":13,"v6":0,"prefixes":["45.45.128.0/24","45.45.129.0/24","45.45.130.0/24","45.45.131.0/24","199.87.8.0/24","199.87.9.0/24","199.87.10.0/24","199.87.11.0/24","199.87.12.0/24","199.87.13.0/24","199.87.14.0/23","199.87.14.0/24","199.87.15.0/24"],"rpki":{"not-found":10,"unchecked":3,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"45.45.128.0/24","state":"not-found"},{"prefix":"45.45.129.0/24","state":"not-found"},{"prefix":"45.45.130.0/24","state":"not-found"},{"prefix":"45.45.131.0/24","state":"not-found"},{"prefix":"199.87.8.0/24","state":"not-found"},{"prefix":"199.87.9.0/24","state":"not-found"},{"prefix":"199.87.10.0/24","state":"not-found"},{"prefix":"199.87.11.0/24","state":"not-found"},{"prefix":"199.87.12.0/24","state":"not-found"},{"prefix":"199.87.13.0/24","state":"not-found"}],"irr_missing":["199.87.14.0/23","199.87.15.0/24","199.87.11.0/24","199.87.8.0/24","199.87.9.0/24","199.87.10.0/24","199.87.13.0/24","199.87.12.0/24"],"irr_missing_count":8,"bogons":[],"upstreams":[{"asn":701,"power":317,"name":"Verizon"},{"asn":33667,"power":284,"name":"Comcast - Central California"},{"asn":3356,"power":261,"name":"Lumen AS3356"},{"asn":7018,"power":224,"name":"AT&T US - 7018"},{"asn":21508,"power":9,"name":"Comcast - Richmond"}],"left":5,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS17381"},"summary":{"level":"warn","title":"No IPv6 prefixes announced.","params":[]}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}],"data":{"query":"AS17381","looked_up":"AS17381","kind":"autnum","source":"https://rdap.arin.net/registry/autnum/17381","terms":"https://www.arin.net/resources/registry/whois/tou/","summary":{"Name":"AS-WSI-ECOM-WEST","Handle":"AS17381","Range":"AS17381","Status":"active","Registered":"2006-11-14T15:25:10-05:00","Last changed":"2021-02-03T13:34:15-05:00","Abuse contact":"krhoward@wsgc.com"},"entities":[{"roles":["registrant"],"kind":"org","name":"Williams-Sonoma","email":null},{"roles":["noc","abuse","technical"],"kind":"individual","name":"Kevin Howard","email":"krhoward@wsgc.com"},{"roles":["abuse"],"kind":"group","name":"abuse-contact","email":"abuse@williams-sonoma.com"}],"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"2006-11-14","status":"assigned","range":"AS17381","opaque_id":"eda578c998e54e8d275db6befb0b8766","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS17381"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":17381,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"17381"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it.","section":"routing"},{"tool":["rpki",{"prefix":"45.45.128.0/24","asn":"17381"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":13,"list":"45.45.128.0/24, 45.45.129.0/24, 45.45.130.0/24, 45.45.131.0/24, 199.87.8.0/24 (+5)","asn":17381},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"45.45.128.0/24 AS17381 max-length /24\n45.45.129.0/24 AS17381 max-length /24\n45.45.130.0/24 AS17381 max-length /24\n45.45.131.0/24 AS17381 max-length /24\n199.87.8.0/24 AS17381 max-length /24\n199.87.9.0/24 AS17381 max-length /24\n199.87.10.0/24 AS17381 max-length /24\n199.87.11.0/24 AS17381 max-length /24\n199.87.12.0/24 AS17381 max-length /24\n199.87.13.0/24 AS17381 max-length /24","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":8,"total":13,"list":"199.87.14.0/23, 199.87.15.0/24, 199.87.11.0/24, 199.87.8.0/24, 199.87.9.0/24 (+3)","asn":17381},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 199.87.14.0/23\norigin: AS17381\n\nroute: 199.87.15.0/24\norigin: AS17381\n\nroute: 199.87.11.0/24\norigin: AS17381","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS17381"}