{"tool":"network-report","status":"warn","input":{"query":"AS201052"},"findings":[{"level":"warn","text":"AS201052 (GOVCERT-RU-AS) announces 11 IPv4 and 0 IPv6 prefixes.","title":"AS201052 (GOVCERT-RU-AS) announces 11 IPv4 and 0 IPv6 prefixes.","params":{"query":"AS201052","who":"AS201052 (GOVCERT-RU-AS)","v4":11,"v6":0}},{"level":"warn","text":"No IPv6 prefixes announced.","title":"No IPv6 prefixes announced.","params":{},"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"level":"warn","text":"10 of 11 announced prefixes have no ROA (RPKI not found): 144.206.64.0/20, 144.206.80.0/21, 144.206.88.0/24, 144.206.89.0/24, 144.206.90.0/24 (+5).","title":"10 of 11 announced prefixes have no ROA (RPKI not found): 144.206.64.0/20, 144.206.80.0/21, 144.206.88.0/24, 144.206.89.0/24, 144.206.90.0/24 (+5).","params":{"count":10,"total":11,"list":"144.206.64.0/20, 144.206.80.0/21, 144.206.88.0/24, 144.206.89.0/24, 144.206.90.0/24 (+5)","asn":201052},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS201052 and a max length equal to the prefix length:","record":"144.206.64.0/20 AS201052 max-length /20\n144.206.80.0/21 AS201052 max-length /21\n144.206.88.0/24 AS201052 max-length /24\n144.206.89.0/24 AS201052 max-length /24\n144.206.90.0/24 AS201052 max-length /24\n144.206.91.0/24 AS201052 max-length /24\n144.206.92.0/24 AS201052 max-length /24\n144.206.93.0/24 AS201052 max-length /24\n144.206.94.0/24 AS201052 max-length /24\n144.206.95.0/24 AS201052 max-length /24"},{"level":"warn","text":"2 of 11 announced prefixes have no IRR route object: 144.206.80.0/21, 144.206.64.0/20.","title":"2 of 11 announced prefixes have no IRR route object: 144.206.80.0/21, 144.206.64.0/20.","params":{"count":2,"total":11,"list":"144.206.80.0/21, 144.206.64.0/20","asn":201052},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS201052 in your RIR’s IRR database (or RADB).","record":"route: 144.206.80.0/21\norigin: AS201052\n\nroute: 144.206.64.0/20\norigin: AS201052"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS201052","kind":"asn","special":null,"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"RU","country":"Russia","date":"2015-02-10","status":"allocated","range":"AS201052","opaque_id":"54920451-7cff-4b7d-b040-7cf6f67738ba","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS201052","who":"AS201052 (GOVCERT-RU-AS)","v4":11,"v6":0}},"seconds":1.1000000000000001,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":201052,"v4":11,"v6":0}},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"tool":["rpki",{"prefix":"144.206.64.0/20","asn":"201052"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":11,"list":"144.206.64.0/20, 144.206.80.0/21, 144.206.88.0/24, 144.206.89.0/24, 144.206.90.0/24 (+5)","asn":201052},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"144.206.64.0/20 AS201052 max-length /20\n144.206.80.0/21 AS201052 max-length /21\n144.206.88.0/24 AS201052 max-length /24\n144.206.89.0/24 AS201052 max-length /24\n144.206.90.0/24 AS201052 max-length /24\n144.206.91.0/24 AS201052 max-length /24\n144.206.92.0/24 AS201052 max-length /24\n144.206.93.0/24 AS201052 max-length /24\n144.206.94.0/24 AS201052 max-length /24\n144.206.95.0/24 AS201052 max-length /24"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":1,"asn":201052,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":2,"total":11,"list":"144.206.80.0/21, 144.206.64.0/20","asn":201052},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 144.206.80.0/21\norigin: AS201052\n\nroute: 144.206.64.0/20\norigin: AS201052"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":2,"right":0}}],"data":{"asn":201052,"holder":"GOVCERT-RU-AS Autonomous nonprofit organisation \"Computer Incident Response Center\"","announced":true,"v4":11,"v6":0,"prefixes":["144.206.64.0/20","144.206.80.0/21","144.206.88.0/24","144.206.89.0/24","144.206.90.0/24","144.206.91.0/24","144.206.92.0/24","144.206.93.0/24","144.206.94.0/24","144.206.95.0/24","194.85.25.0/24"],"rpki":{"not-found":10,"unchecked":1,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"144.206.64.0/20","state":"not-found"},{"prefix":"144.206.80.0/21","state":"not-found"},{"prefix":"144.206.88.0/24","state":"not-found"},{"prefix":"144.206.89.0/24","state":"not-found"},{"prefix":"144.206.90.0/24","state":"not-found"},{"prefix":"144.206.91.0/24","state":"not-found"},{"prefix":"144.206.92.0/24","state":"not-found"},{"prefix":"144.206.93.0/24","state":"not-found"},{"prefix":"144.206.94.0/24","state":"not-found"},{"prefix":"144.206.95.0/24","state":"not-found"}],"irr_missing":["144.206.80.0/21","144.206.64.0/20"],"irr_missing_count":2,"bogons":[],"upstreams":[{"asn":12389,"power":287,"name":"Rostelecom"},{"asn":8985,"power":80,"name":"MSK-IX Services"}],"left":2,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS201052"},"summary":{"level":"warn","title":"No IPv6 prefixes announced.","params":[]}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}],"data":{"query":"AS201052","looked_up":"AS201052","kind":"autnum","source":"https://rdap.db.ripe.net/autnum/201052","terms":"https://www.ripe.net/manage-ips-and-asns/db/support/documentation/terms/","summary":{"Name":"GOVCERT-RU-AS","Handle":"AS201052","Range":"AS201052","Status":"active","Registered":"2015-02-10T14:30:56Z","Last changed":"2021-02-09T06:12:43Z","Abuse contact":"nam@gov-cert.ru"},"entities":[{"roles":["registrant"],"kind":"individual","name":"GOVCERT-RU-MNT","email":null},{"roles":["registrant"],"kind":"org","name":"Autonomous nonprofit organisation \"Computer Incident Response Center\"","email":null},{"roles":["registrant"],"kind":"individual","name":"RIPE-NCC-END-MNT","email":null},{"roles":["registrant"],"kind":"individual","name":"RUIX-MNT","email":null},{"roles":["abuse"],"kind":"group","name":"Autonomous nonprofit organization \"Computer Security Incident responce center\"","email":"nam@gov-cert.ru"}],"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"RU","country":"Russia","date":"2015-02-10","status":"allocated","range":"AS201052","opaque_id":"54920451-7cff-4b7d-b040-7cf6f67738ba","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS201052"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":201052,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"201052"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it.","section":"routing"},{"tool":["rpki",{"prefix":"144.206.64.0/20","asn":"201052"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":11,"list":"144.206.64.0/20, 144.206.80.0/21, 144.206.88.0/24, 144.206.89.0/24, 144.206.90.0/24 (+5)","asn":201052},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"144.206.64.0/20 AS201052 max-length /20\n144.206.80.0/21 AS201052 max-length /21\n144.206.88.0/24 AS201052 max-length /24\n144.206.89.0/24 AS201052 max-length /24\n144.206.90.0/24 AS201052 max-length /24\n144.206.91.0/24 AS201052 max-length /24\n144.206.92.0/24 AS201052 max-length /24\n144.206.93.0/24 AS201052 max-length /24\n144.206.94.0/24 AS201052 max-length /24\n144.206.95.0/24 AS201052 max-length /24","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":2,"total":11,"list":"144.206.80.0/21, 144.206.64.0/20","asn":201052},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 144.206.80.0/21\norigin: AS201052\n\nroute: 144.206.64.0/20\norigin: AS201052","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS201052"}