{"tool":"network-report","status":"warn","input":{"query":"AS36917"},"findings":[{"level":"warn","text":"AS36917 (Angola Comunicacoes & Systems LDA) announces 3 IPv4 and 0 IPv6 prefixes.","title":"AS36917 (Angola Comunicacoes & Systems LDA) announces 3 IPv4 and 0 IPv6 prefixes.","params":{"query":"AS36917","who":"AS36917 (Angola Comunicacoes & Systems LDA)","v4":3,"v6":0}},{"level":"warn","text":"No IPv6 prefixes announced.","title":"No IPv6 prefixes announced.","params":{},"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"level":"warn","text":"3 of 3 announced prefixes have no ROA (RPKI not found): 41.223.42.0/24, 41.223.101.0/24, 41.223.102.0/24.","title":"3 of 3 announced prefixes have no ROA (RPKI not found): 41.223.42.0/24, 41.223.101.0/24, 41.223.102.0/24.","params":{"count":3,"total":3,"list":"41.223.42.0/24, 41.223.101.0/24, 41.223.102.0/24","asn":36917},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS36917 and a max length equal to the prefix length:","record":"41.223.42.0/24 AS36917 max-length /24\n41.223.101.0/24 AS36917 max-length /24\n41.223.102.0/24 AS36917 max-length /24"},{"level":"warn","text":"No abuse contact is published for AS36917.","title":"No abuse contact is published for AS36917.","params":{"what":"AS36917"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC."},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","text":"No public NOC, policy or technical contact.","title":"No public NOC, policy or technical contact.","params":{},"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"query":"AS36917","kind":"asn","special":null,"allocation":{"rir":"afrinic","registry":"AFRINIC","cc":"AO","country":"Angola","date":"2006-10-12","status":"allocated","range":"AS36917","opaque_id":"F36AAA2F","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS36917","who":"AS36917 (Angola Comunicacoes & Systems LDA)","v4":3,"v6":0}},"seconds":2.7000000000000002,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":36917,"v4":3,"v6":0}},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"tool":["rpki",{"prefix":"41.223.42.0/24","asn":"36917"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":3,"total":3,"list":"41.223.42.0/24, 41.223.101.0/24, 41.223.102.0/24","asn":36917},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"41.223.42.0/24 AS36917 max-length /24\n41.223.101.0/24 AS36917 max-length /24\n41.223.102.0/24 AS36917 max-length /24"},{"level":"pass","title":"Every announced prefix has an IRR route object.","params":[]},{"level":"info","title":"One upstream or peer seen (AS:upstream): an outage there takes the whole network off the internet.","params":{"upstream":17400}}],"data":{"asn":36917,"holder":"Angola Comunicacoes & Systems LDA - Angola Comunicacoes & Systems LDA","announced":true,"v4":3,"v6":0,"prefixes":["41.223.42.0/24","41.223.101.0/24","41.223.102.0/24"],"rpki":{"not-found":3,"valid":0,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"41.223.42.0/24","state":"not-found"},{"prefix":"41.223.101.0/24","state":"not-found"},{"prefix":"41.223.102.0/24","state":"not-found"}],"irr_missing":[],"irr_missing_count":0,"bogons":[],"upstreams":[{"asn":17400,"power":266,"name":"MSTELCOM, SARL"}],"left":1,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS36917"},"summary":{"level":"warn","title":"No IPv6 prefixes announced.","params":[]}},"registration":{"status":"warn","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.afrinic.net"}},{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS36917"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC."}],"data":{"query":"AS36917","looked_up":"AS36917","kind":"autnum","source":"https://rdap.afrinic.net/rdap/autnum/36917","terms":"https://afrinic.net/whois/terms","summary":{"Name":"ORG-ACSL1-AFRINIC","Handle":"AS36917","Range":"AS36917","Status":"active","Registered":"2006-10-12T10:47:00Z","Last changed":"2021-10-19T05:57:00Z"},"entities":[{"roles":["administrative","technical"],"kind":"individual","name":"Rafael Lima","email":"joao.amaral@sonangol.co.ao"},{"roles":["registrant"],"kind":"org","name":"Angola Comunicacoes & Systems LDA","email":"rafael.lima@acs.ao"}],"allocation":{"rir":"afrinic","registry":"AFRINIC","cc":"AO","country":"Angola","date":"2006-10-12","status":"allocated","range":"AS36917","opaque_id":"F36AAA2F","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS36917"},"summary":{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS36917"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":36917,"name":"Angola Comunicacoes & Systems LDA"}},{"level":"info","title":"No internet exchange ports are listed.","params":[]},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2022-07-27"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":36917,"net":{"id":9925,"name":"Angola Comunicacoes & Systems LDA","aka":"","website":"","looking_glass":"","route_server":"","irr_as_set":"","info_type":"","info_prefixes4":null,"info_prefixes6":null,"info_traffic":"","info_ratio":"Not Disclosed","info_scope":"Not Disclosed","info_unicast":false,"info_ipv6":false,"info_never_via_route_servers":false,"ix_count":0,"fac_count":0,"policy_url":"","policy_general":"","policy_locations":"","policy_ratio":false,"policy_contracts":"","updated":"2022-07-27T05:34:12Z"},"ix_count":0,"capacity":0,"ix":[],"ix_total":0,"fac":[],"fac_total":0,"poc":[],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"36917"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it.","section":"routing"},{"tool":["rpki",{"prefix":"41.223.42.0/24","asn":"36917"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":3,"total":3,"list":"41.223.42.0/24, 41.223.101.0/24, 41.223.102.0/24","asn":36917},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"41.223.42.0/24 AS36917 max-length /24\n41.223.101.0/24 AS36917 max-length /24\n41.223.102.0/24 AS36917 max-length /24","section":"routing"},{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS36917"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC.","section":"registration"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS36917"}