December 2020 - routing-wg - mailman.ripe.net

New on RIPE Labs: Internet Clouds are (also) Unpredictable
by Mirjam Kuehne 01 Mar '22

01 Mar '22

Dear colleagues, How does the largest cloud provider worldwide perform Traffic-Engineering? What are the implications for the geo-distributed applications running in the cloud? Marco Chiesa and his colleagues explored these and more questions through a comprehensive set of measurements across the Amazon Web Services (AWS) cloud network. Please find the results on RIPE Labs: https://labs.ripe.net/Members/marco_chiesa/internet-clouds-are-also-unpredi… Marco will be a RACI fellow at RIPE 79 and will present his research there. Kind regards, Mirjam Kühne RIPE NCC

2 2

Weekly Routing Table Report
by cscora＠apnic.net 25 Dec '20

25 Dec '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 26 Dec, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 834627 Prefixes after maximum aggregation (per Origin AS): 319962 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 399619 Total ASes present in the Internet Routing Table: 70194 Prefixes per ASN: 11.89 Origin-only ASes present in the Internet Routing Table: 60341 Origin ASes announcing only one prefix: 24973 Transit ASes present in the Internet Routing Table: 9853 Transit-only ASes present in the Internet Routing Table: 301 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 203 Max AS path prepend of ASN (396896) 200 Prefixes from unregistered ASNs in the Routing Table: 1050 Number of instances of unregistered ASNs: 1053 Number of 32-bit ASNs allocated by the RIRs: 34527 Number of 32-bit ASNs visible in the Routing Table: 28671 Prefixes from 32-bit ASNs in the Routing Table: 132240 Number of bogon 32-bit ASNs visible in the Routing Table: 23 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 522 Number of addresses announced to Internet: 2863188352 Equivalent to 170 /8s, 168 /16s and 201 /24s Percentage of available address space announced: 77.3 Percentage of allocated address space announced: 77.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 284081 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 218461 Total APNIC prefixes after maximum aggregation: 64434 APNIC Deaggregation factor: 3.39 Prefixes being announced from the APNIC address blocks: 214540 Unique aggregates announced from the APNIC address blocks: 87588 APNIC Region origin ASes present in the Internet Routing Table: 11144 APNIC Prefixes per ASN: 19.25 APNIC Region origin ASes announcing only one prefix: 3167 APNIC Region transit ASes present in the Internet Routing Table: 1610 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6283 Number of APNIC addresses announced to Internet: 777992448 Equivalent to 46 /8s, 95 /16s and 57 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 240552 Total ARIN prefixes after maximum aggregation: 111516 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 240984 Unique aggregates announced from the ARIN address blocks: 115437 ARIN Region origin ASes present in the Internet Routing Table: 18692 ARIN Prefixes per ASN: 12.89 ARIN Region origin ASes announcing only one prefix: 6825 ARIN Region transit ASes present in the Internet Routing Table: 1918 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 203 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3631 Number of ARIN addresses announced to Internet: 1092682240 Equivalent to 65 /8s, 33 /16s and 2 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 237678 Total RIPE prefixes after maximum aggregation: 112162 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 233540 Unique aggregates announced from the RIPE address blocks: 137882 RIPE Region origin ASes present in the Internet Routing Table: 27597 RIPE Prefixes per ASN: 8.46 RIPE Region origin ASes announcing only one prefix: 11858 RIPE Region transit ASes present in the Internet Routing Table: 3885 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 38 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9778 Number of RIPE addresses announced to Internet: 709773952 Equivalent to 42 /8s, 78 /16s and 74 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112175 Total LACNIC prefixes after maximum aggregation: 26265 LACNIC Deaggregation factor: 4.27 Prefixes being announced from the LACNIC address blocks: 113301 Unique aggregates announced from the LACNIC address blocks: 47952 LACNIC Region origin ASes present in the Internet Routing Table: 10631 LACNIC Prefixes per ASN: 10.66 LACNIC Region origin ASes announcing only one prefix: 2637 LACNIC Region transit ASes present in the Internet Routing Table: 1989 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8227 Number of LACNIC addresses announced to Internet: 173972736 Equivalent to 10 /8s, 94 /16s and 157 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24709 Total AfriNIC prefixes after maximum aggregation: 4830 AfriNIC Deaggregation factor: 5.12 Prefixes being announced from the AfriNIC address blocks: 31740 Unique aggregates announced from the AfriNIC address blocks: 10335 AfriNIC Region origin ASes present in the Internet Routing Table: 1424 AfriNIC Prefixes per ASN: 22.29 AfriNIC Region origin ASes announcing only one prefix: 485 AfriNIC Region transit ASes present in the Internet Routing Table: 285 Average AfriNIC Region AS path length visible: 5.2 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 752 Number of AfriNIC addresses announced to Internet: 108327936 Equivalent to 6 /8s, 116 /16s and 244 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5680 777 659 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4744 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3542 1330 21 VIETEL-AS-AP Viettel Group, VN 7713 3234 952 519 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2860 1896 55 VNPT-AS-VN VNPT Corp, VN 9808 2589 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2405 11105 563 KIXS-AS-KR Korea Telecom, KR 9498 2296 466 233 BBIL-AP BHARTI Airtel Ltd., IN 4755 2133 441 189 TATACOMM-AS TATA Communications formerl 45090 2067 1045 63 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4767 316 692 CABLEONE, US 16509 4547 9071 2107 AMAZON-02, US 7155 4022 264 32 VIASAT-SP-BACKBONE, US 22773 3774 3008 211 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3357 1319 83 SHAW, CA 16625 3160 1656 2273 AKAMAI-AS, US 209 2522 5058 508 CENTURYLINK-US-LEGACY-QWEST, US 30036 2489 369 123 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2336 2984 1643 FRONTIER-FRTR, US 20115 2163 2898 509 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 6258 852 3605 TTNET, TR 12479 6214 1667 141 UNI2-AS, ES 39891 3460 195 23 ALJAWWALSTC-AS, SA 20940 3318 3345 198 AKAMAI-ASN1, NL 8551 3209 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2875 2280 887 ROSTELECOM-AS, RU 9009 2238 230 1227 M247, GB 34984 2174 354 578 TELLCOM-AS, TR 13188 1611 100 23 TRIOLAN, UA 58224 1467 857 550 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8140 3400 588 Uninet S.A. de C.V., MX 10620 3389 526 598 Telmex Colombia S.A., CO 11830 2564 369 63 Instituto Costarricense de Electricidad 13999 1605 432 408 Mega Cable, S.A. de C.V., MX 6503 1438 311 475 Axtel, S.A.B. de C.V., MX 7303 1437 911 263 Telecom Argentina S.A., AR 28573 1374 2260 220 CLARO S.A., BR 6147 1147 379 39 Telefonica del Peru S.A.A., PE 3816 1115 537 152 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 1008 213 417 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1566 393 22 LINKdotNET-AS, EG 24835 1287 478 26 RAYA-AS, EG 36992 1162 1526 155 ETISALAT-MISR, EG 36903 970 506 106 MT-MPLS, MA 29571 707 68 12 ORANGE-COTE-IVOIRE, CI 6713 533 1863 34 IAM-AS, MA 36935 466 522 40 Vodafone-, EG 23889 454 232 16 MauritiusTelecom, MU 15399 440 46 16 WANANCHI-, KE 37342 420 32 1 MOVITEL, MZ Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8140 3400 588 Uninet S.A. de C.V., MX 47331 6258 852 3605 TTNET, TR 12479 6214 1667 141 UNI2-AS, ES 7545 5680 777 659 TPG-INTERNET-AP TPG Telecom Limited, AU 11492 4767 316 692 CABLEONE, US 4538 4744 4192 73 ERX-CERNET-BKB China Education and Rese 16509 4547 9071 2107 AMAZON-02, US 7155 4022 264 32 VIASAT-SP-BACKBONE, US 22773 3774 3008 211 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3542 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6214 6073 UNI2-AS, ES 7545 5680 5021 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4744 4671 ERX-CERNET-BKB China Education and Research Net 11492 4767 4075 CABLEONE, US 7155 4022 3990 VIASAT-SP-BACKBONE, US 22773 3774 3563 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3542 3521 VIETEL-AS-AP Viettel Group, VN 39891 3460 3437 ALJAWWALSTC-AS, SA 6327 3357 3274 SHAW, CA 8551 3209 3164 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 393489 UNALLOCATED 12.7.109.0/24 7018 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.133.192.0/24 Origin: 16734 UNASSIGNED Transit: 266201 RNV CORP EIRELI, BR 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 3803 RCN-AS1, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:13 /10:40 /11:101 /12:292 /13:579 /14:1175 /15:1931 /16:13458 /17:8257 /18:13689 /19:25574 /20:41488 /21:50540 /22:103454 /23:88035 /24:484705 /25:1288 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 5541 6258 TTNET, TR 12479 5184 6214 UNI2-AS, ES 11492 3817 4767 CABLEONE, US 6327 3152 3357 SHAW, CA 7155 3111 4022 VIASAT-SP-BACKBONE, US 22773 2884 3774 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2802 3460 ALJAWWALSTC-AS, SA 8151 2765 8140 Uninet S.A. de C.V., MX 8551 2670 3209 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2221 2489 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1881 2:1167 3:38 4:18 5:3587 6:54 8:1493 9:1 11:1 12:1741 13:350 14:2405 15:75 16:13 17:308 18:93 20:113 23:4147 24:2365 25:3 27:2339 31:2174 32:112 34:1 35:35 36:1141 37:3539 38:2010 39:462 40:150 41:3849 42:880 43:2095 44:235 45:14675 46:3580 47:321 49:1605 50:1688 51:89 52:1126 54:216 55:690 56:6 57:57 58:1683 59:1146 60:817 61:2322 62:2197 63:2005 64:5220 65:2377 66:5109 67:2951 68:1172 69:4097 70:1397 71:685 72:3094 74:2537 75:1457 76:692 77:1982 78:3188 79:2472 80:1918 81:1637 82:1297 83:1094 84:1255 85:3092 86:621 87:1793 88:2418 89:2884 90:396 91:7184 92:1593 93:2555 94:2918 95:4152 96:1228 97:342 98:966 99:976 100:90 101:1054 102:1222 103:25096 104:3620 105:393 106:771 107:2184 108:690 109:3762 110:1998 111:2349 112:1664 113:1560 114:1426 115:1856 116:1864 117:2118 118:2293 119:1872 120:952 121:1052 122:2297 123:2157 124:1631 125:2138 128:1310 129:1266 130:774 131:1989 132:726 133:312 134:1391 135:326 136:687 137:884 138:2293 139:1171 140:736 141:1163 142:1049 143:1231 144:1211 145:340 146:1387 147:1209 148:2162 149:1246 150:757 151:1202 152:1608 153:445 154:2111 155:1263 156:1341 157:1150 158:903 159:2036 160:2053 161:1078 162:3220 163:934 164:1435 165:1318 166:602 167:1731 168:3621 169:632 170:4371 171:757 172:2029 173:2910 174:975 175:1061 176:2918 177:4449 178:2802 179:1878 180:2277 181:2582 182:3163 183:1518 184:2409 185:17616 186:4023 187:3051 188:3224 189:2690 190:9080 191:1423 192:10587 193:7874 194:6424 195:4570 196:3114 197:2207 198:6018 199:5948 200:7313 201:5279 202:10540 203:10180 204:4649 205:3094 206:3286 207:3320 208:3984 209:4621 210:4205 211:2105 212:3608 213:3198 214:1185 215:61 216:6132 217:2481 218:900 219:643 220:2088 221:934 222:987 223:1705 End of report

1 0

New on RIPE Labs: Moving RPKI Beyond Routing Security
by Antony Gollan 23 Dec '20

23 Dec '20

Dear colleagues, Resource Tagged Attestations, or RTAs, are a new type of RPKI object that is being proposed by authors from APNIC and NLnet Labs in the IETF. They allow any arbitrary file to be signed ‘with resources’ by one or more parties. As a part of the RTA development effort, NLnet Labs has now introduced proof-of-concept support for this in Routinator and Krill, which is interoperable with the RTA signing function in development at APNIC. Read more on RIPE Labs: https://labs.ripe.net/Members/tim_bruijnzeels/moving-rpki-beyond-routing-se… Kind regards, Antony Gollan Senior Communications Officer RIPE NCC

1 0

AS28753 - Leaseweb Deutschland GmbH -- Facilitating legacy squatting?
by Ronald F. Guilmette 21 Dec '20

21 Dec '20

In the period from 2020-12-04 until 2020-12-10 someone representing AS28753 - Leaseweb Deutschland GmbH, or someone purporting to represent that ASN/company created a set of thirteen (13) new route: entries in the security-free RADB data base: https://pastebin.com/raw/qs9yywFe It appears somewhat more than coincidental that many of these new RADB route entries refer to either(a) legacy IPv4 address blocks in the ARIN region or else (b) unassigned (bogon) IPv4 address space in the ARIN region. A listing of the relevant IPv4 cidrs along with the top-level allocation holders for each CIDR is given in the following table: https://pastebin.com/raw/rnqMXHW0 Although there is some ambiguity regarding the status of the non-US/non-ARIN blocks listed in the above table, my inspection of the relevant WHOIS records for the US/ARIN blocks indicates to me that these are all either (a) abandoned IPv4 legacy blocks or else (b) unassigned ARIN bogons. This strongly suggests that all of the IPv4 address blocks named in all of the relevant RADB rote entries may be, and likely are being squatted on at the present time. Please note however that AS28753 - Leaseweb Deutschland GmbH - is not itself doing any of the squatting. Rather, the squatting is being undertaken by the various ASNs mention in the following active routing summary: 62.182.160.0/21 AS39325 RU Viptelecom LLC 79.173.104.0/21 AS13259 RU Delta Telesystems Ltd. 85.28.48.0/20 AS13259 RU Delta Telesystems Ltd. 85.89.104.0/21 AS13259 RU Delta Telesystems Ltd. 89.187.8.0/21 AS41762 UA PE Logvinov Vladimir Vladimirovich 91.229.148.0/22 AS56968 KZ TemirLan Net Ltd 128.0.80.0/20 AS34498 RU Jilcomservice 199.61.32.0/19 AS9009 GB M247 Ltd 204.229.64.0/19 AS10650 US Extreme Internet 205.134.96.0/19 AS10650 US Extreme Internet 205.148.96.0/19 AS397373 US H4Y Technologies LLC 209.151.96.0/19 AS9009 GB M247 Ltd 216.93.0.0/19 AS9009 GB M247 Ltd Note that AS10650 (Extreme Internet) is itself a legacy abandoned ARIN ASN. It is likely also squatted. It's one and only current upstream, according to bgp.he.net, is AS13259 - Delta Telesystems Ltd. (Russia). In fact, all of the following ASNs from the above table also have AS13259, Delta Telesystems Ltd. (Russia) as their one and only upstream at the present time: AS39325 - Viptelecom LLC AS41762 - PE Logvinov Vladimir Vladimirovich AS56968 - TemirLan Net Ltd AS34498 - Jilcomservice AS1065 - Extreme Internet On this basis it would appear that the root of the problem in this case lies at AS13259, Delta Telesystems Ltd. (Russia). As a mitigation for these squats, I recommend dropping/blocking all of the IPv4 CIDRs listed above. Additionally, since AS13259 appears to be highly untrustworth at the present time. I would advise blocking all traffic to/from these blocks also: https://bgp.he.net/AS13259#_prefixes 79.173.104.0/21 82.147.68.0/24 82.147.70.0/24 82.147.71.0/24 82.147.75.0/24 85.28.48.0/20 85.89.104.0/21 91.206.16.0/23 193.107.92.0/22 2001:678:68c::/48 Regards, rfg

1 0

Weekly Routing Table Report
by cscora＠apnic.net 18 Dec '20

18 Dec '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 19 Dec, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 834384 Prefixes after maximum aggregation (per Origin AS): 319639 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 399442 Total ASes present in the Internet Routing Table: 70165 Prefixes per ASN: 11.89 Origin-only ASes present in the Internet Routing Table: 60316 Origin ASes announcing only one prefix: 24963 Transit ASes present in the Internet Routing Table: 9849 Transit-only ASes present in the Internet Routing Table: 296 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 203 Max AS path prepend of ASN (396896) 200 Prefixes from unregistered ASNs in the Routing Table: 1041 Number of instances of unregistered ASNs: 1042 Number of 32-bit ASNs allocated by the RIRs: 34457 Number of 32-bit ASNs visible in the Routing Table: 28615 Prefixes from 32-bit ASNs in the Routing Table: 131766 Number of bogon 32-bit ASNs visible in the Routing Table: 19 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 487 Number of addresses announced to Internet: 2864080896 Equivalent to 170 /8s, 182 /16s and 104 /24s Percentage of available address space announced: 77.4 Percentage of allocated address space announced: 77.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 283940 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 218271 Total APNIC prefixes after maximum aggregation: 64342 APNIC Deaggregation factor: 3.39 Prefixes being announced from the APNIC address blocks: 214363 Unique aggregates announced from the APNIC address blocks: 87510 APNIC Region origin ASes present in the Internet Routing Table: 11125 APNIC Prefixes per ASN: 19.27 APNIC Region origin ASes announcing only one prefix: 3163 APNIC Region transit ASes present in the Internet Routing Table: 1606 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6259 Number of APNIC addresses announced to Internet: 778351744 Equivalent to 46 /8s, 100 /16s and 180 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 240878 Total ARIN prefixes after maximum aggregation: 111543 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 241238 Unique aggregates announced from the ARIN address blocks: 115495 ARIN Region origin ASes present in the Internet Routing Table: 18688 ARIN Prefixes per ASN: 12.91 ARIN Region origin ASes announcing only one prefix: 6810 ARIN Region transit ASes present in the Internet Routing Table: 1917 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 203 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3614 Number of ARIN addresses announced to Internet: 1093010176 Equivalent to 65 /8s, 38 /16s and 3 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 237298 Total RIPE prefixes after maximum aggregation: 111936 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 233244 Unique aggregates announced from the RIPE address blocks: 137821 RIPE Region origin ASes present in the Internet Routing Table: 27601 RIPE Prefixes per ASN: 8.45 RIPE Region origin ASes announcing only one prefix: 11876 RIPE Region transit ASes present in the Internet Routing Table: 3889 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9766 Number of RIPE addresses announced to Internet: 709745280 Equivalent to 42 /8s, 77 /16s and 218 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112152 Total LACNIC prefixes after maximum aggregation: 26270 LACNIC Deaggregation factor: 4.27 Prefixes being announced from the LACNIC address blocks: 113258 Unique aggregates announced from the LACNIC address blocks: 47934 LACNIC Region origin ASes present in the Internet Routing Table: 10629 LACNIC Prefixes per ASN: 10.66 LACNIC Region origin ASes announcing only one prefix: 2629 LACNIC Region transit ASes present in the Internet Routing Table: 1991 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8226 Number of LACNIC addresses announced to Internet: 174119424 Equivalent to 10 /8s, 96 /16s and 218 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24742 Total AfriNIC prefixes after maximum aggregation: 4794 AfriNIC Deaggregation factor: 5.16 Prefixes being announced from the AfriNIC address blocks: 31794 Unique aggregates announced from the AfriNIC address blocks: 10293 AfriNIC Region origin ASes present in the Internet Routing Table: 1424 AfriNIC Prefixes per ASN: 22.33 AfriNIC Region origin ASes announcing only one prefix: 484 AfriNIC Region transit ASes present in the Internet Routing Table: 284 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 750 Number of AfriNIC addresses announced to Internet: 108424448 Equivalent to 6 /8s, 118 /16s and 109 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5682 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4749 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3548 1330 21 VIETEL-AS-AP Viettel Group, VN 7713 3232 952 519 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2855 1896 55 VNPT-AS-VN VNPT Corp, VN 9808 2585 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2352 11103 560 KIXS-AS-KR Korea Telecom, KR 9498 2296 466 233 BBIL-AP BHARTI Airtel Ltd., IN 4755 2133 441 189 TATACOMM-AS TATA Communications formerl 45090 2067 1045 64 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4755 315 701 CABLEONE, US 16509 4528 9069 2096 AMAZON-02, US 7155 4020 264 32 VIASAT-SP-BACKBONE, US 22773 3769 3008 211 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3357 1319 83 SHAW, CA 16625 3155 1654 2271 AKAMAI-AS, US 209 2523 5059 507 CENTURYLINK-US-LEGACY-QWEST, US 30036 2491 368 113 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2336 2984 1643 FRONTIER-FRTR, US 20115 2163 2898 509 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6214 1667 141 UNI2-AS, ES 47331 6104 845 3572 TTNET, TR 39891 3459 195 22 ALJAWWALSTC-AS, SA 20940 3327 3347 200 AKAMAI-ASN1, NL 8551 3225 379 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2883 2282 892 ROSTELECOM-AS, RU 9009 2236 231 1220 M247, GB 34984 2168 352 577 TELLCOM-AS, TR 13188 1610 100 31 TRIOLAN, UA 58224 1463 856 550 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8215 3444 601 Uninet S.A. de C.V., MX 10620 3394 526 590 Telmex Colombia S.A., CO 11830 2564 369 63 Instituto Costarricense de Electricidad 13999 1588 431 406 Mega Cable, S.A. de C.V., MX 6503 1438 311 475 Axtel, S.A.B. de C.V., MX 7303 1435 909 262 Telecom Argentina S.A., AR 28573 1376 2260 222 CLARO S.A., BR 6147 1146 379 39 Telefonica del Peru S.A.A., PE 3816 1115 537 152 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 1007 213 419 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1566 393 22 LINKdotNET-AS, EG 24835 1287 478 26 RAYA-AS, EG 36992 1218 1530 137 ETISALAT-MISR, EG 36903 951 497 97 MT-MPLS, MA 29571 709 68 12 ORANGE-COTE-IVOIRE, CI 6713 533 1863 34 IAM-AS, MA 37342 478 32 1 MOVITEL, MZ 36935 464 522 40 Vodafone-, EG 23889 451 232 16 MauritiusTelecom, MU 15399 439 46 16 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8215 3444 601 Uninet S.A. de C.V., MX 12479 6214 1667 141 UNI2-AS, ES 47331 6104 845 3572 TTNET, TR 7545 5682 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 11492 4755 315 701 CABLEONE, US 4538 4749 4192 73 ERX-CERNET-BKB China Education and Rese 16509 4528 9069 2096 AMAZON-02, US 7155 4020 264 32 VIASAT-SP-BACKBONE, US 22773 3769 3008 211 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3548 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6214 6073 UNI2-AS, ES 7545 5682 5021 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4749 4676 ERX-CERNET-BKB China Education and Research Net 11492 4755 4054 CABLEONE, US 7155 4020 3988 VIASAT-SP-BACKBONE, US 22773 3769 3558 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3548 3527 VIETEL-AS-AP Viettel Group, VN 39891 3459 3437 ALJAWWALSTC-AS, SA 6327 3357 3274 SHAW, CA 8551 3225 3182 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 393489 UNALLOCATED 12.7.109.0/24 7018 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 3803 RCN-AS1, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:13 /10:40 /11:101 /12:292 /13:579 /14:1175 /15:1931 /16:13469 /17:8273 /18:13705 /19:25617 /20:41559 /21:50418 /22:103435 /23:87982 /24:484539 /25:1248 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 5362 6104 TTNET, TR 12479 5185 6214 UNI2-AS, ES 11492 3805 4755 CABLEONE, US 6327 3152 3357 SHAW, CA 7155 3109 4020 VIASAT-SP-BACKBONE, US 8151 2917 8215 Uninet S.A. de C.V., MX 22773 2879 3769 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3459 ALJAWWALSTC-AS, SA 8551 2687 3225 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2224 2491 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1881 2:1139 3:35 4:18 5:3410 6:53 8:1487 9:1 11:1 12:1755 13:349 14:2402 15:75 16:13 17:303 18:93 20:113 23:4145 24:2364 25:3 27:2339 31:2187 32:112 34:1 35:35 36:1137 37:3546 38:1999 39:458 40:150 41:3851 42:872 43:2114 44:234 45:14610 46:3625 47:321 49:1602 50:1678 51:90 52:1127 54:217 55:768 56:6 57:57 58:1689 59:1149 60:817 61:2312 62:2198 63:2011 64:5220 65:2375 66:5120 67:2947 68:1172 69:4100 70:1399 71:685 72:3102 74:2548 75:1457 76:688 77:1982 78:3096 79:2485 80:1924 81:1632 82:1313 83:1095 84:1261 85:3055 86:612 87:1792 88:2339 89:2891 90:400 91:7166 92:1597 93:2553 94:2919 95:4109 96:1226 97:342 98:966 99:976 100:90 101:1055 102:1215 103:25085 104:3620 105:390 106:775 107:2189 108:690 109:3752 110:2007 111:2351 112:1661 113:1554 114:1425 115:1855 116:1858 117:2111 118:2288 119:1866 120:958 121:1049 122:2301 123:2132 124:1639 125:2140 128:1342 129:1258 130:766 131:2003 132:743 133:311 134:1392 135:326 136:688 137:894 138:2307 139:1167 140:737 141:1165 142:1042 143:1242 144:1210 145:341 146:1383 147:1215 148:2175 149:1248 150:752 151:1201 152:1609 153:445 154:2116 155:1267 156:1353 157:1140 158:907 159:2039 160:2049 161:1079 162:3210 163:927 164:1421 165:1315 166:599 167:1735 168:3608 169:632 170:4354 171:744 172:2025 173:2911 174:973 175:1059 176:2926 177:4428 178:2788 179:1891 180:2278 181:2571 182:3161 183:1526 184:2406 185:17607 186:4030 187:3075 188:3391 189:2751 190:9060 191:1401 192:10596 193:7859 194:6401 195:4583 196:3079 197:2269 198:6023 199:5947 200:7325 201:5277 202:10554 203:10175 204:4651 205:3102 206:3308 207:3320 208:3991 209:4611 210:4199 211:2098 212:3613 213:3183 214:1186 215:61 216:6132 217:2476 218:899 219:641 220:2085 221:935 222:987 223:1706 End of report

1 0

Post-mortem: Error in Contractual Status of Legacy Resources Impacted RPKI
by Marco Schmidt 18 Dec '20

18 Dec '20

Dear colleagues, On Wednesday, 16 December 2020, we carried out work to implement Numbered Work Item 10 (NWI-10), which applies a consistent interpretation of the country code attribute in the RIPE Database and the Extended Delegated Statistics. At some point between 18:00-19:00 (UTC+1), 105 legacy resources mistakenly lost their contractual status in our internal systems. As a result, these resources were no longer able to be certified using RPKI. Details: Legacy resources can only be certified with RPKI when there is a contractual relationship in place with the RIPE NCC. These resources are registered differently from RIPE NCC-issued resources in our internal systems. A programming error in our NWI-10 implementation overlooked this aspect, which caused the contractual status for these legacy resources to be set to “none”. As a consequence, the resources were unable to be certified. Once RPKI detected this change: * The resource certificates for 36 Certificate Authorities (CAs) were updated to contain fewer certifiable resources. * The ROAs for legacy resources held by affected hosted CAs were revoked. 41 ROAs (with 202 Validated ROA Payloads) from 24 CAs were deleted. * The RPKI certificates issued for affected delegated CAs shrank, which caused their ROAs to disappear or be rejected due to overclaiming, depending on their CA software. We recovered the contractual status of the 105 affected resources at 17:10 (UTC+1) on Thursday, 17 December, re-established the correct resource list for the affected certificates, and recreated the 41 affected/deleted ROAs (with 202 VRPs) that are hosted by us. Recommendations: We have already recovered the ROAs belonging to the affected hosted CAs. We recommend that these CAs double-check this. Affected delegated CAs should check whether they need to recreate any ROAs. Our Customer Services team will be in contact to follow up. To prevent this from happening again in future, we will improve our Quality Assurance and Acceptance Testing. We will also improve our testing and prepare more detailed impact analyses when making changes to our registry software, applying a more risk-based testing approach to mitigate any concerns that are identified. Kind regards, Marco Schmidt Registry Services Assistant Manager

1 0

Re: [routing-wg] [anti-abuse-wg] AS47510 & AS35555 -- Bogon ASNs routing Bogon IPv4 space
by Ronald F. Guilmette 12 Dec '20

12 Dec '20

In message <CALZ3u+YADAVB1HouHfsWKG4txTNO6xLqoD=-tjU831W-1CQJxg(a)mail.gmail.com> =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= <ximaera(a)gmail.com> wrote: >On Sat, Dec 5, 2020, 1:57 AM Ronald F. Guilmette <rfg(a)tristatelogic.com> >wrote: > >> It appears that AS47510 is itself an unallocated bogon at the present >> time: >> >> https://bgp.he.net/AS47510#_asinfo >> >> As can be readily seen at the above link, AS47510 is peering with only >> two other ASNs, i.e. AS29226 - JSC Mastertel (Russia) and AS35555 - >> Crex Fex Pex Internet System Solutions" LLC. >> > >Both peering links are now down. > >The matters with AS35555 may be harder to resolve, though. If possible please elaborate. It appears that AS35555, which is a bogon ASN, is bdeing kept alive at this point only by AS213254 -- Rait Telecom, which is just a seven-month old Russian company/ASN with -zero- IP allocations and apparently NO WEB SITE. And yet despite being only 7 months old and having absolutely no IP space of its own (and also no web site), Rait Telecom has somehow managed to work itself into the fabric of no fewer than seven European IXes: https://bgp.he.net/AS213254#_ix And it also has managed to acquire all these IPv4 peers: AS25091 IP-Max SA AS50340 OOO "Network of data-centers "Selectel" AS35297 Dataline LLC AS199524 G-Core Labs S.A. AS35555 "Crex Fex Pex Internet System Solutions" LLC AS49673 Truenetwork LLC AS8492 "OBIT" Ltd. AS42861 Foton Telecom CJSC AS35598 INETCOM LLC AS47441 TRUNK MOBILE, INC How exactly does that even happen? And who the hell are these people anyway? Regards, rfg

1 0

Weekly Routing Table Report
by cscora＠apnic.net 11 Dec '20

11 Dec '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 12 Dec, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 833024 Prefixes after maximum aggregation (per Origin AS): 319019 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 399101 Total ASes present in the Internet Routing Table: 70094 Prefixes per ASN: 11.88 Origin-only ASes present in the Internet Routing Table: 60270 Origin ASes announcing only one prefix: 24923 Transit ASes present in the Internet Routing Table: 9824 Transit-only ASes present in the Internet Routing Table: 286 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 40 Max AS path prepend of ASN ( 22394) 36 Prefixes from unregistered ASNs in the Routing Table: 1079 Number of instances of unregistered ASNs: 1080 Number of 32-bit ASNs allocated by the RIRs: 34384 Number of 32-bit ASNs visible in the Routing Table: 28526 Prefixes from 32-bit ASNs in the Routing Table: 130841 Number of bogon 32-bit ASNs visible in the Routing Table: 18 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 531 Number of addresses announced to Internet: 2864277120 Equivalent to 170 /8s, 185 /16s and 102 /24s Percentage of available address space announced: 77.4 Percentage of allocated address space announced: 77.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 283782 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 217228 Total APNIC prefixes after maximum aggregation: 64069 APNIC Deaggregation factor: 3.39 Prefixes being announced from the APNIC address blocks: 213269 Unique aggregates announced from the APNIC address blocks: 87397 APNIC Region origin ASes present in the Internet Routing Table: 11101 APNIC Prefixes per ASN: 19.21 APNIC Region origin ASes announcing only one prefix: 3153 APNIC Region transit ASes present in the Internet Routing Table: 1603 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 34 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6224 Number of APNIC addresses announced to Internet: 778323968 Equivalent to 46 /8s, 100 /16s and 72 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 240688 Total ARIN prefixes after maximum aggregation: 111288 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 240949 Unique aggregates announced from the ARIN address blocks: 115360 ARIN Region origin ASes present in the Internet Routing Table: 18690 ARIN Prefixes per ASN: 12.89 ARIN Region origin ASes announcing only one prefix: 6809 ARIN Region transit ASes present in the Internet Routing Table: 1913 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 40 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3604 Number of ARIN addresses announced to Internet: 1093117952 Equivalent to 65 /8s, 39 /16s and 168 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 237159 Total RIPE prefixes after maximum aggregation: 111900 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 233076 Unique aggregates announced from the RIPE address blocks: 137705 RIPE Region origin ASes present in the Internet Routing Table: 27564 RIPE Prefixes per ASN: 8.46 RIPE Region origin ASes announcing only one prefix: 11851 RIPE Region transit ASes present in the Internet Routing Table: 3893 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9735 Number of RIPE addresses announced to Internet: 709722752 Equivalent to 42 /8s, 77 /16s and 130 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112113 Total LACNIC prefixes after maximum aggregation: 26185 LACNIC Deaggregation factor: 4.28 Prefixes being announced from the LACNIC address blocks: 113225 Unique aggregates announced from the LACNIC address blocks: 47917 LACNIC Region origin ASes present in the Internet Routing Table: 10626 LACNIC Prefixes per ASN: 10.66 LACNIC Region origin ASes announcing only one prefix: 2626 LACNIC Region transit ASes present in the Internet Routing Table: 1967 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8216 Number of LACNIC addresses announced to Internet: 174113024 Equivalent to 10 /8s, 96 /16s and 193 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24755 Total AfriNIC prefixes after maximum aggregation: 4791 AfriNIC Deaggregation factor: 5.17 Prefixes being announced from the AfriNIC address blocks: 31974 Unique aggregates announced from the AfriNIC address blocks: 10289 AfriNIC Region origin ASes present in the Internet Routing Table: 1420 AfriNIC Prefixes per ASN: 22.52 AfriNIC Region origin ASes announcing only one prefix: 483 AfriNIC Region transit ASes present in the Internet Routing Table: 287 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 747 Number of AfriNIC addresses announced to Internet: 108557312 Equivalent to 6 /8s, 120 /16s and 116 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5676 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4755 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3577 1330 21 VIETEL-AS-AP Viettel Group, VN 7713 3227 952 519 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2842 1896 55 VNPT-AS-VN VNPT Corp, VN 9808 2574 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2356 11104 565 KIXS-AS-KR Korea Telecom, KR 9498 2297 466 232 BBIL-AP BHARTI Airtel Ltd., IN 4755 2133 441 189 TATACOMM-AS TATA Communications formerl 45090 2064 1045 63 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4755 315 695 CABLEONE, US 16509 4501 9066 2085 AMAZON-02, US 7155 4019 264 32 VIASAT-SP-BACKBONE, US 22773 3739 2994 196 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3357 1319 83 SHAW, CA 16625 3124 1641 2247 AKAMAI-AS, US 209 2525 5059 511 CENTURYLINK-US-LEGACY-QWEST, US 30036 2487 370 113 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2336 2984 1643 FRONTIER-FRTR, US 20115 2165 2899 504 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 6502 900 3642 TTNET, TR 12479 6226 1667 141 UNI2-AS, ES 39891 3459 195 22 ALJAWWALSTC-AS, SA 20940 3330 3347 200 AKAMAI-ASN1, EU 8551 3237 379 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2881 2282 892 ROSTELECOM-AS, RU 9009 2235 231 1219 M247, GB 34984 2167 351 576 TELLCOM-AS, TR 13188 1610 100 31 TRIOLAN, UA 58224 1449 853 541 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8187 3442 603 Uninet S.A. de C.V., MX 10620 3396 526 550 Telmex Colombia S.A., CO 11830 2565 369 63 Instituto Costarricense de Electricidad 13999 1561 430 411 Mega Cable, S.A. de C.V., MX 6503 1444 311 475 Axtel, S.A.B. de C.V., MX 7303 1435 909 262 Telecom Argentina S.A., AR 28573 1371 2259 223 CLARO S.A., BR 6147 1147 379 39 Telefonica del Peru S.A.A., PE 3816 1113 537 151 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 999 212 418 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1567 393 22 LINKdotNET-AS, EG 24835 1288 480 25 RAYA-AS, EG 36992 1206 1529 133 ETISALAT-MISR, EG 36903 950 496 96 MT-MPLS, MA 29571 709 68 12 ORANGE-COTE-IVOIRE, CI 6713 533 1863 34 IAM-AS, MA 15399 485 46 17 WANANCHI-, KE 37342 478 32 1 MOVITEL, MZ 36935 464 522 40 Vodafone-, EG 23889 450 232 16 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8187 3442 603 Uninet S.A. de C.V., MX 47331 6502 900 3642 TTNET, TR 12479 6226 1667 141 UNI2-AS, ES 7545 5676 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4755 4192 73 ERX-CERNET-BKB China Education and Rese 11492 4755 315 695 CABLEONE, US 16509 4501 9066 2085 AMAZON-02, US 7155 4019 264 32 VIASAT-SP-BACKBONE, US 22773 3739 2994 196 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3577 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6226 6085 UNI2-AS, ES 7545 5676 5015 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4755 4682 ERX-CERNET-BKB China Education and Research Net 11492 4755 4060 CABLEONE, US 7155 4019 3987 VIASAT-SP-BACKBONE, US 7552 3577 3556 VIETEL-AS-AP Viettel Group, VN 22773 3739 3543 ASN-CXA-ALL-CCI-22773-RDC, US 39891 3459 3437 ALJAWWALSTC-AS, SA 6327 3357 3274 SHAW, CA 8551 3237 3194 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 393489 UNALLOCATED 12.7.109.0/24 7018 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397294 UNASSIGNED Transit: 398559 TUNBROKER, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:13 /10:40 /11:101 /12:292 /13:579 /14:1175 /15:1932 /16:13469 /17:8249 /18:13675 /19:25588 /20:41340 /21:50275 /22:103262 /23:87738 /24:484046 /25:1242 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 5724 6502 TTNET, TR 12479 5201 6226 UNI2-AS, ES 11492 3803 4755 CABLEONE, US 6327 3152 3357 SHAW, CA 7155 3108 4019 VIASAT-SP-BACKBONE, US 8151 2892 8187 Uninet S.A. de C.V., MX 22773 2867 3739 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3459 ALJAWWALSTC-AS, SA 8551 2699 3237 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2225 2487 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1879 2:1143 3:35 4:18 5:3408 6:53 8:1484 9:1 11:1 12:1759 13:351 14:2397 15:72 16:13 17:302 18:93 20:111 23:4139 24:2359 25:3 27:2340 31:2162 32:112 34:1 35:35 36:1128 37:3507 38:2000 39:476 40:150 41:3866 42:616 43:2111 44:236 45:14651 46:3618 47:322 49:1607 50:1680 51:90 52:1129 54:213 55:781 56:6 57:56 58:1691 59:1144 60:817 61:2305 62:2197 63:2016 64:5226 65:2380 66:5121 67:2951 68:1170 69:4101 70:1400 71:685 72:3090 74:2545 75:1457 76:687 77:1973 78:3178 79:2493 80:1917 81:1630 82:1297 83:1105 84:1251 85:3100 86:619 87:1784 88:2428 89:2868 90:402 91:7167 92:1590 93:2549 94:2910 95:4162 96:1228 97:341 98:968 99:976 100:90 101:1048 102:1211 103:24992 104:3616 105:390 106:775 107:2172 108:686 109:3743 110:2001 111:2346 112:1652 113:1533 114:1415 115:1853 116:1862 117:2118 118:2276 119:1863 120:939 121:1040 122:2295 123:2126 124:1631 125:2133 128:1384 129:1258 130:770 131:1996 132:746 133:311 134:1390 135:331 136:684 137:899 138:2293 139:1157 140:737 141:1161 142:1041 143:1249 144:1210 145:334 146:1361 147:1212 148:2170 149:1262 150:758 151:1201 152:1603 153:446 154:2298 155:1261 156:1353 157:1133 158:912 159:2040 160:2039 161:1078 162:3202 163:920 164:1422 165:1314 166:600 167:1719 168:3627 169:630 170:4359 171:743 172:2007 173:2923 174:966 175:1060 176:2910 177:4440 178:2785 179:1896 180:2280 181:2578 182:3160 183:1516 184:2403 185:17553 186:4025 187:3053 188:3298 189:2728 190:9091 191:1400 192:10585 193:7846 194:6379 195:4581 196:3109 197:2297 198:6010 199:5940 200:7310 201:5269 202:10566 203:10142 204:4633 205:3096 206:3295 207:3311 208:3986 209:4608 210:4193 211:2095 212:3587 213:3193 214:1189 215:61 216:6143 217:2472 218:897 219:637 220:2086 221:929 222:975 223:1701 End of report

1 0

Invalid RPKI Certificate Published / Update RPKI Validator Software
by Ties de Kock 09 Dec '20

09 Dec '20

Dear colleagues, Summary: An issue with our RPKI software caused an invalid certificate to be published from 9.40-10:43 (UTC+1) today. This has resulted in outages. We strongly recommend network operators update their Relying Party software to the latest version. At 9:32 (UTC+1) this morning, we processed an outgoing transfer of IP resources to another RIR service region. This caused our system to update the corresponding RPKI certificates in our Certificate Authority (CA). Unfortunately, a bug in our software caused the publication of the updated child certificate ahead of its parent. As a result, our CA published incorrect information from 9:40-10:43 (UTC+1). Some Relying Parties had applied a strict interpretation in their validator software. This meant that they were configured to reject all certificates in the manifest if a single entry was invalid. As a consequence, all RPKI certificates covering RIPE resources were rejected by these validators during this period. While RPKI is designed to "fail-open", an unrelated issue with some routers seems to have prevented this from happening, which resulted in outages. Some Relying Parties have since updated their validator software to apply a less-strict approach in light of this issue[1]. We have published a release candidate of our own RIPE NCC RPKI Validator and we plan to release this to production tomorrow. While our CA is now publishing correct information, the underlying cause remains unsolved. We are continuing to investigate and will share more details when we have them, followed by a post mortem report once everything is resolved. In the meantime, we recommend that network operators update their RPKI validator software to the latest version. Regards, Ties de Kock Software Engineer RIPE NCC [1] Note: Routinator 0.8.2, Fort, rpki-client and octorpki 1.2.2 are either unaffected or contain the updated interpretation.

1 0

AS47510 & AS35555 -- Bogon ASNs routing Bogon IPv4 space
by Ronald F. Guilmette 04 Dec '20

04 Dec '20

I have just received a spam which has a so-called "payload" URL which the spammer wants me to visit, apparently so that I can be sold some male performance drugs of dubious origin. The domain part of the URL resolves to the IPv4 address 217.8.117.98. That address lies within a pair of bogon (unallocated) IPv4 address blocks, 217.8.116.0/24 and 217.8.117.0/24, that are both being routed by a common ASN, i.e. AS47510. https://bgp.he.net/AS47510#_prefixes It appears that AS47510 is itself an unallocated bogon at the present time: https://bgp.he.net/AS47510#_asinfo As can be readily seen at the above link, AS47510 is peering with only two other ASNs, i.e. AS29226 - JSC Mastertel (Russia) and AS35555 - Crex Fex Pex Internet System Solutions" LLC. The latter ASN, AS35555 also appears to be an unallocated bogon ASN at the present time. Nontheless, that does not appear to be preventing it from peering with yet another Russian network, AS213254 - OOO Rait Telecom: https://bgp.he.net/AS35555 It would be Nice, in my opinion, if someone who speaks Russian could make contact with the operators of AS29226 and AS213254 and respectfully suggest to them that they should cease peering with bogon ASNs, such as AS47510 and AS35555, including but not limited to bogon ASNs that are at present routing bogon IPv4 address space. Regards, rfg P.S. It appears that the company "Crex Fex Pex Internet System Solutions, LLC" which was the former owner of AS47510 and AS35555 and also AS60031 was a Russian entity, and one that most likely no longer qualifies as what one would call a "going concern": https://crex-fex-pex.ru/

1 0