{"tool":"network-report","status":"fail","input":{"query":"AS7861"},"findings":[{"level":"fail","text":"AS7861 (TELUS-7861) announces 36 IPv4 and 0 IPv6 prefixes.","title":"AS7861 (TELUS-7861) announces 36 IPv4 and 0 IPv6 prefixes.","params":{"query":"AS7861","who":"AS7861 (TELUS-7861)","v4":36,"v6":0}},{"level":"fail","text":"1 of 36 announced prefixes are RPKI invalid: 66.203.206.0/24.","title":"1 of 36 announced prefixes are RPKI invalid: 66.203.206.0/24.","params":{"count":1,"total":36,"list":"66.203.206.0/24"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"level":"warn","text":"No IPv6 prefixes announced.","title":"No IPv6 prefixes announced.","params":{},"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"level":"warn","text":"2 of 36 announced prefixes have no IRR route object: 66.203.206.0/24, 209.29.245.0/24.","title":"2 of 36 announced prefixes have no IRR route object: 66.203.206.0/24, 209.29.245.0/24.","params":{"count":2,"total":36,"list":"66.203.206.0/24, 209.29.245.0/24","asn":7861},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS7861 in your RIR’s IRR database (or RADB).","record":"route: 66.203.206.0/24\norigin: AS7861\n\nroute: 209.29.245.0/24\norigin: AS7861"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS7861","kind":"asn","special":null,"allocation":{"rir":"arin","registry":"ARIN","cc":"CA","country":"Canada","date":"2002-01-02","status":"assigned","range":"AS7861","opaque_id":"0e702695cc8d91d05fc28d5f77b59751","special":null},"verdict":{"level":"fail","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS7861","who":"AS7861 (TELUS-7861)","v4":36,"v6":0}},"seconds":2.2000000000000002,"sections":{"routing":{"status":"fail","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":7861,"v4":36,"v6":0}},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it."},{"tool":["rpki",{"prefix":"66.203.206.0/24","asn":"7861"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":1,"total":36,"list":"66.203.206.0/24"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes."},{"level":"info","title":":count of :total announced prefixes are RPKI valid.","params":{"count":35,"total":36}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":2,"total":36,"list":"66.203.206.0/24, 209.29.245.0/24","asn":7861},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 66.203.206.0/24\norigin: AS7861\n\nroute: 209.29.245.0/24\norigin: AS7861"},{"level":"info","title":"One upstream or peer seen (AS:upstream): an outage there takes the whole network off the internet.","params":{"upstream":852}}],"data":{"asn":7861,"holder":"TELUS-7861 - TELUS Communications Inc.","announced":true,"v4":36,"v6":0,"prefixes":["64.114.189.0/24","66.203.206.0/24","154.11.131.0/24","204.191.2.0/24","204.191.4.0/23","204.191.175.0/24","207.34.120.0/24","207.34.206.0/24","207.167.232.0/24","207.229.36.0/24","209.20.32.0/24","209.20.33.0/24","209.20.38.0/23","209.29.141.0/24","209.29.160.0/24","209.29.161.0/24","209.29.162.0/24","209.29.163.0/24","209.29.216.0/22","209.29.222.0/23","209.29.226.0/23","209.29.242.0/23","209.29.245.0/24","209.89.78.0/24","209.91.75.0/24","209.91.77.0/24","209.91.88.0/23","209.91.90.0/24","209.91.95.0/24","209.91.108.0/24","209.91.115.0/24","209.91.116.0/24","209.91.117.0/24","209.91.119.0/24","209.115.158.0/23","209.121.167.0/24"],"rpki":{"valid":35,"invalid":1,"not-found":0,"unchecked":0},"rpki_problems":[{"prefix":"66.203.206.0/24","state":"invalid"}],"irr_missing":["66.203.206.0/24","209.29.245.0/24"],"irr_missing_count":2,"bogons":[],"upstreams":[{"asn":852,"power":345,"name":"TELUS Communications"}],"left":1,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS7861"},"summary":{"level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":1,"total":36,"list":"66.203.206.0/24"}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}],"data":{"query":"AS7861","looked_up":"AS7861","kind":"autnum","source":"https://rdap.arin.net/registry/autnum/7861","terms":"https://www.arin.net/resources/registry/whois/tou/","summary":{"Name":"TELUS-7861","Handle":"AS7861","Range":"AS7861","Status":"active","Registered":"2002-01-02T00:00:00-05:00","Last changed":"2012-02-24T09:44:34-05:00","Abuse contact":"abuse@telus.com"},"entities":[{"roles":["registrant"],"kind":"org","name":"TELUS Communications Inc.","email":null},{"roles":["technical"],"kind":"group","name":"Hostmaster","email":"Hostmaster@telus.com"}],"allocation":{"rir":"arin","registry":"ARIN","cc":"CA","country":"Canada","date":"2002-01-02","status":"assigned","range":"AS7861","opaque_id":"0e702695cc8d91d05fc28d5f77b59751","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS7861"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.arin.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":7861,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"7861"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"tool":["rpki",{"prefix":"66.203.206.0/24","asn":"7861"}],"guide":"create-rpki-roas","level":"fail","title":":count of :total announced prefixes are RPKI invalid: :list.","params":{"count":1,"total":36,"list":"66.203.206.0/24"},"detail":"A ROA covers them but does not allow this origin or prefix length, so networks that filter (most large ones do) drop these routes.","fix":"Fix the ROAs (origin AS and max length) at your RIR, or stop announcing the routes.","section":"routing"},{"level":"warn","title":"No IPv6 prefixes announced.","params":[],"detail":"Networks without IPv6 force their users through NAT64 or leave them unreachable from IPv6-only networks.","fix":"Get an IPv6 allocation from your RIR (usually free with your IPv4 membership) and announce it.","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":2,"total":36,"list":"66.203.206.0/24, 209.29.245.0/24","asn":7861},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 66.203.206.0/24\norigin: AS7861\n\nroute: 209.29.245.0/24\norigin: AS7861","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS7861"}