{"tool":"network-report","status":"warn","input":{"query":"AS51089"},"findings":[{"level":"warn","text":"AS51089 (SNAPSTACK-AS) announces 5 IPv4 and 4 IPv6 prefixes.","title":"AS51089 (SNAPSTACK-AS) announces 5 IPv4 and 4 IPv6 prefixes.","params":{"query":"AS51089","who":"AS51089 (SNAPSTACK-AS)","v4":5,"v6":4}},{"level":"warn","text":"1 of 9 announced prefixes have no ROA (RPKI not found): 44.32.68.0/24.","title":"1 of 9 announced prefixes have no ROA (RPKI not found): 44.32.68.0/24.","params":{"count":1,"total":9,"list":"44.32.68.0/24","asn":51089},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS51089 and a max length equal to the prefix length:","record":"44.32.68.0/24 AS51089 max-length /24"},{"level":"warn","text":"3 of 9 announced prefixes have no IRR route object: 2a06:9f81:5702::/48, 2a06:9f81:5703::/48, 2a06:9f81:5704::/48.","title":"3 of 9 announced prefixes have no IRR route object: 2a06:9f81:5702::/48, 2a06:9f81:5703::/48, 2a06:9f81:5704::/48.","params":{"count":3,"total":9,"list":"2a06:9f81:5702::/48, 2a06:9f81:5703::/48, 2a06:9f81:5704::/48","asn":51089},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS51089 in your RIR’s IRR database (or RADB).","record":"route6: 2a06:9f81:5702::/48\norigin: AS51089\n\nroute6: 2a06:9f81:5703::/48\norigin: AS51089\n\nroute6: 2a06:9f81:5704::/48\norigin: AS51089"},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."}],"data":{"query":"AS51089","kind":"asn","special":null,"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"HK","country":"Hong Kong SAR China","date":"2020-04-30","status":"allocated","range":"AS51089","opaque_id":"0badd1b0-f39e-4280-82f5-4c7009b6677f","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS51089","who":"AS51089 (SNAPSTACK-AS)","v4":5,"v6":4}},"seconds":0,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":51089,"v4":5,"v6":4}},{"tool":["rpki",{"prefix":"44.32.68.0/24","asn":"51089"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":1,"total":9,"list":"44.32.68.0/24","asn":51089},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"44.32.68.0/24 AS51089 max-length /24"},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":8,"total":9}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":3,"total":9,"list":"2a06:9f81:5702::/48, 2a06:9f81:5703::/48, 2a06:9f81:5704::/48","asn":51089},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2a06:9f81:5702::/48\norigin: AS51089\n\nroute6: 2a06:9f81:5703::/48\norigin: AS51089\n\nroute6: 2a06:9f81:5704::/48\norigin: AS51089"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":2,"right":0}}],"data":{"asn":51089,"holder":"SNAPSTACK-AS SnapStack Limited","announced":true,"v4":5,"v6":4,"prefixes":["44.32.68.0/24","65.75.197.0/24","185.218.6.0/23","185.218.6.0/24","185.218.7.0/24","2a06:9f81:5700::/40","2a06:9f81:5702::/48","2a06:9f81:5703::/48","2a06:9f81:5704::/48"],"rpki":{"valid":8,"not-found":1,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"44.32.68.0/24","state":"not-found"}],"irr_missing":["2a06:9f81:5702::/48","2a06:9f81:5703::/48","2a06:9f81:5704::/48"],"irr_missing_count":3,"bogons":[],"upstreams":[{"asn":41378,"power":952,"name":"Kirino"},{"asn":137409,"power":332,"name":"Global Secure Layer"}],"left":2,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS51089"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":1,"total":9,"list":"44.32.68.0/24","asn":51089}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}],"data":{"query":"AS51089","looked_up":"AS51089","kind":"autnum","source":"https://rdap.db.ripe.net/autnum/51089","terms":"https://www.ripe.net/manage-ips-and-asns/db/support/documentation/terms/","summary":{"Name":"SNAPSTACK-AS","Handle":"AS51089","Range":"AS51089","Status":"active","Registered":"2020-04-30T19:11:25Z","Last changed":"2026-10-15T09:00:25Z","Abuse contact":"abuse@snapstack.hk"},"entities":[{"roles":["registrant"],"kind":"individual","name":"MNT-SALTYFISH","email":null},{"roles":["registrant"],"kind":"org","name":"SnapStack Limited","email":null},{"roles":["registrant"],"kind":"individual","name":"RIPE-NCC-END-MNT","email":null},{"roles":["abuse"],"kind":"group","name":"Abuse-C Role","email":"abuse@snapstack.hk"}],"allocation":{"rir":"ripencc","registry":"RIPE NCC","cc":"HK","country":"Hong Kong SAR China","date":"2020-04-30","status":"allocated","range":"AS51089","opaque_id":"0badd1b0-f39e-4280-82f5-4c7009b6677f","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS51089"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.db.ripe.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":51089,"name":"SnapStack-HK"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"No"},"detail":"Does not peer."},{"level":"info","title":"No internet exchange ports are listed.","params":[]},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2023-12-22"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":51089,"net":{"id":23130,"name":"SnapStack-HK","aka":"","website":"https://snapstack.hk/","looking_glass":"","route_server":"","irr_as_set":"","info_type":"NSP","info_prefixes4":5,"info_prefixes6":20,"info_traffic":"10-20Gbps","info_ratio":"Balanced","info_scope":"Global","info_unicast":true,"info_ipv6":true,"info_never_via_route_servers":false,"ix_count":0,"fac_count":7,"policy_url":"","policy_general":"No","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2023-12-22T16:11:09Z"},"ix_count":0,"capacity":0,"ix":[],"ix_total":0,"fac":[],"fac_total":7,"poc":[{"role":"Abuse","email":"abuse@snapstack.hk"},{"role":"NOC","email":"noc@snapstack.hk"},{"role":"Sales","email":"sales@snapstack.hk"}],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"51089"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"44.32.68.0/24","asn":"51089"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":1,"total":9,"list":"44.32.68.0/24","asn":51089},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"44.32.68.0/24 AS51089 max-length /24","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":3,"total":9,"list":"2a06:9f81:5702::/48, 2a06:9f81:5703::/48, 2a06:9f81:5704::/48","asn":51089},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2a06:9f81:5702::/48\norigin: AS51089\n\nroute6: 2a06:9f81:5703::/48\norigin: AS51089\n\nroute6: 2a06:9f81:5704::/48\norigin: AS51089","section":"routing"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS51089"}