{"tool":"network-report","status":"warn","input":{"query":"AS21508"},"findings":[{"level":"warn","text":"AS21508 (COMCAST-21508) announces 17 IPv4 and 61 IPv6 prefixes.","title":"AS21508 (COMCAST-21508) announces 17 IPv4 and 61 IPv6 prefixes.","params":{"query":"AS21508","who":"AS21508 (COMCAST-21508)","v4":17,"v6":61}},{"level":"warn","text":"7 of 78 announced prefixes have no ROA (RPKI not found): 141.104.0.0/16, 157.240.147.0/24, 157.240.148.0/24, 173.242.174.0/24, 198.90.112.0/22 (+2).","title":"7 of 78 announced prefixes have no ROA (RPKI not found): 141.104.0.0/16, 157.240.147.0/24, 157.240.148.0/24, 173.242.174.0/24, 198.90.112.0/22 (+2).","params":{"count":7,"total":78,"list":"141.104.0.0/16, 157.240.147.0/24, 157.240.148.0/24, 173.242.174.0/24, 198.90.112.0/22 (+2)","asn":21508},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS21508 and a max length equal to the prefix length:","record":"141.104.0.0/16 AS21508 max-length /16\n157.240.147.0/24 AS21508 max-length /24\n157.240.148.0/24 AS21508 max-length /24\n173.242.174.0/24 AS21508 max-length /24\n198.90.112.0/22 AS21508 max-length /22\n204.194.47.0/24 AS21508 max-length /24\n205.223.19.0/24 AS21508 max-length /24"},{"level":"warn","text":"76 of 78 announced prefixes have no IRR route object: 50.217.207.0/24, 2001:559:81d7::/48, 2001:559:c174::/48, 2001:559:875f::/48, 2001:559:c4f6::/48 (+71).","title":"76 of 78 announced prefixes have no IRR route object: 50.217.207.0/24, 2001:559:81d7::/48, 2001:559:c174::/48, 2001:559:875f::/48, 2001:559:c4f6::/48 (+71).","params":{"count":76,"total":78,"list":"50.217.207.0/24, 2001:559:81d7::/48, 2001:559:c174::/48, 2001:559:875f::/48, 2001:559:c4f6::/48 (+71)","asn":21508},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS21508 in your RIR’s IRR database (or RADB).","record":"route: 50.217.207.0/24\norigin: AS21508\n\nroute6: 2001:559:81d7::/48\norigin: AS21508\n\nroute6: 2001:559:c174::/48\norigin: AS21508"},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","text":"No public NOC, policy or technical contact.","title":"No public NOC, policy or technical contact.","params":{},"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"query":"AS21508","kind":"asn","special":null,"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"2001-05-16","status":"assigned","range":"AS21508","opaque_id":"3a7b40ab58f6de4849b12c87e5806b7c","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS21508","who":"AS21508 (COMCAST-21508)","v4":17,"v6":61}},"seconds":1.5,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":21508,"v4":17,"v6":61}},{"tool":["rpki",{"prefix":"141.104.0.0/16","asn":"21508"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":7,"total":78,"list":"141.104.0.0/16, 157.240.147.0/24, 157.240.148.0/24, 173.242.174.0/24, 198.90.112.0/22 (+2)","asn":21508},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"141.104.0.0/16 AS21508 max-length /16\n157.240.147.0/24 AS21508 max-length /24\n157.240.148.0/24 AS21508 max-length /24\n173.242.174.0/24 AS21508 max-length /24\n198.90.112.0/22 AS21508 max-length /22\n204.194.47.0/24 AS21508 max-length /24\n205.223.19.0/24 AS21508 max-length /24"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":71,"total":78}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":76,"total":78,"list":"50.217.207.0/24, 2001:559:81d7::/48, 2001:559:c174::/48, 2001:559:875f::/48, 2001:559:c4f6::/48 (+71)","asn":21508},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 50.217.207.0/24\norigin: AS21508\n\nroute6: 2001:559:81d7::/48\norigin: AS21508\n\nroute6: 2001:559:c174::/48\norigin: AS21508"},{"level":"info","title":"One upstream or peer seen (AS:upstream): an outage there takes the whole network off the internet.","params":{"upstream":7922}}],"data":{"asn":21508,"holder":"COMCAST-21508 - Comcast Cable Communications, LLC","announced":true,"v4":17,"v6":61,"prefixes":["50.204.101.0/24","50.205.217.0/24","50.216.229.0/24","50.217.1.0/24","50.217.207.0/24","50.218.47.0/24","50.228.113.0/24","50.229.113.0/24","50.229.114.0/24","50.235.34.0/24","141.104.0.0/16","157.240.147.0/24","157.240.148.0/24","173.242.174.0/24","198.90.112.0/22","204.194.47.0/24","205.223.19.0/24","2001:559:3ac::/48","2001:559:3b9::/48","2001:559:3c8::/48","2001:559:5c9::/48","2001:559:5db::/48","2001:559:7a7::/48","2001:559:7db::/48","2001:559:8a::/48","2001:559:37d::/48","2001:559:40a::/48","2001:559:49a::/48","2001:559:49b::/48","2001:559:53c::/48","2001:559:72b::/48","2001:559:73c::/48","2001:559:78a::/48","2001:559:79d::/48","2001:559:79e::/48","2001:559:81bf::/48","2001:559:81d7::/48","2001:559:81d8::/48","2001:559:82fd::/48","2001:559:85c1::/48","2001:559:85ff::/48","2001:559:87b2::/48","2001:559:220::/48","2001:559:243::/48","2001:559:280::/48","2001:559:788::/48","2001:559:804c::/48","2001:559:833e::/48","2001:559:841c::/48","2001:559:871a::/48","2001:559:875f::/48","2001:559:8201::/48","2001:559:8416::/48","2001:559:8445::/48","2001:559:8535::/48","2001:559:8604::/48","2001:559:8773::/48","2001:559:c0::/48","2001:559:c0f6::/48","2001:559:c0f7::/48","2001:559:c071::/48","2001:559:c1a5::/48","2001:559:c1ca::/48","2001:559:c2a7::/48","2001:559:c3e9::/48","2001:559:c4db::/48","2001:559:c4f6::/48","2001:559:c10a::/48","2001:559:c28f::/48","2001:559:c45f::/48","2001:559:c174::/48","2001:559:c290::/48","2001:559:c344::/48","2001:559:c458::/48","2001:559:c460::/48","2001:559:c515::/48","2001:559:c538::/48","2001:559:f7::/48"],"rpki":{"valid":71,"not-found":7,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"141.104.0.0/16","state":"not-found"},{"prefix":"157.240.147.0/24","state":"not-found"},{"prefix":"157.240.148.0/24","state":"not-found"},{"prefix":"173.242.174.0/24","state":"not-found"},{"prefix":"198.90.112.0/22","state":"not-found"},{"prefix":"204.194.47.0/24","state":"not-found"},{"prefix":"205.223.19.0/24","state":"not-found"}],"irr_missing":["50.217.207.0/24","2001:559:81d7::/48","2001:559:c174::/48","2001:559:875f::/48","2001:559:c4f6::/48","2001:559:c458::/48","2001:559:72b::/48","2001:559:81bf::/48","2001:559:c10a::/48","2001:559:220::/48","2001:559:c0::/48","2001:559:c538::/48","2001:559:8604::/48","50.205.217.0/24","2001:559:5db::/48","173.242.174.0/24","2001:559:804c::/48","2001:559:c290::/48","2001:559:c4db::/48","2001:559:40a::/48","2001:559:79e::/48","50.235.34.0/24","2001:559:3b9::/48","2001:559:c0f6::/48","2001:559:c0f7::/48","2001:559:c1a5::/48","2001:559:c071::/48","50.229.114.0/24","50.229.113.0/24","2001:559:8416::/48"],"irr_missing_count":76,"bogons":[],"upstreams":[{"asn":7922,"power":7011,"name":"Comcast"}],"left":1,"right":50},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS21508"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":7,"total":78,"list":"141.104.0.0/16, 157.240.147.0/24, 157.240.148.0/24, 173.242.174.0/24, 198.90.112.0/22 (+2)","asn":21508}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}],"data":{"query":"AS21508","looked_up":"AS21508","kind":"autnum","source":"https://rdap.arin.net/registry/autnum/21508","terms":"https://www.arin.net/resources/registry/whois/tou/","summary":{"Name":"COMCAST-21508","Handle":"AS21508","Range":"AS21508","Status":"active","Registered":"2001-05-16T00:00:00-04:00","Last changed":"2021-01-25T15:20:02-05:00","Abuse contact":"abuse@comcast.net"},"entities":[{"roles":["registrant"],"kind":"org","name":"Comcast Cable Communications, LLC","email":null}],"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"2001-05-16","status":"assigned","range":"AS21508","opaque_id":"3a7b40ab58f6de4849b12c87e5806b7c","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS21508"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":21508,"name":"Comcast - Richmond"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Restrictive"},"detail":"Rarely peers with new networks."},{"level":"info","title":"No internet exchange ports are listed.","params":[]},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2022-07-27"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":21508,"net":{"id":10095,"name":"Comcast - Richmond","aka":"Comcast - Richmond","website":"","looking_glass":"","route_server":"","irr_as_set":"","info_type":"Cable/DSL/ISP","info_prefixes4":0,"info_prefixes6":0,"info_traffic":"","info_ratio":"Not Disclosed","info_scope":"Regional","info_unicast":true,"info_ipv6":true,"info_never_via_route_servers":false,"ix_count":0,"fac_count":1,"policy_url":"http://www.comcast.com/peering","policy_general":"Restrictive","policy_locations":"Not Required","policy_ratio":true,"policy_contracts":"Required","updated":"2022-07-27T05:33:47Z"},"ix_count":0,"capacity":0,"ix":[],"ix_total":0,"fac":[],"fac_total":1,"poc":[],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"21508"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"141.104.0.0/16","asn":"21508"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":7,"total":78,"list":"141.104.0.0/16, 157.240.147.0/24, 157.240.148.0/24, 173.242.174.0/24, 198.90.112.0/22 (+2)","asn":21508},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"141.104.0.0/16 AS21508 max-length /16\n157.240.147.0/24 AS21508 max-length /24\n157.240.148.0/24 AS21508 max-length /24\n173.242.174.0/24 AS21508 max-length /24\n198.90.112.0/22 AS21508 max-length /22\n204.194.47.0/24 AS21508 max-length /24\n205.223.19.0/24 AS21508 max-length /24","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":76,"total":78,"list":"50.217.207.0/24, 2001:559:81d7::/48, 2001:559:c174::/48, 2001:559:875f::/48, 2001:559:c4f6::/48 (+71)","asn":21508},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 50.217.207.0/24\norigin: AS21508\n\nroute6: 2001:559:81d7::/48\norigin: AS21508\n\nroute6: 2001:559:c174::/48\norigin: AS21508","section":"routing"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS21508"}