{"tool":"network-report","status":"warn","input":{"query":"AS28563"},"findings":[{"level":"warn","text":"AS28563 (AS28563) announces 4 IPv4 and 1 IPv6 prefixes.","title":"AS28563 (AS28563) announces 4 IPv4 and 1 IPv6 prefixes.","params":{"query":"AS28563","who":"AS28563 (AS28563)","v4":4,"v6":1}},{"level":"warn","text":"5 of 5 announced prefixes have no ROA (RPKI not found): 201.131.56.0/24, 201.131.57.0/24, 201.131.58.0/24, 201.131.59.0/24, 2801:c4:36::/48.","title":"5 of 5 announced prefixes have no ROA (RPKI not found): 201.131.56.0/24, 201.131.57.0/24, 201.131.58.0/24, 201.131.59.0/24, 2801:c4:36::/48.","params":{"count":5,"total":5,"list":"201.131.56.0/24, 201.131.57.0/24, 201.131.58.0/24, 201.131.59.0/24, 2801:c4:36::/48","asn":28563},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS28563 and a max length equal to the prefix length:","record":"201.131.56.0/24 AS28563 max-length /24\n201.131.57.0/24 AS28563 max-length /24\n201.131.58.0/24 AS28563 max-length /24\n201.131.59.0/24 AS28563 max-length /24\n2801:c4:36::/48 AS28563 max-length /48"},{"level":"warn","text":"5 of 5 announced prefixes have no IRR route object: 2801:c4:36::/48, 201.131.58.0/24, 201.131.56.0/24, 201.131.57.0/24, 201.131.59.0/24.","title":"5 of 5 announced prefixes have no IRR route object: 2801:c4:36::/48, 201.131.58.0/24, 201.131.56.0/24, 201.131.57.0/24, 201.131.59.0/24.","params":{"count":5,"total":5,"list":"2801:c4:36::/48, 201.131.58.0/24, 201.131.56.0/24, 201.131.57.0/24, 201.131.59.0/24","asn":28563},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS28563 in your RIR’s IRR database (or RADB).","record":"route6: 2801:c4:36::/48\norigin: AS28563\n\nroute: 201.131.58.0/24\norigin: AS28563\n\nroute: 201.131.56.0/24\norigin: AS28563"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS28563","kind":"asn","special":null,"allocation":{"rir":"lacnic","registry":"LACNIC","cc":"MX","country":"Mexico","date":"2009-07-28","status":"allocated","range":"AS28563","opaque_id":"38385","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS28563","who":"AS28563 (AS28563)","v4":4,"v6":1}},"seconds":3,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":28563,"v4":4,"v6":1}},{"tool":["rpki",{"prefix":"201.131.56.0/24","asn":"28563"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":5,"total":5,"list":"201.131.56.0/24, 201.131.57.0/24, 201.131.58.0/24, 201.131.59.0/24, 2801:c4:36::/48","asn":28563},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"201.131.56.0/24 AS28563 max-length /24\n201.131.57.0/24 AS28563 max-length /24\n201.131.58.0/24 AS28563 max-length /24\n201.131.59.0/24 AS28563 max-length /24\n2801:c4:36::/48 AS28563 max-length /48"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":5,"total":5,"list":"2801:c4:36::/48, 201.131.58.0/24, 201.131.56.0/24, 201.131.57.0/24, 201.131.59.0/24","asn":28563},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2801:c4:36::/48\norigin: AS28563\n\nroute: 201.131.58.0/24\norigin: AS28563\n\nroute: 201.131.56.0/24\norigin: AS28563"},{"level":"info","title":"One upstream or peer seen (AS:upstream): an outage there takes the whole network off the internet.","params":{"upstream":8151}}],"data":{"asn":28563,"holder":"AS28563 - Instituto Nacional de Salud Publica","announced":true,"v4":4,"v6":1,"prefixes":["201.131.56.0/24","201.131.57.0/24","201.131.58.0/24","201.131.59.0/24","2801:c4:36::/48"],"rpki":{"not-found":5,"valid":0,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"201.131.56.0/24","state":"not-found"},{"prefix":"201.131.57.0/24","state":"not-found"},{"prefix":"201.131.58.0/24","state":"not-found"},{"prefix":"201.131.59.0/24","state":"not-found"},{"prefix":"2801:c4:36::/48","state":"not-found"}],"irr_missing":["2801:c4:36::/48","201.131.58.0/24","201.131.56.0/24","201.131.57.0/24","201.131.59.0/24"],"irr_missing_count":5,"bogons":[],"upstreams":[{"asn":8151,"power":548,"name":"Uninet S.A. de C.V."}],"left":1,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS28563"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":5,"total":5,"list":"201.131.56.0/24, 201.131.57.0/24, 201.131.58.0/24, 201.131.59.0/24, 2801:c4:36::/48","asn":28563}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.lacnic.net"}}],"data":{"query":"AS28563","looked_up":"AS28563","kind":"autnum","source":"https://rdap.lacnic.net/rdap/autnum/28563","terms":"https://www.lacnic.net/registration-data-access-protocol","summary":{"Name":"28563","Handle":"AS28563","Range":"AS28563","Status":"active","Registered":"2009-07-28T08:44:27Z","Last changed":"2011-06-22T19:29:44Z","Abuse contact":"saul@insp.mx"},"entities":[{"roles":["registrant"],"kind":"org","name":"Instituto Nacional de Salud Pública","email":null},{"roles":["administrative","technical","abuse"],"kind":"individual","name":"Saul Lara Diaz","email":"saul@insp.mx"}],"allocation":{"rir":"lacnic","registry":"LACNIC","cc":"MX","country":"Mexico","date":"2009-07-28","status":"allocated","range":"AS28563","opaque_id":"38385","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS28563"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.lacnic.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":28563,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"28563"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"tool":["rpki",{"prefix":"201.131.56.0/24","asn":"28563"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":5,"total":5,"list":"201.131.56.0/24, 201.131.57.0/24, 201.131.58.0/24, 201.131.59.0/24, 2801:c4:36::/48","asn":28563},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"201.131.56.0/24 AS28563 max-length /24\n201.131.57.0/24 AS28563 max-length /24\n201.131.58.0/24 AS28563 max-length /24\n201.131.59.0/24 AS28563 max-length /24\n2801:c4:36::/48 AS28563 max-length /48","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":5,"total":5,"list":"2801:c4:36::/48, 201.131.58.0/24, 201.131.56.0/24, 201.131.57.0/24, 201.131.59.0/24","asn":28563},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2801:c4:36::/48\norigin: AS28563\n\nroute: 201.131.58.0/24\norigin: AS28563\n\nroute: 201.131.56.0/24\norigin: AS28563","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS28563"}