{"tool":"network-report","status":"warn","input":{"query":"AS33387"},"findings":[{"level":"warn","text":"AS33387 (NOCIX) announces 24 IPv4 and 4 IPv6 prefixes.","title":"AS33387 (NOCIX) announces 24 IPv4 and 4 IPv6 prefixes.","params":{"query":"AS33387","who":"AS33387 (NOCIX)","v4":24,"v6":4}},{"level":"warn","text":"8 of 28 announced prefixes have no ROA (RPKI not found): 80.76.45.0/24, 83.136.51.0/24, 139.64.133.0/24, 163.123.180.0/24, 163.123.181.0/24 (+3).","title":"8 of 28 announced prefixes have no ROA (RPKI not found): 80.76.45.0/24, 83.136.51.0/24, 139.64.133.0/24, 163.123.180.0/24, 163.123.181.0/24 (+3).","params":{"count":8,"total":28,"list":"80.76.45.0/24, 83.136.51.0/24, 139.64.133.0/24, 163.123.180.0/24, 163.123.181.0/24 (+3)","asn":33387},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS33387 and a max length equal to the prefix length:","record":"80.76.45.0/24 AS33387 max-length /24\n83.136.51.0/24 AS33387 max-length /24\n139.64.133.0/24 AS33387 max-length /24\n163.123.180.0/24 AS33387 max-length /24\n163.123.181.0/24 AS33387 max-length /24\n208.67.0.0/21 AS33387 max-length /21\n209.209.43.0/24 AS33387 max-length /24\n2606:6680:27::/48 AS33387 max-length /48"},{"level":"warn","text":"4 of 28 announced prefixes have no IRR route object: 163.123.181.0/24, 209.209.43.0/24, 208.67.0.0/21, 163.123.180.0/24.","title":"4 of 28 announced prefixes have no IRR route object: 163.123.181.0/24, 209.209.43.0/24, 208.67.0.0/21, 163.123.180.0/24.","params":{"count":4,"total":28,"list":"163.123.181.0/24, 209.209.43.0/24, 208.67.0.0/21, 163.123.180.0/24","asn":33387},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS33387 in your RIR’s IRR database (or RADB).","record":"route: 163.123.181.0/24\norigin: AS33387\n\nroute: 209.209.43.0/24\norigin: AS33387\n\nroute: 208.67.0.0/21\norigin: AS33387"},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","text":"No public NOC, policy or technical contact.","title":"No public NOC, policy or technical contact.","params":{},"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"query":"AS33387","kind":"asn","special":null,"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"2011-03-18","status":"assigned","range":"AS33387","opaque_id":"a1c9e6093581311820a7b9f6a744b670","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS33387","who":"AS33387 (NOCIX)","v4":24,"v6":4}},"seconds":2.1000000000000001,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":33387,"v4":24,"v6":4}},{"tool":["rpki",{"prefix":"80.76.45.0/24","asn":"33387"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":8,"total":28,"list":"80.76.45.0/24, 83.136.51.0/24, 139.64.133.0/24, 163.123.180.0/24, 163.123.181.0/24 (+3)","asn":33387},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"80.76.45.0/24 AS33387 max-length /24\n83.136.51.0/24 AS33387 max-length /24\n139.64.133.0/24 AS33387 max-length /24\n163.123.180.0/24 AS33387 max-length /24\n163.123.181.0/24 AS33387 max-length /24\n208.67.0.0/21 AS33387 max-length /21\n209.209.43.0/24 AS33387 max-length /24\n2606:6680:27::/48 AS33387 max-length /48"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":20,"total":28}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":4,"total":28,"list":"163.123.181.0/24, 209.209.43.0/24, 208.67.0.0/21, 163.123.180.0/24","asn":33387},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 163.123.181.0/24\norigin: AS33387\n\nroute: 209.209.43.0/24\norigin: AS33387\n\nroute: 208.67.0.0/21\norigin: AS33387"},{"level":"info","title":"One upstream or peer seen (AS:upstream): an outage there takes the whole network off the internet.","params":{"upstream":32097}}],"data":{"asn":33387,"holder":"NOCIX - Nocix, LLC","announced":true,"v4":24,"v6":4,"prefixes":["23.148.20.0/24","63.141.224.0/19","74.91.16.0/20","80.76.45.0/24","83.136.51.0/24","93.113.44.0/24","93.113.130.0/24","94.176.109.0/24","94.177.67.0/24","107.150.32.0/19","139.64.133.0/24","142.54.160.0/19","142.111.190.0/24","147.189.142.0/24","163.123.180.0/24","163.123.181.0/24","185.120.14.0/24","185.127.93.0/24","192.151.144.0/20","192.187.96.0/19","198.204.224.0/19","199.168.96.0/21","208.67.0.0/21","209.209.43.0/24","2602:f992:e0::/44","2602:f992:f3::/48","2604:4300::/32","2606:6680:27::/48"],"rpki":{"valid":20,"not-found":8,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"80.76.45.0/24","state":"not-found"},{"prefix":"83.136.51.0/24","state":"not-found"},{"prefix":"139.64.133.0/24","state":"not-found"},{"prefix":"163.123.180.0/24","state":"not-found"},{"prefix":"163.123.181.0/24","state":"not-found"},{"prefix":"208.67.0.0/21","state":"not-found"},{"prefix":"209.209.43.0/24","state":"not-found"},{"prefix":"2606:6680:27::/48","state":"not-found"}],"irr_missing":["163.123.181.0/24","209.209.43.0/24","208.67.0.0/21","163.123.180.0/24"],"irr_missing_count":4,"bogons":[],"upstreams":[{"asn":32097,"power":3577,"name":"Wholesale Internet, Inc."}],"left":1,"right":14},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS33387"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":8,"total":28,"list":"80.76.45.0/24, 83.136.51.0/24, 139.64.133.0/24, 163.123.180.0/24, 163.123.181.0/24 (+3)","asn":33387}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}],"data":{"query":"AS33387","looked_up":"AS33387","kind":"autnum","source":"https://rdap.arin.net/registry/autnum/33387","terms":"https://www.arin.net/resources/registry/whois/tou/","summary":{"Name":"NOCIX","Handle":"AS33387","Range":"AS33387","Status":"active","Registered":"2011-03-18T14:00:25-04:00","Last changed":"2023-10-27T17:06:19-04:00","Abuse contact":"security@datashack.net"},"entities":[{"roles":["registrant"],"kind":"org","name":"Nocix, LLC","email":null},{"roles":["technical"],"kind":"individual","name":"Bob Region","email":"bob@wholesaleinternet.net"},{"roles":["technical"],"kind":"individual","name":"Kevin Robert HODLE","email":"kevin@wholesaleinternet.net"},{"roles":["abuse"],"kind":"group","name":"DataShack Security","email":"security@datashack.net"},{"roles":["technical"],"kind":"individual","name":"Aaron Wendel","email":"aaron@nocix.net"},{"roles":["noc","technical"],"kind":"group","name":"IP Admin","email":"noc@nocix.net"}],"allocation":{"rir":"arin","registry":"ARIN","cc":"US","country":"United States","date":"2011-03-18","status":"assigned","range":"AS33387","opaque_id":"a1c9e6093581311820a7b9f6a744b670","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS33387"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":33387,"name":"NOCIX"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"Present at :ix internet exchanges with :ports ports (:capacity in total).","params":{"ix":1,"ports":1,"capacity":"10G"}},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2024-04-04"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":33387,"net":{"id":12030,"name":"NOCIX","aka":"","website":"http://www.nocix.net","looking_glass":"","route_server":"","irr_as_set":"","info_type":"NSP","info_prefixes4":100,"info_prefixes6":50,"info_traffic":"100-200Gbps","info_ratio":"Mostly Outbound","info_scope":"Regional","info_unicast":true,"info_ipv6":true,"info_never_via_route_servers":false,"ix_count":1,"fac_count":3,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2024-04-04T14:54:36Z"},"ix_count":1,"capacity":10000,"ix":[],"ix_total":1,"fac":[],"fac_total":3,"poc":[],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"33387"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"80.76.45.0/24","asn":"33387"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":8,"total":28,"list":"80.76.45.0/24, 83.136.51.0/24, 139.64.133.0/24, 163.123.180.0/24, 163.123.181.0/24 (+3)","asn":33387},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"80.76.45.0/24 AS33387 max-length /24\n83.136.51.0/24 AS33387 max-length /24\n139.64.133.0/24 AS33387 max-length /24\n163.123.180.0/24 AS33387 max-length /24\n163.123.181.0/24 AS33387 max-length /24\n208.67.0.0/21 AS33387 max-length /21\n209.209.43.0/24 AS33387 max-length /24\n2606:6680:27::/48 AS33387 max-length /48","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":4,"total":28,"list":"163.123.181.0/24, 209.209.43.0/24, 208.67.0.0/21, 163.123.180.0/24","asn":33387},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 163.123.181.0/24\norigin: AS33387\n\nroute: 209.209.43.0/24\norigin: AS33387\n\nroute: 208.67.0.0/21\norigin: AS33387","section":"routing"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS33387"}