{"tool":"network-report","status":"warn","input":{"query":"AS35203"},"findings":[{"level":"warn","text":"AS35203 (ch-goldenphone Goldenphone GmbH) announces 8 IPv4 and 0 IPv6 prefixes.","title":"AS35203 (ch-goldenphone Goldenphone GmbH) announces 8 IPv4 and 0 IPv6 prefixes.","params":{"query":"AS35203","who":"AS35203 (ch-goldenphone Goldenphone GmbH)","v4":8,"v6":0}},{"level":"warn","text":"No IPv6 prefixes announced.","title":"No IPv6 prefixes announced.","params":{},"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"level":"warn","text":"8 of 8 announced prefixes have no ROA (RPKI not found): 45.67.48.0/24, 45.67.49.0/24, 45.67.50.0/24, 45.67.51.0/24, 154.44.132.0/24 (+3).","title":"8 of 8 announced prefixes have no ROA (RPKI not found): 45.67.48.0/24, 45.67.49.0/24, 45.67.50.0/24, 45.67.51.0/24, 154.44.132.0/24 (+3).","params":{"count":8,"total":8,"list":"45.67.48.0/24, 45.67.49.0/24, 45.67.50.0/24, 45.67.51.0/24, 154.44.132.0/24 (+3)","asn":35203},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS35203 and a max length equal to the prefix length:","record":"45.67.48.0/24 AS35203 max-length /24\n45.67.49.0/24 AS35203 max-length /24\n45.67.50.0/24 AS35203 max-length /24\n45.67.51.0/24 AS35203 max-length /24\n154.44.132.0/24 AS35203 max-length /24\n154.44.133.0/24 AS35203 max-length /24\n154.44.134.0/24 AS35203 max-length /24\n154.44.135.0/24 AS35203 max-length /24"},{"level":"warn","text":"8 of 8 announced prefixes have no IRR route object: 45.67.51.0/24, 154.44.135.0/24, 154.44.132.0/24, 45.67.50.0/24, 45.67.49.0/24 (+3).","title":"8 of 8 announced prefixes have no IRR route object: 45.67.51.0/24, 154.44.135.0/24, 154.44.132.0/24, 45.67.50.0/24, 45.67.49.0/24 (+3).","params":{"count":8,"total":8,"list":"45.67.51.0/24, 154.44.135.0/24, 154.44.132.0/24, 45.67.50.0/24, 45.67.49.0/24 (+3)","asn":35203},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS35203 in your RIR’s IRR database (or RADB).","record":"route: 45.67.51.0/24\norigin: AS35203\n\nroute: 154.44.135.0/24\norigin: AS35203\n\nroute: 154.44.132.0/24\norigin: AS35203"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS35203","kind":"asn","special":null,"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"CH","country":"Switzerland","date":"2019-03-27","status":"allocated","range":"AS35203","opaque_id":"19292e9c-53fc-49f6-a631-edc632841d4d","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS35203","who":"AS35203 (ch-goldenphone Goldenphone GmbH)","v4":8,"v6":0}},"seconds":7.2000000000000002,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":35203,"v4":8,"v6":0}},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"tool":["rpki",{"prefix":"45.67.48.0/24","asn":"35203"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":8,"total":8,"list":"45.67.48.0/24, 45.67.49.0/24, 45.67.50.0/24, 45.67.51.0/24, 154.44.132.0/24 (+3)","asn":35203},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"45.67.48.0/24 AS35203 max-length /24\n45.67.49.0/24 AS35203 max-length /24\n45.67.50.0/24 AS35203 max-length /24\n45.67.51.0/24 AS35203 max-length /24\n154.44.132.0/24 AS35203 max-length /24\n154.44.133.0/24 AS35203 max-length /24\n154.44.134.0/24 AS35203 max-length /24\n154.44.135.0/24 AS35203 max-length /24"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":8,"total":8,"list":"45.67.51.0/24, 154.44.135.0/24, 154.44.132.0/24, 45.67.50.0/24, 45.67.49.0/24 (+3)","asn":35203},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 45.67.51.0/24\norigin: AS35203\n\nroute: 154.44.135.0/24\norigin: AS35203\n\nroute: 154.44.132.0/24\norigin: AS35203"},{"level":"info","title":"One upstream or peer seen (AS:upstream): an outage there takes the whole network off the internet.","params":{"upstream":174}}],"data":{"asn":35203,"holder":"ch-goldenphone Goldenphone GmbH","announced":true,"v4":8,"v6":0,"prefixes":["45.67.48.0/24","45.67.49.0/24","45.67.50.0/24","45.67.51.0/24","154.44.132.0/24","154.44.133.0/24","154.44.134.0/24","154.44.135.0/24"],"rpki":{"not-found":8,"valid":0,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"45.67.48.0/24","state":"not-found"},{"prefix":"45.67.49.0/24","state":"not-found"},{"prefix":"45.67.50.0/24","state":"not-found"},{"prefix":"45.67.51.0/24","state":"not-found"},{"prefix":"154.44.132.0/24","state":"not-found"},{"prefix":"154.44.133.0/24","state":"not-found"},{"prefix":"154.44.134.0/24","state":"not-found"},{"prefix":"154.44.135.0/24","state":"not-found"}],"irr_missing":["45.67.51.0/24","154.44.135.0/24","154.44.132.0/24","45.67.50.0/24","45.67.49.0/24","154.44.133.0/24","45.67.48.0/24","154.44.134.0/24"],"irr_missing_count":8,"bogons":[],"upstreams":[{"asn":174,"power":254,"name":"Cogent Communications, Inc."}],"left":1,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS35203"},"summary":{"level":"warn","title":"No IPv6 prefixes announced.","params":[]}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}],"data":{"query":"AS35203","looked_up":"AS35203","kind":"autnum","source":"https://rdap.db.ripe.net/autnum/35203","terms":"https://www.ripe.net/manage-ips-and-asns/db/support/documentation/terms/","summary":{"Name":"ch-goldenphone","Handle":"AS35203","Range":"AS35203","Status":"active","Registered":"2019-03-27T15:35:36Z","Last changed":"2019-03-29T14:53:16Z","Abuse contact":"ercan.yucebas@goldenphone.ch"},"entities":[{"roles":["registrant"],"kind":"individual","name":"mnt-ch-goldenphone-1","email":null},{"roles":["registrant"],"kind":"org","name":"Goldenphone GmbH","email":null},{"roles":["registrant"],"kind":"individual","name":"RIPE-NCC-END-MNT","email":null},{"roles":["abuse"],"kind":"group","name":"Abuse-C Role","email":"ercan.yucebas@goldenphone.ch"}],"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"CH","country":"Switzerland","date":"2019-03-27","status":"allocated","range":"AS35203","opaque_id":"19292e9c-53fc-49f6-a631-edc632841d4d","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS35203"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":35203,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"35203"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it.","section":"routing"},{"tool":["rpki",{"prefix":"45.67.48.0/24","asn":"35203"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":8,"total":8,"list":"45.67.48.0/24, 45.67.49.0/24, 45.67.50.0/24, 45.67.51.0/24, 154.44.132.0/24 (+3)","asn":35203},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"45.67.48.0/24 AS35203 max-length /24\n45.67.49.0/24 AS35203 max-length /24\n45.67.50.0/24 AS35203 max-length /24\n45.67.51.0/24 AS35203 max-length /24\n154.44.132.0/24 AS35203 max-length /24\n154.44.133.0/24 AS35203 max-length /24\n154.44.134.0/24 AS35203 max-length /24\n154.44.135.0/24 AS35203 max-length /24","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":8,"total":8,"list":"45.67.51.0/24, 154.44.135.0/24, 154.44.132.0/24, 45.67.50.0/24, 45.67.49.0/24 (+3)","asn":35203},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 45.67.51.0/24\norigin: AS35203\n\nroute: 154.44.135.0/24\norigin: AS35203\n\nroute: 154.44.132.0/24\norigin: AS35203","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS35203"}