{"tool":"network-report","status":"warn","input":{"query":"AS328805"},"findings":[{"level":"warn","text":"AS328805 (ZAPTECH LIMITED) announces 7 IPv4 and 1 IPv6 prefixes.","title":"AS328805 (ZAPTECH LIMITED) announces 7 IPv4 and 1 IPv6 prefixes.","params":{"query":"AS328805","who":"AS328805 (ZAPTECH LIMITED)","v4":7,"v6":1}},{"level":"warn","text":"8 of 8 announced prefixes have no ROA (RPKI not found): 102.220.184.0/22, 102.220.184.0/23, 102.220.184.0/24, 102.220.185.0/24, 102.220.186.0/23 (+3).","title":"8 of 8 announced prefixes have no ROA (RPKI not found): 102.220.184.0/22, 102.220.184.0/23, 102.220.184.0/24, 102.220.185.0/24, 102.220.186.0/23 (+3).","params":{"count":8,"total":8,"list":"102.220.184.0/22, 102.220.184.0/23, 102.220.184.0/24, 102.220.185.0/24, 102.220.186.0/23 (+3)","asn":328805},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS328805 and a max length equal to the prefix length:","record":"102.220.184.0/22 AS328805 max-length /22\n102.220.184.0/23 AS328805 max-length /23\n102.220.184.0/24 AS328805 max-length /24\n102.220.185.0/24 AS328805 max-length /24\n102.220.186.0/23 AS328805 max-length /23\n102.220.186.0/24 AS328805 max-length /24\n102.220.187.0/24 AS328805 max-length /24\n2c0f:5c00::/32 AS328805 max-length /32"},{"level":"warn","text":"No abuse contact is published for AS328805.","title":"No abuse contact is published for AS328805.","params":{"what":"AS328805"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC."},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","text":"No public NOC, policy or technical contact.","title":"No public NOC, policy or technical contact.","params":{},"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"query":"AS328805","kind":"asn","special":null,"allocation":{"rir":"afrinic","registry":"AFRINIC","cc":"TZ","country":"Tanzania","date":"2021-02-26","status":"allocated","range":"AS328805","opaque_id":"F3697D5C","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS328805","who":"AS328805 (ZAPTECH LIMITED)","v4":7,"v6":1}},"seconds":4.2000000000000002,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":328805,"v4":7,"v6":1}},{"tool":["rpki",{"prefix":"102.220.184.0/22","asn":"328805"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":8,"total":8,"list":"102.220.184.0/22, 102.220.184.0/23, 102.220.184.0/24, 102.220.185.0/24, 102.220.186.0/23 (+3)","asn":328805},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"102.220.184.0/22 AS328805 max-length /22\n102.220.184.0/23 AS328805 max-length /23\n102.220.184.0/24 AS328805 max-length /24\n102.220.185.0/24 AS328805 max-length /24\n102.220.186.0/23 AS328805 max-length /23\n102.220.186.0/24 AS328805 max-length /24\n102.220.187.0/24 AS328805 max-length /24\n2c0f:5c00::/32 AS328805 max-length /32"},{"level":"pass","title":"Every announced prefix has an IRR route object.","params":[]},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":2,"right":1}}],"data":{"asn":328805,"holder":"ZAPTECH LIMITED - ZAPTECH LIMITED","announced":true,"v4":7,"v6":1,"prefixes":["102.220.184.0/22","102.220.184.0/23","102.220.184.0/24","102.220.185.0/24","102.220.186.0/23","102.220.186.0/24","102.220.187.0/24","2c0f:5c00::/32"],"rpki":{"not-found":8,"valid":0,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"102.220.184.0/22","state":"not-found"},{"prefix":"102.220.184.0/23","state":"not-found"},{"prefix":"102.220.184.0/24","state":"not-found"},{"prefix":"102.220.185.0/24","state":"not-found"},{"prefix":"102.220.186.0/23","state":"not-found"},{"prefix":"102.220.186.0/24","state":"not-found"},{"prefix":"102.220.187.0/24","state":"not-found"},{"prefix":"2c0f:5c00::/32","state":"not-found"}],"irr_missing":[],"irr_missing_count":0,"bogons":[],"upstreams":[{"asn":37084,"power":1483,"name":"SimbaNET Tanzania"},{"asn":37349,"power":525,"name":"Aptus Solutions Ltd"}],"left":2,"right":1},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS328805"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":8,"total":8,"list":"102.220.184.0/22, 102.220.184.0/23, 102.220.184.0/24, 102.220.185.0/24, 102.220.186.0/23 (+3)","asn":328805}}},"registration":{"status":"warn","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.afrinic.net"}},{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS328805"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC."}],"data":{"query":"AS328805","looked_up":"AS328805","kind":"autnum","source":"https://rdap.afrinic.net/rdap/autnum/328805","terms":"https://afrinic.net/whois/terms","summary":{"Name":"ORG-ZL3-AFRINIC","Handle":"AS328805","Range":"AS328805","Status":"active","Registered":"2021-02-26T13:48:00Z"},"entities":[{"roles":["registrant"],"kind":"org","name":"ZAPTECH LIMITED","email":"altaz@zaptech.co.tz"},{"roles":["administrative"],"kind":"individual","name":"Cyrus Dupetawalla","email":"cyrusd@zaptech.co.tz"},{"roles":["administrative","technical"],"kind":"individual","name":"Altaz Premji","email":"altaz@zaptech.co.tz"}],"allocation":{"rir":"afrinic","registry":"AFRINIC","cc":"TZ","country":"Tanzania","date":"2021-02-26","status":"allocated","range":"AS328805","opaque_id":"F3697D5C","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS328805"},"summary":{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS328805"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":328805,"name":"Zaptech"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"No internet exchange ports are listed.","params":[]},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2024-05-22"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":328805,"net":{"id":26126,"name":"Zaptech","aka":"Zaptech","website":"http://www.zaptech.co.tz","looking_glass":"","route_server":"","irr_as_set":"","info_type":"Cable/DSL/ISP","info_prefixes4":24,"info_prefixes6":32,"info_traffic":"1-5Gbps","info_ratio":"Mostly Inbound","info_scope":"Global","info_unicast":false,"info_ipv6":false,"info_never_via_route_servers":false,"ix_count":0,"fac_count":0,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2024-05-22T21:19:04Z"},"ix_count":0,"capacity":0,"ix":[],"ix_total":0,"fac":[],"fac_total":0,"poc":[],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"328805"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"102.220.184.0/22","asn":"328805"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":8,"total":8,"list":"102.220.184.0/22, 102.220.184.0/23, 102.220.184.0/24, 102.220.185.0/24, 102.220.186.0/23 (+3)","asn":328805},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"102.220.184.0/22 AS328805 max-length /22\n102.220.184.0/23 AS328805 max-length /23\n102.220.184.0/24 AS328805 max-length /24\n102.220.185.0/24 AS328805 max-length /24\n102.220.186.0/23 AS328805 max-length /23\n102.220.186.0/24 AS328805 max-length /24\n102.220.187.0/24 AS328805 max-length /24\n2c0f:5c00::/32 AS328805 max-length /32","section":"routing"},{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS328805"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC.","section":"registration"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS328805"}