{"tool":"network-report","status":"warn","input":{"query":"AS38044"},"findings":[{"level":"warn","text":"AS38044 (GITN-NETWORK) announces 10 IPv4 and 2 IPv6 prefixes.","title":"AS38044 (GITN-NETWORK) announces 10 IPv4 and 2 IPv6 prefixes.","params":{"query":"AS38044","who":"AS38044 (GITN-NETWORK)","v4":10,"v6":2}},{"level":"warn","text":"10 of 12 announced prefixes have no ROA (RPKI not found): 43.252.232.0/22, 43.252.233.0/24, 43.252.235.0/24, 103.245.88.0/22, 175.28.12.0/22 (+5).","title":"10 of 12 announced prefixes have no ROA (RPKI not found): 43.252.232.0/22, 43.252.233.0/24, 43.252.235.0/24, 103.245.88.0/22, 175.28.12.0/22 (+5).","params":{"count":10,"total":12,"list":"43.252.232.0/22, 43.252.233.0/24, 43.252.235.0/24, 103.245.88.0/22, 175.28.12.0/22 (+5)","asn":38044},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS38044 and a max length equal to the prefix length:","record":"43.252.232.0/22 AS38044 max-length /22\n43.252.233.0/24 AS38044 max-length /24\n43.252.235.0/24 AS38044 max-length /24\n103.245.88.0/22 AS38044 max-length /22\n175.28.12.0/22 AS38044 max-length /22\n202.60.56.0/22 AS38044 max-length /22\n202.60.57.0/24 AS38044 max-length /24\n202.60.59.0/24 AS38044 max-length /24\n203.12.220.0/24 AS38044 max-length /24\n203.62.1.0/24 AS38044 max-length /24"},{"level":"warn","text":"4 of 12 announced prefixes have no IRR route object: 2400:7400::/33, 202.60.57.0/24, 202.60.59.0/24, 2400:7400:8000::/33.","title":"4 of 12 announced prefixes have no IRR route object: 2400:7400::/33, 202.60.57.0/24, 202.60.59.0/24, 2400:7400:8000::/33.","params":{"count":4,"total":12,"list":"2400:7400::/33, 202.60.57.0/24, 202.60.59.0/24, 2400:7400:8000::/33","asn":38044},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS38044 in your RIR’s IRR database (or RADB).","record":"route6: 2400:7400::/33\norigin: AS38044\n\nroute: 202.60.57.0/24\norigin: AS38044\n\nroute: 202.60.59.0/24\norigin: AS38044"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS38044","kind":"asn","special":null,"allocation":{"rir":"apnic","registry":"APNIC","cc":"MY","country":"Malaysia","date":"2006-05-31","status":"allocated","range":"AS38044","opaque_id":"A911A9C2","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS38044","who":"AS38044 (GITN-NETWORK)","v4":10,"v6":2}},"seconds":2.6000000000000001,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":38044,"v4":10,"v6":2}},{"tool":["rpki",{"prefix":"43.252.232.0/22","asn":"38044"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":12,"list":"43.252.232.0/22, 43.252.233.0/24, 43.252.235.0/24, 103.245.88.0/22, 175.28.12.0/22 (+5)","asn":38044},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"43.252.232.0/22 AS38044 max-length /22\n43.252.233.0/24 AS38044 max-length /24\n43.252.235.0/24 AS38044 max-length /24\n103.245.88.0/22 AS38044 max-length /22\n175.28.12.0/22 AS38044 max-length /22\n202.60.56.0/22 AS38044 max-length /22\n202.60.57.0/24 AS38044 max-length /24\n202.60.59.0/24 AS38044 max-length /24\n203.12.220.0/24 AS38044 max-length /24\n203.62.1.0/24 AS38044 max-length /24"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":2,"asn":38044,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":4,"total":12,"list":"2400:7400::/33, 202.60.57.0/24, 202.60.59.0/24, 2400:7400:8000::/33","asn":38044},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2400:7400::/33\norigin: AS38044\n\nroute: 202.60.57.0/24\norigin: AS38044\n\nroute: 202.60.59.0/24\norigin: AS38044"},{"level":"info","title":"One upstream or peer seen (AS:upstream): an outage there takes the whole network off the internet.","params":{"upstream":4788}}],"data":{"asn":38044,"holder":"GITN-NETWORK - GITN-NETWORK","announced":true,"v4":10,"v6":2,"prefixes":["43.252.232.0/22","43.252.233.0/24","43.252.235.0/24","103.245.88.0/22","175.28.12.0/22","202.60.56.0/22","202.60.57.0/24","202.60.59.0/24","203.12.220.0/24","203.62.1.0/24","2400:7400:8000::/33","2400:7400::/33"],"rpki":{"not-found":10,"unchecked":2,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"43.252.232.0/22","state":"not-found"},{"prefix":"43.252.233.0/24","state":"not-found"},{"prefix":"43.252.235.0/24","state":"not-found"},{"prefix":"103.245.88.0/22","state":"not-found"},{"prefix":"175.28.12.0/22","state":"not-found"},{"prefix":"202.60.56.0/22","state":"not-found"},{"prefix":"202.60.57.0/24","state":"not-found"},{"prefix":"202.60.59.0/24","state":"not-found"},{"prefix":"203.12.220.0/24","state":"not-found"},{"prefix":"203.62.1.0/24","state":"not-found"}],"irr_missing":["2400:7400::/33","202.60.57.0/24","202.60.59.0/24","2400:7400:8000::/33"],"irr_missing_count":4,"bogons":[],"upstreams":[{"asn":4788,"power":1304,"name":"Telekom Malaysia Berhad (TM)"}],"left":1,"right":1},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS38044"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":12,"list":"43.252.232.0/22, 43.252.233.0/24, 43.252.235.0/24, 103.245.88.0/22, 175.28.12.0/22 (+5)","asn":38044}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.apnic.net"}}],"data":{"query":"AS38044","looked_up":"AS38044","kind":"autnum","source":"https://rdap.apnic.net/autnum/38044","terms":"https://www.apnic.net/about-apnic/whois_search/about/termsofuse/","summary":{"Name":"GITN-NETWORK","Handle":"AS38044","Range":"AS38044","Country":"MY","Status":"active","Registered":"2008-09-04T06:40:39Z","Last changed":"2021-01-18T03:49:23Z","Abuse contact":"planning@gitn.com.my"},"entities":[{"roles":["administrative","technical"],"kind":"individual","name":"Mohd Hafizul Hasnan","email":"hafizul@gitn.com.my"},{"roles":["abuse"],"kind":"group","name":"IRT-GITN-MY","email":"planning@gitn.com.my"},{"roles":["registrant"],"kind":"org","name":"GITN-SCHOOLNET","email":"planning@gitn.com.my"},{"roles":["technical"],"kind":"individual","name":"Muhammad Romdzi Ahamed Rahimi","email":"romdzi@gitn.com.my"}],"allocation":{"rir":"apnic","registry":"APNIC","cc":"MY","country":"Malaysia","date":"2006-05-31","status":"allocated","range":"AS38044","opaque_id":"A911A9C2","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS38044"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.apnic.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":38044,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"38044"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"tool":["rpki",{"prefix":"43.252.232.0/22","asn":"38044"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":12,"list":"43.252.232.0/22, 43.252.233.0/24, 43.252.235.0/24, 103.245.88.0/22, 175.28.12.0/22 (+5)","asn":38044},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"43.252.232.0/22 AS38044 max-length /22\n43.252.233.0/24 AS38044 max-length /24\n43.252.235.0/24 AS38044 max-length /24\n103.245.88.0/22 AS38044 max-length /22\n175.28.12.0/22 AS38044 max-length /22\n202.60.56.0/22 AS38044 max-length /22\n202.60.57.0/24 AS38044 max-length /24\n202.60.59.0/24 AS38044 max-length /24\n203.12.220.0/24 AS38044 max-length /24\n203.62.1.0/24 AS38044 max-length /24","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":4,"total":12,"list":"2400:7400::/33, 202.60.57.0/24, 202.60.59.0/24, 2400:7400:8000::/33","asn":38044},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2400:7400::/33\norigin: AS38044\n\nroute: 202.60.57.0/24\norigin: AS38044\n\nroute: 202.60.59.0/24\norigin: AS38044","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS38044"}