{"tool":"network-report","status":"warn","input":{"query":"AS21504"},"findings":[{"level":"warn","text":"AS21504 (BESSEMER-GROUP-INCORPORATED) announces 20 IPv4 and 0 IPv6 prefixes.","title":"AS21504 (BESSEMER-GROUP-INCORPORATED) announces 20 IPv4 and 0 IPv6 prefixes.","params":{"query":"AS21504","who":"AS21504 (BESSEMER-GROUP-INCORPORATED)","v4":20,"v6":0}},{"level":"warn","text":"No IPv6 prefixes announced.","title":"No IPv6 prefixes announced.","params":{},"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"level":"warn","text":"10 of 20 announced prefixes have no ROA (RPKI not found): 198.160.34.0/24, 198.160.35.0/24, 198.160.37.0/24, 198.160.38.0/24, 198.160.39.0/24 (+5).","title":"10 of 20 announced prefixes have no ROA (RPKI not found): 198.160.34.0/24, 198.160.35.0/24, 198.160.37.0/24, 198.160.38.0/24, 198.160.39.0/24 (+5).","params":{"count":10,"total":20,"list":"198.160.34.0/24, 198.160.35.0/24, 198.160.37.0/24, 198.160.38.0/24, 198.160.39.0/24 (+5)","asn":21504},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS21504 and a max length equal to the prefix length:","record":"198.160.34.0/24 AS21504 max-length /24\n198.160.35.0/24 AS21504 max-length /24\n198.160.37.0/24 AS21504 max-length /24\n198.160.38.0/24 AS21504 max-length /24\n198.160.39.0/24 AS21504 max-length /24\n198.160.40.0/24 AS21504 max-length /24\n198.160.42.0/24 AS21504 max-length /24\n198.160.43.0/24 AS21504 max-length /24\n198.160.44.0/24 AS21504 max-length /24\n198.160.48.0/24 AS21504 max-length /24"},{"level":"warn","text":"3 of 20 announced prefixes have no IRR route object: 198.160.37.0/24, 198.160.39.0/24, 198.160.48.0/24.","title":"3 of 20 announced prefixes have no IRR route object: 198.160.37.0/24, 198.160.39.0/24, 198.160.48.0/24.","params":{"count":3,"total":20,"list":"198.160.37.0/24, 198.160.39.0/24, 198.160.48.0/24","asn":21504},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS21504 in your RIR’s IRR database (or RADB).","record":"route: 198.160.37.0/24\norigin: AS21504\n\nroute: 198.160.39.0/24\norigin: AS21504\n\nroute: 198.160.48.0/24\norigin: AS21504"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS21504","kind":"asn","special":null,"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"2014-05-28","status":"assigned","range":"AS21504","opaque_id":"43997b38dce01cdb6d9cae4a1223f256","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS21504","who":"AS21504 (BESSEMER-GROUP-INCORPORATED)","v4":20,"v6":0}},"seconds":6.9000000000000004,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":21504,"v4":20,"v6":0}},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"tool":["rpki",{"prefix":"198.160.34.0/24","asn":"21504"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":20,"list":"198.160.34.0/24, 198.160.35.0/24, 198.160.37.0/24, 198.160.38.0/24, 198.160.39.0/24 (+5)","asn":21504},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"198.160.34.0/24 AS21504 max-length /24\n198.160.35.0/24 AS21504 max-length /24\n198.160.37.0/24 AS21504 max-length /24\n198.160.38.0/24 AS21504 max-length /24\n198.160.39.0/24 AS21504 max-length /24\n198.160.40.0/24 AS21504 max-length /24\n198.160.42.0/24 AS21504 max-length /24\n198.160.43.0/24 AS21504 max-length /24\n198.160.44.0/24 AS21504 max-length /24\n198.160.48.0/24 AS21504 max-length /24"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":4,"total":20}},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":6,"asn":21504,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":3,"total":20,"list":"198.160.37.0/24, 198.160.39.0/24, 198.160.48.0/24","asn":21504},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 198.160.37.0/24\norigin: AS21504\n\nroute: 198.160.39.0/24\norigin: AS21504\n\nroute: 198.160.48.0/24\norigin: AS21504"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":9,"right":0}}],"data":{"asn":21504,"holder":"BESSEMER-GROUP-INCORPORATED - The Bessemer Group, Inc.","announced":true,"v4":20,"v6":0,"prefixes":["198.160.34.0/24","198.160.35.0/24","198.160.37.0/24","198.160.38.0/24","198.160.39.0/24","198.160.40.0/24","198.160.42.0/24","198.160.43.0/24","198.160.44.0/24","198.160.45.0/24","198.160.48.0/24","198.160.49.0/24","198.160.50.0/23","198.160.50.0/24","198.160.51.0/24","198.160.52.0/24","198.160.53.0/24","198.160.54.0/24","198.160.55.0/24","198.160.57.0/24"],"rpki":{"valid":4,"not-found":10,"unchecked":6,"invalid":0},"rpki_problems":[{"prefix":"198.160.34.0/24","state":"not-found"},{"prefix":"198.160.35.0/24","state":"not-found"},{"prefix":"198.160.37.0/24","state":"not-found"},{"prefix":"198.160.38.0/24","state":"not-found"},{"prefix":"198.160.39.0/24","state":"not-found"},{"prefix":"198.160.40.0/24","state":"not-found"},{"prefix":"198.160.42.0/24","state":"not-found"},{"prefix":"198.160.43.0/24","state":"not-found"},{"prefix":"198.160.44.0/24","state":"not-found"},{"prefix":"198.160.48.0/24","state":"not-found"}],"irr_missing":["198.160.37.0/24","198.160.39.0/24","198.160.48.0/24"],"irr_missing_count":3,"bogons":[],"upstreams":[{"asn":46887,"power":336,"name":"Crown Castle"},{"asn":46450,"power":313,"name":"Pilot Fiber, Inc."},{"asn":6461,"power":274,"name":"Zayo"},{"asn":174,"power":267,"name":"Cogent Communications, Inc."},{"asn":55002,"power":266,"name":"Defense.Net"},{"asn":54004,"power":261,"name":"Lightpath"},{"asn":3356,"power":253,"name":"Lumen AS3356"},{"asn":701,"power":197,"name":"Verizon"},{"asn":33287,"power":10,"name":"Comcast - Freedom West (Philadelphia)"}],"left":9,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS21504"},"summary":{"level":"warn","title":"No IPv6 prefixes announced.","params":[]}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}],"data":{"query":"AS21504","looked_up":"AS21504","kind":"autnum","source":"https://rdap.arin.net/registry/autnum/21504","terms":"https://www.arin.net/resources/registry/whois/tou/","summary":{"Name":"BESSEMER-GROUP-INCORPORATED","Handle":"AS21504","Range":"AS21504","Status":"active","Registered":"2014-05-28T16:35:32-04:00","Last changed":"2014-05-28T16:35:32-04:00","Abuse contact":"techops@bessemer.com"},"entities":[{"roles":["registrant"],"kind":"org","name":"The Bessemer Group, Inc.","email":null}],"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"2014-05-28","status":"assigned","range":"AS21504","opaque_id":"43997b38dce01cdb6d9cae4a1223f256","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS21504"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":21504,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"21504"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it.","section":"routing"},{"tool":["rpki",{"prefix":"198.160.34.0/24","asn":"21504"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":20,"list":"198.160.34.0/24, 198.160.35.0/24, 198.160.37.0/24, 198.160.38.0/24, 198.160.39.0/24 (+5)","asn":21504},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"198.160.34.0/24 AS21504 max-length /24\n198.160.35.0/24 AS21504 max-length /24\n198.160.37.0/24 AS21504 max-length /24\n198.160.38.0/24 AS21504 max-length /24\n198.160.39.0/24 AS21504 max-length /24\n198.160.40.0/24 AS21504 max-length /24\n198.160.42.0/24 AS21504 max-length /24\n198.160.43.0/24 AS21504 max-length /24\n198.160.44.0/24 AS21504 max-length /24\n198.160.48.0/24 AS21504 max-length /24","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":3,"total":20,"list":"198.160.37.0/24, 198.160.39.0/24, 198.160.48.0/24","asn":21504},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 198.160.37.0/24\norigin: AS21504\n\nroute: 198.160.39.0/24\norigin: AS21504\n\nroute: 198.160.48.0/24\norigin: AS21504","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS21504"}