{"tool":"network-report","status":"warn","input":{"query":"AS35434"},"findings":[{"level":"warn","text":"AS35434 (PIRXNET-AS) announces 19 IPv4 and 1 IPv6 prefixes.","title":"AS35434 (PIRXNET-AS) announces 19 IPv4 and 1 IPv6 prefixes.","params":{"query":"AS35434","who":"AS35434 (PIRXNET-AS)","v4":19,"v6":1}},{"level":"warn","text":"1 of 20 announced prefixes have no ROA (RPKI not found): 91.230.180.0/24.","title":"1 of 20 announced prefixes have no ROA (RPKI not found): 91.230.180.0/24.","params":{"count":1,"total":20,"list":"91.230.180.0/24","asn":35434},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS35434 and a max length equal to the prefix length:","record":"91.230.180.0/24 AS35434 max-length /24"},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."}],"data":{"query":"AS35434","kind":"asn","special":null,"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"PL","country":"Poland","date":"2005-08-08","status":"allocated","range":"AS35434","opaque_id":"5371cc26-cc14-4d86-b874-0b5bb0459728","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS35434","who":"AS35434 (PIRXNET-AS)","v4":19,"v6":1}},"seconds":0.5,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":35434,"v4":19,"v6":1}},{"tool":["rpki",{"prefix":"91.230.180.0/24","asn":"35434"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":1,"total":20,"list":"91.230.180.0/24","asn":35434},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"91.230.180.0/24 AS35434 max-length /24"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":19,"total":20}},{"level":"pass","title":"Every announced prefix has an IRR route object.","params":[]},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":7,"right":3}}],"data":{"asn":35434,"holder":"PIRXNET-AS PirxNet Grzegorz Bialas","announced":true,"v4":19,"v6":1,"prefixes":["83.230.0.0/19","83.230.32.0/20","83.230.48.0/22","91.222.212.0/22","91.230.180.0/24","93.95.88.0/21","185.69.20.0/22","188.123.192.0/19","193.47.247.0/24","195.82.160.0/21","195.82.168.0/22","195.82.172.0/23","195.82.176.0/21","195.82.188.0/22","195.242.128.0/23","212.106.138.0/23","212.106.160.0/21","213.227.72.0/22","217.73.176.0/20","2a02:2780::/32"],"rpki":{"valid":19,"not-found":1,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"91.230.180.0/24","state":"not-found"}],"irr_missing":[],"irr_missing_count":0,"bogons":[],"upstreams":[{"asn":15744,"power":477,"name":"SASK-COM"},{"asn":9141,"power":473,"name":"P4 PLAY Network"},{"asn":6939,"power":95,"name":"Hurricane Electric"},{"asn":24748,"power":5,"name":"THINX"},{"asn":14840,"power":2,"name":"BR.Digital"},{"asn":12735,"power":1,"name":"TurkNet Iletisim Hizmetleri A.S"},{"asn":22356,"power":1,"name":"Durand do Brasil"}],"left":7,"right":3},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS35434"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":1,"total":20,"list":"91.230.180.0/24","asn":35434}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}],"data":{"query":"AS35434","looked_up":"AS35434","kind":"autnum","source":"https://rdap.db.ripe.net/autnum/35434","terms":"https://www.ripe.net/manage-ips-and-asns/db/support/documentation/terms/","summary":{"Name":"PIRXNET-AS","Handle":"AS35434","Range":"AS35434","Status":"active","Registered":"2005-08-08T09:30:51Z","Last changed":"2019-12-04T11:19:03Z","Abuse contact":"abuse@pirxnet.pl"},"entities":[{"roles":["registrant"],"kind":"org","name":"PirxNet Grzegorz Bialas","email":null},{"roles":["registrant"],"kind":"individual","name":"PIRXNET-MNT","email":null},{"roles":["registrant"],"kind":"individual","name":"RIPE-NCC-END-MNT","email":null},{"roles":["abuse"],"kind":"group","name":"PIRXNET Hostmaster-Team","email":"abuse@pirxnet.pl"}],"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"PL","country":"Poland","date":"2005-08-08","status":"allocated","range":"AS35434","opaque_id":"5371cc26-cc14-4d86-b874-0b5bb0459728","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS35434"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":35434,"name":"PirxNet Grzegorz Bialas"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"Present at :ix internet exchanges with :ports ports (:capacity in total).","params":{"ix":3,"ports":3,"capacity":"30G"}},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2022-07-27"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":35434,"net":{"id":11514,"name":"PirxNet Grzegorz Bialas","aka":"PirxNet","website":"http://www.pirxnet.pl","looking_glass":"https://lg.pirxnet.pl","route_server":"","irr_as_set":"","info_type":"Cable/DSL/ISP","info_prefixes4":70,"info_prefixes6":5,"info_traffic":"10-20Gbps","info_ratio":"Mostly Inbound","info_scope":"Regional","info_unicast":true,"info_ipv6":true,"info_never_via_route_servers":false,"ix_count":3,"fac_count":2,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2022-07-27T05:34:10Z"},"ix_count":3,"capacity":30000,"ix":[],"ix_total":3,"fac":[],"fac_total":2,"poc":[{"role":"Abuse","email":"abuse@pirxnet.pl"},{"role":"NOC","email":"noc@pirxnet.pl"},{"role":"Policy","email":"admin@pirxnet.pl"},{"role":"Technical","email":"admin@pirxnet.pl"}],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"35434"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"91.230.180.0/24","asn":"35434"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":1,"total":20,"list":"91.230.180.0/24","asn":35434},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"91.230.180.0/24 AS35434 max-length /24","section":"routing"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS35434"}