{"tool":"network-report","status":"fail","input":{"query":"AS36969"},"findings":[{"level":"fail","text":"AS36969 (Malawi Telecommunications Limited) announces 32 IPv4 and 1 IPv6 prefixes.","title":"AS36969 (Malawi Telecommunications Limited) announces 32 IPv4 and 1 IPv6 prefixes.","params":{"query":"AS36969","who":"AS36969 (Malawi Telecommunications Limited)","v4":32,"v6":1}},{"level":"fail","text":"8 of 33 announced prefixes are RPKI invalid: 41.87.8.0/24, 41.87.9.0/24, 41.87.29.0/24, 41.87.30.0/24, 41.87.31.0/24 (+3).","title":"8 of 33 announced prefixes are RPKI invalid: 41.87.8.0/24, 41.87.9.0/24, 41.87.29.0/24, 41.87.30.0/24, 41.87.31.0/24 (+3).","params":{"count":8,"total":33,"list":"41.87.8.0/24, 41.87.9.0/24, 41.87.29.0/24, 41.87.30.0/24, 41.87.31.0/24 (+3)"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"level":"warn","text":"5 of 33 announced prefixes have no ROA (RPKI not found): 41.87.0.0/19, 41.221.96.0/20, 196.45.188.0/24, 196.45.190.0/24, 2c0e:7800::/24.","title":"5 of 33 announced prefixes have no ROA (RPKI not found): 41.87.0.0/19, 41.221.96.0/20, 196.45.188.0/24, 196.45.190.0/24, 2c0e:7800::/24.","params":{"count":5,"total":33,"list":"41.87.0.0/19, 41.221.96.0/20, 196.45.188.0/24, 196.45.190.0/24, 2c0e:7800::/24","asn":36969},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS36969 and a max length equal to the prefix length:","record":"41.87.0.0/19 AS36969 max-length /19\n41.221.96.0/20 AS36969 max-length /20\n196.45.188.0/24 AS36969 max-length /24\n196.45.190.0/24 AS36969 max-length /24\n2c0e:7800::/24 AS36969 max-length /24"},{"level":"warn","text":"3 of 33 announced prefixes have no IRR route object: 41.87.8.0/24, 41.87.9.0/24, 41.87.27.0/24.","title":"3 of 33 announced prefixes have no IRR route object: 41.87.8.0/24, 41.87.9.0/24, 41.87.27.0/24.","params":{"count":3,"total":33,"list":"41.87.8.0/24, 41.87.9.0/24, 41.87.27.0/24","asn":36969},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS36969 in your RIR’s IRR database (or RADB).","record":"route: 41.87.8.0/24\norigin: AS36969\n\nroute: 41.87.9.0/24\norigin: AS36969\n\nroute: 41.87.27.0/24\norigin: AS36969"},{"level":"warn","text":"No abuse contact is published for AS36969.","title":"No abuse contact is published for AS36969.","params":{"what":"AS36969"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC."}],"data":{"query":"AS36969","kind":"asn","special":null,"allocation":{"rir":"afrinic","registry":"AFRINIC","cc":"MW","country":"Malawi","date":"2007-08-10","status":"allocated","range":"AS36969","opaque_id":"F36DE46F","special":null},"verdict":{"level":"fail","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS36969","who":"AS36969 (Malawi Telecommunications Limited)","v4":32,"v6":1}},"seconds":0.80000000000000004,"sections":{"routing":{"status":"fail","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":36969,"v4":32,"v6":1}},{"tool":["rpki",{"prefix":"41.87.8.0/24","asn":"36969"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":8,"total":33,"list":"41.87.8.0/24, 41.87.9.0/24, 41.87.29.0/24, 41.87.30.0/24, 41.87.31.0/24 (+3)"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"tool":["rpki",{"prefix":"41.87.0.0/19","asn":"36969"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":5,"total":33,"list":"41.87.0.0/19, 41.221.96.0/20, 196.45.188.0/24, 196.45.190.0/24, 2c0e:7800::/24","asn":36969},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"41.87.0.0/19 AS36969 max-length /19\n41.221.96.0/20 AS36969 max-length /20\n196.45.188.0/24 AS36969 max-length /24\n196.45.190.0/24 AS36969 max-length /24\n2c0e:7800::/24 AS36969 max-length /24"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":20,"total":33}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":3,"total":33,"list":"41.87.8.0/24, 41.87.9.0/24, 41.87.27.0/24","asn":36969},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 41.87.8.0/24\norigin: AS36969\n\nroute: 41.87.9.0/24\norigin: AS36969\n\nroute: 41.87.27.0/24\norigin: AS36969"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":2,"right":0}}],"data":{"asn":36969,"holder":"Malawi Telecommunications Limited - Malawi Telecommunications Limited","announced":true,"v4":32,"v6":1,"prefixes":["41.87.0.0/19","41.87.2.0/23","41.87.3.0/24","41.87.4.0/24","41.87.5.0/24","41.87.6.0/24","41.87.7.0/24","41.87.8.0/24","41.87.9.0/24","41.87.16.0/23","41.87.16.0/24","41.87.17.0/24","41.87.24.0/23","41.87.27.0/24","41.87.28.0/22","41.87.28.0/24","41.87.29.0/24","41.87.30.0/24","41.87.31.0/24","41.221.96.0/20","41.221.96.0/24","41.221.98.0/24","41.221.99.0/24","41.221.100.0/23","41.221.100.0/24","41.221.102.0/24","41.221.104.0/24","41.221.106.0/23","41.221.106.0/24","41.221.107.0/24","196.45.188.0/24","196.45.190.0/24","2c0e:7800::/24"],"rpki":{"valid":20,"invalid":8,"not-found":5,"unchecked":0},"rpki_problems":[{"prefix":"41.87.8.0/24","state":"invalid"},{"prefix":"41.87.9.0/24","state":"invalid"},{"prefix":"41.87.29.0/24","state":"invalid"},{"prefix":"41.87.30.0/24","state":"invalid"},{"prefix":"41.87.31.0/24","state":"invalid"},{"prefix":"41.221.96.0/24","state":"invalid"},{"prefix":"41.221.100.0/23","state":"invalid"},{"prefix":"41.221.104.0/24","state":"invalid"},{"prefix":"41.87.0.0/19","state":"not-found"},{"prefix":"41.221.96.0/20","state":"not-found"},{"prefix":"196.45.188.0/24","state":"not-found"},{"prefix":"196.45.190.0/24","state":"not-found"},{"prefix":"2c0e:7800::/24","state":"not-found"}],"irr_missing":["41.87.8.0/24","41.87.9.0/24","41.87.27.0/24"],"irr_missing_count":3,"bogons":[],"upstreams":[{"asn":37440,"power":511,"name":"Airtel Malawi"},{"asn":30844,"power":451,"name":"Liquid Intelligent Technologies"}],"left":2,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS36969"},"summary":{"level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":8,"total":33,"list":"41.87.8.0/24, 41.87.9.0/24, 41.87.29.0/24, 41.87.30.0/24, 41.87.31.0/24 (+3)"}}},"registration":{"status":"warn","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.afrinic.net"}},{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS36969"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC."}],"data":{"query":"AS36969","looked_up":"AS36969","kind":"autnum","source":"https://rdap.afrinic.net/rdap/autnum/36969","terms":"https://afrinic.net/whois/terms","summary":{"Name":"ORG-MTL5-AFRINIC","Handle":"AS36969","Range":"AS36969","Status":"active","Registered":"2007-08-10T13:26:00Z","Last changed":"2025-01-21T06:33:00Z"},"entities":[{"roles":["administrative","technical"],"kind":"individual","name":"Thokozani Peter Kangunga","email":"thokozani.kangunga@mtl.mw"},{"roles":["administrative","technical"],"kind":"individual","name":"Joshua Ngalande","email":"Joshua.Ngalande@MTL.mw"},{"roles":["registrant"],"kind":"org","name":"Malawi Telecommunications Limited","email":"kondwani.masiye@mtl.mw"},{"roles":["technical"],"kind":"individual","name":"Stonard Kankhande","email":"stonard.kankhande@mtl.mw"},{"roles":["technical"],"kind":"individual","name":"Dafren Muhamba","email":"dafren.muhamba@mtl.mw"}],"allocation":{"rir":"afrinic","registry":"AFRINIC","cc":"MW","country":"Malawi","date":"2007-08-10","status":"allocated","range":"AS36969","opaque_id":"F36DE46F","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS36969"},"summary":{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS36969"}}},"peering":{"status":"pass","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":36969,"name":"Malawi Telecommunications"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"Present at :ix internet exchanges with :ports ports (:capacity in total).","params":{"ix":1,"ports":1,"capacity":"1G"}},{"level":"info","title":"The record was last updated :date.","params":{"date":"2022-07-27"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":36969,"net":{"id":20683,"name":"Malawi Telecommunications","aka":"MTL","website":"http://www.mtl.mw/","looking_glass":"","route_server":"","irr_as_set":"AS36969","info_type":"NSP","info_prefixes4":2,"info_prefixes6":1,"info_traffic":"1-5Gbps","info_ratio":"Heavy Inbound","info_scope":"Africa","info_unicast":true,"info_ipv6":false,"info_never_via_route_servers":false,"ix_count":1,"fac_count":0,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2022-07-27T05:34:13Z"},"ix_count":1,"capacity":1000,"ix":[],"ix_total":1,"fac":[],"fac_total":0,"poc":[{"role":"Policy","email":"thokozani.kangunga@mtl.mw"},{"role":"Technical","email":"joshua.ngalande@mtl.mw"},{"role":"NOC","email":"dafren.muhamba@mtl.mw"}],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"36969"},"summary":{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":36969,"name":"Malawi Telecommunications"}}}},"fixes":[{"tool":["rpki",{"prefix":"41.87.8.0/24","asn":"36969"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":8,"total":33,"list":"41.87.8.0/24, 41.87.9.0/24, 41.87.29.0/24, 41.87.30.0/24, 41.87.31.0/24 (+3)"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes.","section":"routing"},{"tool":["rpki",{"prefix":"41.87.0.0/19","asn":"36969"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":5,"total":33,"list":"41.87.0.0/19, 41.221.96.0/20, 196.45.188.0/24, 196.45.190.0/24, 2c0e:7800::/24","asn":36969},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"41.87.0.0/19 AS36969 max-length /19\n41.221.96.0/20 AS36969 max-length /20\n196.45.188.0/24 AS36969 max-length /24\n196.45.190.0/24 AS36969 max-length /24\n2c0e:7800::/24 AS36969 max-length /24","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":3,"total":33,"list":"41.87.8.0/24, 41.87.9.0/24, 41.87.27.0/24","asn":36969},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 41.87.8.0/24\norigin: AS36969\n\nroute: 41.87.9.0/24\norigin: AS36969\n\nroute: 41.87.27.0/24\norigin: AS36969","section":"routing"},{"level":"warn","title":"No abuse contact is published for :what.","params":{"what":"AS36969"},"detail":"Other networks send reports of spam, attacks and hacked machines to the abuse contact. Without one, reports go nowhere and blocklists may list the whole range.","fix":"Add an abuse contact to the registration: abuse-c in the RIPE database, an Abuse POC at ARIN, an abuse mailbox (IRT) at APNIC, AFRINIC or LACNIC.","section":"registration"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS36969"}