{"tool":"network-report","status":"warn","input":{"query":"AS47442"},"findings":[{"level":"warn","text":"AS47442 (MADA-AS) announces 39 IPv4 and 0 IPv6 prefixes.","title":"AS47442 (MADA-AS) announces 39 IPv4 and 0 IPv6 prefixes.","params":{"query":"AS47442","who":"AS47442 (MADA-AS)","v4":39,"v6":0}},{"level":"warn","text":"No IPv6 prefixes announced.","title":"No IPv6 prefixes announced.","params":{},"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"level":"warn","text":"10 of 39 announced prefixes have no ROA (RPKI not found): 185.36.176.0/22, 185.36.176.0/24, 185.36.177.0/24, 185.36.178.0/24, 185.36.179.0/24 (+5).","title":"10 of 39 announced prefixes have no ROA (RPKI not found): 185.36.176.0/22, 185.36.176.0/24, 185.36.177.0/24, 185.36.178.0/24, 185.36.179.0/24 (+5).","params":{"count":10,"total":39,"list":"185.36.176.0/22, 185.36.176.0/24, 185.36.177.0/24, 185.36.178.0/24, 185.36.179.0/24 (+5)","asn":47442},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS47442 and a max length equal to the prefix length:","record":"185.36.176.0/22 AS47442 max-length /22\n185.36.176.0/24 AS47442 max-length /24\n185.36.177.0/24 AS47442 max-length /24\n185.36.178.0/24 AS47442 max-length /24\n185.36.179.0/24 AS47442 max-length /24\n213.34.192.0/19 AS47442 max-length /19\n213.34.192.0/24 AS47442 max-length /24\n213.34.193.0/24 AS47442 max-length /24\n213.34.194.0/24 AS47442 max-length /24\n213.34.195.0/24 AS47442 max-length /24"},{"level":"warn","text":"No public NOC, policy or technical contact.","title":"No public NOC, policy or technical contact.","params":{},"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."}],"data":{"query":"AS47442","kind":"asn","special":null,"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"KW","country":"Kuwait","date":"2008-06-20","status":"allocated","range":"AS47442","opaque_id":"87368dae-cd18-44fd-8ec3-124a174c0893","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS47442","who":"AS47442 (MADA-AS)","v4":39,"v6":0}},"seconds":3,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":47442,"v4":39,"v6":0}},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"tool":["rpki",{"prefix":"185.36.176.0/22","asn":"47442"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":39,"list":"185.36.176.0/22, 185.36.176.0/24, 185.36.177.0/24, 185.36.178.0/24, 185.36.179.0/24 (+5)","asn":47442},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"185.36.176.0/22 AS47442 max-length /22\n185.36.176.0/24 AS47442 max-length /24\n185.36.177.0/24 AS47442 max-length /24\n185.36.178.0/24 AS47442 max-length /24\n185.36.179.0/24 AS47442 max-length /24\n213.34.192.0/19 AS47442 max-length /19\n213.34.192.0/24 AS47442 max-length /24\n213.34.193.0/24 AS47442 max-length /24\n213.34.194.0/24 AS47442 max-length /24\n213.34.195.0/24 AS47442 max-length /24"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":29,"asn":47442,"n":10}},{"level":"pass","title":"Every announced prefix has an IRR route object.","params":[]},{"level":"info","title":"One upstream or peer seen (AS:upstream): an outage there takes the whole network off the internet.","params":{"upstream":42961}}],"data":{"asn":47442,"holder":"MADA-AS Mada Communications CJSC","announced":true,"v4":39,"v6":0,"prefixes":["185.36.176.0/22","185.36.176.0/24","185.36.177.0/24","185.36.178.0/24","185.36.179.0/24","213.34.192.0/19","213.34.192.0/24","213.34.193.0/24","213.34.194.0/24","213.34.195.0/24","213.34.196.0/24","213.34.197.0/24","213.34.198.0/24","213.34.199.0/24","213.34.200.0/24","213.34.201.0/24","213.34.202.0/24","213.34.203.0/24","213.34.204.0/24","213.34.205.0/24","213.34.206.0/24","213.34.207.0/24","213.34.208.0/24","213.34.209.0/24","213.34.210.0/24","213.34.211.0/24","213.34.212.0/24","213.34.213.0/24","213.34.214.0/23","213.34.214.0/24","213.34.215.0/24","213.34.216.0/24","213.34.217.0/24","213.34.218.0/24","213.34.219.0/24","213.34.220.0/24","213.34.221.0/24","213.34.222.0/24","213.34.223.0/24"],"rpki":{"not-found":10,"unchecked":29,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"185.36.176.0/22","state":"not-found"},{"prefix":"185.36.176.0/24","state":"not-found"},{"prefix":"185.36.177.0/24","state":"not-found"},{"prefix":"185.36.178.0/24","state":"not-found"},{"prefix":"185.36.179.0/24","state":"not-found"},{"prefix":"213.34.192.0/19","state":"not-found"},{"prefix":"213.34.192.0/24","state":"not-found"},{"prefix":"213.34.193.0/24","state":"not-found"},{"prefix":"213.34.194.0/24","state":"not-found"},{"prefix":"213.34.195.0/24","state":"not-found"}],"irr_missing":[],"irr_missing_count":0,"bogons":[],"upstreams":[{"asn":42961,"power":537,"name":"Zain KW"}],"left":1,"right":1},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS47442"},"summary":{"level":"warn","title":"No IPv6 prefixes announced.","params":[]}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}],"data":{"query":"AS47442","looked_up":"AS47442","kind":"autnum","source":"https://rdap.db.ripe.net/autnum/47442","terms":"https://www.ripe.net/manage-ips-and-asns/db/support/documentation/terms/","summary":{"Name":"MADA-AS","Handle":"AS47442","Range":"AS47442","Status":"active","Registered":"2008-06-20T08:52:31Z","Last changed":"2018-09-04T10:33:43Z","Abuse contact":"isp@mada.com.kw"},"entities":[{"roles":["registrant"],"kind":"individual","name":"atefyasin-mnt","email":null},{"roles":["registrant"],"kind":"org","name":"Mada Communications CJSC","email":null},{"roles":["registrant"],"kind":"individual","name":"RIPE-NCC-END-MNT","email":null},{"roles":["abuse"],"kind":"group","name":"Abuse-C Role","email":"isp@mada.com.kw"}],"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"KW","country":"Kuwait","date":"2008-06-20","status":"allocated","range":"AS47442","opaque_id":"87368dae-cd18-44fd-8ec3-124a174c0893","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS47442"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":47442,"name":"mada Communications"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Selective"},"detail":"Peers when the traffic exchange makes sense to them; contact them with your traffic figures."},{"level":"info","title":"Present at :ix internet exchanges with :ports ports (:capacity in total).","params":{"ix":1,"ports":1,"capacity":"1G"}},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2022-07-27"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":47442,"net":{"id":21915,"name":"mada Communications","aka":"mada Communications Company","website":"http://www.mada.com.kw","looking_glass":"","route_server":"","irr_as_set":"RIPE::AS-47442","info_type":"Cable/DSL/ISP","info_prefixes4":32,"info_prefixes6":0,"info_traffic":"50-100Gbps","info_ratio":"Mostly Inbound","info_scope":"Middle East","info_unicast":true,"info_ipv6":false,"info_never_via_route_servers":false,"ix_count":1,"fac_count":0,"policy_url":"","policy_general":"Selective","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2022-07-27T05:34:34Z"},"ix_count":1,"capacity":1000,"ix":[],"ix_total":1,"fac":[],"fac_total":0,"poc":[],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"47442"},"summary":{"level":"warn","title":"No public NOC, policy or technical contact.","params":[]}}},"fixes":[{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it.","section":"routing"},{"tool":["rpki",{"prefix":"185.36.176.0/22","asn":"47442"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":39,"list":"185.36.176.0/22, 185.36.176.0/24, 185.36.177.0/24, 185.36.178.0/24, 185.36.179.0/24 (+5)","asn":47442},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"185.36.176.0/22 AS47442 max-length /22\n185.36.176.0/24 AS47442 max-length /24\n185.36.177.0/24 AS47442 max-length /24\n185.36.178.0/24 AS47442 max-length /24\n185.36.179.0/24 AS47442 max-length /24\n213.34.192.0/19 AS47442 max-length /19\n213.34.192.0/24 AS47442 max-length /24\n213.34.193.0/24 AS47442 max-length /24\n213.34.194.0/24 AS47442 max-length /24\n213.34.195.0/24 AS47442 max-length /24","section":"routing"},{"level":"warn","title":"No public NOC, policy or technical contact.","params":[],"detail":"Other networks use these addresses to set up peering and to reach you during an incident.","fix":"Add a role contact (for example noc@ or peering@ an address you monitor) with visibility Public.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS47442"}