- routing-wg - mailman.ripe.net

AS43890
by Ronald F. Guilmette 18 Nov '14

18 Nov '14

Based upon the information I am currently looking at (see below) I now believe that it was perhaps a mistake for myself, and possibly others, to have become focused on the issue of insuring the correctness and/or validity of route objects within the RIPE data base only in those cases where the IP blocks in question are under the dominion of other (non-RIPE) RiRs. It now seems certain to me that the absence of anything even remotely approximating proper validation of RIPE route objects is not, in fact, a problem which is limited to just inter-RiR situations. Apparently, RIPE member LIRs can just as easily hijack the IP blocks of other RIPE members as they can in the case of IP blocks belonging to parties in other regions. Also, RIPE-resident hijackers can just as easily place validating route objects for these hijacked RIPE-issued IP blocks into the RIPE DB as they can for any other hijacked blocks taken from any other region(s). Readily available public data indicates that approximately three weeks ago, on or about October 25th, AS197207, an Iranian ISP, began announcing the following routes to the following chunks of its own properly registered IP space: 31.2.128.0/17 46.51.0.0/17 95.64.0.0/17 164.138.128.0/18 188.229.0.0/17 Prior to AS197207's decision to begin announcing the above routes (which they did, starting on Oct. 25th), it appears that the proprietors of AS43890, a Romanian ISP and RIPE LIR in good standing, apparently elected to announce their own set of routes to some or all of the above Iranian IP blocks, using lots and lots of little deaggregated /24 announcements to do so. Evidence in my possession indicates that some of the /24 blocks in question were in fact used by so-called ``snowshoe spammers'' during the time when AS43890 (aka "Netserv Consult SRL") was routing these blocks. This fact leads me to believe that the proprietor(s) of AS43890 most probably did not in fact have anything like real authorization from AS197207 to announce routes to any of the Iranian AS197207's legitimately registered IP space. Further and additionally, as in the recent case involving (Bulgarian) AS201640, it appears that (Romanian) AS43890 also and likewise created multiple route objects within the RIPE data base as a way of legitimizing what appears to me to have been several substantial IP space hijackings. Lastly, many, most, or all of the fradulent route objects created by AS43890 are still present within the RIPE data base, as of today. I am including a list of all 61 of these below. As was the case with the fradulent route objects created within the RIPE DB by AS201640, these 61 apparently fradulent route objects which were created by the proprietor(s) of AS43890 have likewise also been imported into the MERIT RADb, from the RIPE DB, thus spreading the bogus ``authorization'' to route these blocks even further, in a manner not unlike a viral contaminant. Regards, rfg ======================================================================= route: 188.229.1.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.2.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.3.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.9.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.11.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.16.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.17.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.18.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.19.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.20.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.21.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.22.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.23.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.33.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.35.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.36.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.38.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.39.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.49.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.50.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.51.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.52.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.53.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.54.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.55.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.66.0/24 descr: Netserv Clinet origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.89.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.90.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.91.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.92.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.93.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.94.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.95.0/24 descr: Enternet Land SRL origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.96.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.97.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.98.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.99.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.100.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.101.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.102.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.103.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.104.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.105.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.106.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.107.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.108.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.109.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.110.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.111.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.113.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.114.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.117.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.118.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.119.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.120.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.121.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.122.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.123.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.124.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.125.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered route: 188.229.126.0/24 descr: Netserv-Client origin: AS43890 mnt-by: NETSERV-MNT source: RIPE # Filtered

7 10

Re: [routing-wg] Routing Reg. mess [was: Re: [anti-abuse-wg] Fwd: Hijack...]
by George Michaelson 17 Nov '14

17 Nov '14

I think that it is wrong to exclude use of the RPKI signed assertion of authority over a resource to drive admission of foreign records. I do not speak to RPSL per se or ROA, but the fact is that maintainer status is not visible in routing and is irrelevant. Databases need ACL and admission control but we all know the RIPE code has (and always has had) a privileged channel which can effect change in the contents of the schema without first class use of the authorization primitives: heck you can type SQL commands directly and make objects So I like much of what Wilfred said in terms of its intent and outcome. I do not agree that ab initio we should reject use of RPKI signed objects to permit import and export of external information. If I sign an authorization to somebody to include my resources in their IRR, and my resources are in the certificate which signed that authorization what can be stronger? -G On 14 November 2014 06:59, Elvis Daniel Velea <elvis(a)velea.eu> wrote: > Hi Wilfried, > > finally someone responding to the problem presented. I was about to > think that nobody cares anymore. > > On 14/11/14 16:18, Wilfried Woeber wrote: > > Michael Horn wrote: (to anti-abuse-wg(a)ripe.net) > > > > [...] > > > >> will result in significant workload. Holy dingus, is this database a > mess... > > And not just "this" one. The whole "Routing Registry" stuff is an > incredible > > mess, and since years, actually. Not really a Numbers Registry failure > or a > > negligence, but rather a multi-faceted mesh of FUD, History and Trade > Secrets > > claimed. > > > > Let me try to collect some facts, at least according to my memory. > > Please correct me where I'm wrong... > > > > - not all 5 RIRs actually do support an IRR functionality. > > > > - the RPSL doc.set, back in the good old days, had some ideas and > provisions > > for integrating the 5 (or then, rather 3, iirc) pieces of Numbers > Registries > > into a single, global, consistent structure. > > As Gert put it: it didn't fly. > > Since then, we were putting band-aid over patch over whatever to deal > with > > that. The result is what we have before us, right now. > > > > - the whole system of creating objects, at least in the RIPE Region, has > become > > totally inconsistent. For an address block, where the RIPE DB is > authoritative, > > and an AS number, you need the credentials from both parties to > register a route: > > or route6: object. > > > > for out-of-region authoritative entries, the dreaded maintainer was > created, in > > order to provide the (useless) 2nd auth: token. > > > > For the RPKI stuff, again, there isn't a requirment for a second > authentication > > token, iirc not even a *notification* to the AS ref.d, when an RoA is > created. > > Anyone of you still thinks RPKI is going to be helpful here? > > Bah, it's just going to give another false impression of credibility > + new vectors > > for errors and attacks. > > > >> -mh > > The only way(s) forward I can see are: > > > > - require manual approval of route: objects for the case of > out-of-region registrations > sounds like an other patch, one that I would welcome as a temporary > solution. > > > > - get the RPSL flaws fixed, the RFCs updated and then implemented > this will probably take years.. > > > > - integrate the 5 Number Registries into a homogenous, distributed DB > with consistent > > authentication mechanisms > > > > - come up with a viable proposal for 1 (one!!) global routing registry > that is > > authoritative, up-todate and complete, used by all operators (yes, I > know, it is > > the wrong type of year /w a XMAS) > I've been asking myself for years why the RIRs can not, under the NRO, > ASO, IANA, (?) umbrellas to come up with a unique registry (resource + > routing).. It's not like the communities do not want/need it... Do we > need to pass a global policy to ask the RIRs to work together? :-) > > A single source of information is, at this moment, a dream. > > - try to do any or all of the above and do so without RPKI requirements. > Please! > > > > Wilfried. > > > regards, > elvis > >

3 3

Routing Reg. mess [was: Re: [anti-abuse-wg] Fwd: Hijack...]
by Wilfried Woeber 17 Nov '14

17 Nov '14

Michael Horn wrote: (to anti-abuse-wg(a)ripe.net) [...] > will result in significant workload. Holy dingus, is this database a mess... And not just "this" one. The whole "Routing Registry" stuff is an incredible mess, and since years, actually. Not really a Numbers Registry failure or a negligence, but rather a multi-faceted mesh of FUD, History and Trade Secrets claimed. Let me try to collect some facts, at least according to my memory. Please correct me where I'm wrong... - not all 5 RIRs actually do support an IRR functionality. - the RPSL doc.set, back in the good old days, had some ideas and provisions for integrating the 5 (or then, rather 3, iirc) pieces of Numbers Registries into a single, global, consistent structure. As Gert put it: it didn't fly. Since then, we were putting band-aid over patch over whatever to deal with that. The result is what we have before us, right now. - the whole system of creating objects, at least in the RIPE Region, has become totally inconsistent. For an address block, where the RIPE DB is authoritative, and an AS number, you need the credentials from both parties to register a route: or route6: object. for out-of-region authoritative entries, the dreaded maintainer was created, in order to provide the (useless) 2nd auth: token. For the RPKI stuff, again, there isn't a requirment for a second authentication token, iirc not even a *notification* to the AS ref.d, when an RoA is created. Anyone of you still thinks RPKI is going to be helpful here? Bah, it's just going to give another false impression of credibility + new vectors for errors and attacks. > -mh The only way(s) forward I can see are: - require manual approval of route: objects for the case of out-of-region registrations - get the RPSL flaws fixed, the RFCs updated and then implemented - integrate the 5 Number Registries into a homogenous, distributed DB with consistent authentication mechanisms - come up with a viable proposal for 1 (one!!) global routing registry that is authoritative, up-todate and complete, used by all operators (yes, I know, it is the wrong type of year /w a XMAS) - try to do any or all of the above and do so without RPKI requirements. Please! Wilfried.

4 3

"Proposal for signaling consent from whacked RPKI objects"
by David Freedman 16 Nov '14

16 Nov '14

This presentation given in the SIDR-wg at IETF91 may be of interest to the routing-wg: http://www.cs.bu.edu/~goldbe/papers/goldberg_sidr_ietf91.pdf This is part of a collection "Hardening the RPKI Against Faulty or Misbehaving Authorities² , http://www.cs.bu.edu/~goldbe/papers/RPKImanip.html (referenced papers can be found here) Dave.

1 0

BGP Update Report
by cidr-report＠potaroo.net 15 Nov '14

15 Nov '14

BGP Update Report Interval: 06-Nov-14 -to- 13-Nov-14 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS12897 1515794 26.4% 126316.2 -- HEAGMEDIANET HSE Medianet GmbH,DE 2 - AS14287 367120 6.4% 61186.7 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 3 - AS23752 200084 3.5% 2041.7 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 4 - AS9829 156940 2.7% 133.0 -- BSNL-NIB National Internet Backbone,IN 5 - AS22773 53468 0.9% 12.7 -- ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.,US 6 - AS48159 40890 0.7% 145.0 -- TIC-AS Telecommunication Infrastructure Company,IR 7 - AS27738 39110 0.7% 50.1 -- Ecuadortelecom S.A.,EC 8 - AS17974 27330 0.5% 19.6 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia,ID 9 - AS8402 25267 0.4% 85.9 -- CORBINA-AS OJSC "Vimpelcom",RU 10 - AS3 24068 0.4% 1306.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 11 - AS28642 23749 0.4% 698.5 -- Contato Internet Ltda EPP,BR 12 - AS14840 22845 0.4% 692.3 -- COMMCORP COMUNICACOES LTDA,BR 13 - AS23342 22257 0.4% 4451.4 -- UNITEDLAYER - Unitedlayer, Inc.,US 14 - AS28573 21917 0.4% 8.0 -- NET Serviços de Comunicação S.A.,BR 15 - AS25003 20008 0.3% 1818.9 -- INTERNET_BINAT Internet Binat Ltd,IL 16 - AS23693 18680 0.3% 196.6 -- TELKOMSEL-ASN-ID PT. Telekomunikasi Selular,ID 17 - AS12066 17844 0.3% 93.4 -- TRICOM,DO 18 - AS3313 17661 0.3% 327.1 -- INET-AS BT Italia S.p.A.,IT 19 - AS13188 17493 0.3% 24.6 -- BANKINFORM-AS CONTENT DELIVERY NETWORK LTD,UA 20 - AS6713 17413 0.3% 24.8 -- IAM-AS,MA TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS12897 1515794 26.4% 126316.2 -- HEAGMEDIANET HSE Medianet GmbH,DE 2 - AS14287 367120 6.4% 61186.7 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 3 - AS3 24068 0.4% 1306.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 4 - AS18135 12169 0.2% 12169.0 -- BTV BTV Cable television,JP 5 - AS61039 6890 0.1% 6890.0 -- ZMZ OAO ZMZ,RU 6 - AS47680 6251 0.1% 6251.0 -- NHCS EOBO Limited,IE 7 - AS62174 5782 0.1% 5782.0 -- INTERPAN-AS INTERPAN LTD.,BG 8 - AS23342 22257 0.4% 4451.4 -- UNITEDLAYER - Unitedlayer, Inc.,US 9 - AS60725 16065 0.3% 4016.2 -- O3B-AS O3b Limited,JE 10 - AS56636 2671 0.1% 2671.0 -- ASVEDARU VEDA Ltd.,RU 11 - AS53823 2406 0.0% 2406.0 -- SMTA - Scio Mutual Telephone Association,US 12 - AS23752 200084 3.5% 2041.7 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 13 - AS25003 20008 0.3% 1818.9 -- INTERNET_BINAT Internet Binat Ltd,IL 14 - AS30944 1712 0.0% 1712.0 -- DKD-AS Bendra Lietuvos, JAV ir Rusijos imone uzdaroji akcine bendrove "DKD",LT 15 - AS2 6234 0.1% 2423.0 -- UDEL-DCN - University of Delaware,US 16 - AS11728 1549 0.0% 1549.0 -- INTERNETXT - Internet Exchange Technology, Inc.,US 17 - AS22048 1379 0.0% 1379.0 -- WHOLE-FOODS - Whole Foods Market, Inc.,US 18 - AS53249 2696 0.1% 1348.0 -- LAWA-AS - Los Angeles World Airport,US 19 - AS6629 10227 0.2% 1278.4 -- NOAA-AS - NOAA,US 20 - AS38808 1246 0.0% 1246.0 -- IMZAK-TRANSIT-AS-AP DSL Service Provider Servers,PK TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 94.16.72.0/21 216945 3.6% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 2 - 94.16.80.0/20 216916 3.6% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 3 - 94.16.64.0/21 216747 3.6% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 4 - 185.9.28.0/22 216560 3.6% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 5 - 194.127.204.0/23 216282 3.6% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 6 - 194.99.108.0/23 216243 3.6% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 7 - 194.45.104.0/23 216096 3.6% AS12897 -- HEAGMEDIANET HSE Medianet GmbH,DE 8 - 202.70.88.0/21 101699 1.7% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 9 - 202.70.64.0/21 96915 1.6% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 10 - 208.70.20.0/22 73429 1.2% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 11 - 208.78.116.0/22 73421 1.2% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 12 - 208.73.244.0/22 73421 1.2% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 13 - 216.162.0.0/20 73421 1.2% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 14 - 208.88.232.0/22 73419 1.2% AS14287 -- TRIAD-TELECOM - Triad Telecom, Inc.,US 15 - 130.0.192.0/21 24068 0.4% AS3 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 16 - 64.29.130.0/24 22160 0.4% AS23342 -- UNITEDLAYER - Unitedlayer, Inc.,US 17 - 192.115.44.0/22 19988 0.3% AS25003 -- INTERNET_BINAT Internet Binat Ltd,IL 18 - 42.83.48.0/20 12169 0.2% AS18135 -- BTV BTV Cable television,JP 19 - 71.19.134.0/23 11137 0.2% AS3313 -- INET-AS BT Italia S.p.A.,IT 20 - 192.58.232.0/24 10195 0.2% AS6629 -- NOAA-AS - NOAA,US Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 15 Nov '14

15 Nov '14

This report has been generated at Fri Nov 14 21:14:18 2014 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 07-11-14 528597 291888 08-11-14 529295 291872 09-11-14 528850 291914 10-11-14 528865 291936 11-11-14 529156 292033 12-11-14 529114 291833 13-11-14 528626 292350 14-11-14 529142 292356 AS Summary 48845 Number of ASes in routing system 19622 Number of ASes announcing only one prefix 5632 Largest number of prefixes announced by an AS AS4538 : ERX-CERNET-BKB China Education and Research Network Center,CN 120193024 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street,CN Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 14Nov14 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 529166 292346 236820 44.8% All ASes AS4538 5632 2094 3538 62.8% ERX-CERNET-BKB China Education and Research Network Center,CN AS6389 2894 116 2778 96.0% BELLSOUTH-NET-BLK - BellSouth.net Inc.,US AS17974 2841 83 2758 97.1% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia,ID AS22773 2841 165 2676 94.2% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.,US AS28573 2450 285 2165 88.4% NET Serviços de Comunicação S.A.,BR AS4766 2963 1341 1622 54.7% KIXS-AS-KR Korea Telecom,KR AS10620 3034 1549 1485 48.9% Telmex Colombia S.A.,CO AS7303 1770 290 1480 83.6% Telecom Argentina S.A.,AR AS9808 1483 54 1429 96.4% CMNET-GD Guangdong Mobile Communication Co.Ltd.,CN AS8402 1322 28 1294 97.9% CORBINA-AS OJSC "Vimpelcom",RU AS4755 1923 641 1282 66.7% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP,IN AS6147 1368 104 1264 92.4% Telefonica del Peru S.A.A.,PE AS20115 1822 560 1262 69.3% CHARTER-NET-HKY-NC - Charter Communications,US AS4323 1648 414 1234 74.9% TWTC - tw telecom holdings, inc.,US AS7545 2470 1253 1217 49.3% TPG-INTERNET-AP TPG Telecom Limited,AU AS9498 1315 110 1205 91.6% BBIL-AP BHARTI Airtel Ltd.,IN AS18566 2044 869 1175 57.5% MEGAPATH5-US - MegaPath Corporation,US AS7552 1208 54 1154 95.5% VIETEL-AS-AP Viettel Corporation,VN AS6983 1594 459 1135 71.2% ITCDELTA - Earthlink, Inc.,US AS34984 1840 823 1017 55.3% TELLCOM-AS TELLCOM ILETISIM HIZMETLERI A.S.,TR AS4812 1525 509 1016 66.6% CHINANET-SH-AP China Telecom (Group),CN AS7738 999 83 916 91.7% Telemar Norte Leste S.A.,BR AS7029 1881 978 903 48.0% WINDSTREAM - Windstream Communications Inc,US AS22561 1315 426 889 67.6% AS22561 - CenturyTel Internet Holdings, Inc.,US AS4788 1106 258 848 76.7% TMNET-AS-AP TM Net, Internet Service Provider,MY AS38285 975 130 845 86.7% M2TELECOMMUNICATIONS-AU M2 Telecommunications Group Ltd,AU AS24560 1184 349 835 70.5% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services,IN AS31148 1045 260 785 75.1% FREENET-AS Freenet Ltd.,UA AS26615 914 133 781 85.4% Tim Celular S.A.,BR AS8151 1482 703 779 52.6% Uninet S.A. de C.V.,MX Total 56888 15121 41767 73.4% Top 30 total Possible Bogus Routes 5.100.241.0/24 AS19957 -Reserved AS-,ZZ 23.252.224.0/20 AS62502 -Reserved AS-,ZZ 23.252.224.0/21 AS62502 -Reserved AS-,ZZ 23.252.232.0/21 AS62502 -Reserved AS-,ZZ 24.231.96.0/24 AS21548 MTO - MTO Telecom Inc.,CA 27.100.7.0/24 AS56096 31.217.248.0/21 AS44902 COV-ASN COVAGE NETWORKS SASU,FR 37.16.88.0/23 AS57652 -Reserved AS-,ZZ 41.73.1.0/24 AS37004 -Reserved AS-,ZZ 41.73.2.0/24 AS37004 -Reserved AS-,ZZ 41.73.10.0/24 AS37004 -Reserved AS-,ZZ 41.73.11.0/24 AS37004 -Reserved AS-,ZZ 41.73.12.0/24 AS37004 -Reserved AS-,ZZ 41.73.13.0/24 AS37004 -Reserved AS-,ZZ 41.73.14.0/24 AS37004 -Reserved AS-,ZZ 41.73.15.0/24 AS37004 -Reserved AS-,ZZ 41.73.16.0/24 AS37004 -Reserved AS-,ZZ 41.73.18.0/24 AS37004 -Reserved AS-,ZZ 41.73.20.0/24 AS37004 -Reserved AS-,ZZ 41.73.21.0/24 AS37004 -Reserved AS-,ZZ 41.76.48.0/21 AS36969 MTL-AS,MW 41.78.180.0/23 AS37265 -Reserved AS-,ZZ 41.189.96.0/20 AS37000 -Reserved AS-,ZZ 41.189.127.0/24 AS37000 -Reserved AS-,ZZ 41.189.128.0/24 AS37000 -Reserved AS-,ZZ 41.191.108.0/22 AS37004 -Reserved AS-,ZZ 41.191.108.0/24 AS37004 -Reserved AS-,ZZ 41.191.109.0/24 AS37004 -Reserved AS-,ZZ 41.191.110.0/24 AS37004 -Reserved AS-,ZZ 41.191.111.0/24 AS37004 -Reserved AS-,ZZ 41.223.208.0/22 AS37000 -Reserved AS-,ZZ 41.242.152.0/22 AS37558 LITC,LY 41.242.156.0/22 AS37558 LITC,LY 45.160.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.164.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.168.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.172.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.176.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.180.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.184.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.188.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.224.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.228.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.232.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.236.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 64.25.16.0/23 AS19535 -Reserved AS-,ZZ 64.25.20.0/24 AS19535 -Reserved AS-,ZZ 64.25.21.0/24 AS19535 -Reserved AS-,ZZ 64.25.22.0/24 AS19535 -Reserved AS-,ZZ 64.25.24.0/23 AS19535 -Reserved AS-,ZZ 64.25.27.0/24 AS7046 RFC2270-UUNET-CUSTOMER - MCI Communications Services, Inc. d/b/a Verizon Business,US 64.25.28.0/23 AS19535 -Reserved AS-,ZZ 65.75.216.0/23 AS10494 AAI - Accurate Automation, Inc.,US 65.75.217.0/24 AS10494 AAI - Accurate Automation, Inc.,US 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global,US 66.180.64.0/21 AS32558 ZEUTER - Zeuter Development Corporation,CA 66.187.240.0/20 AS14552 ACS-SOUTHEASTDATACENTER - Affiliated Computer Services, Inc.,US 66.205.224.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc.,US 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 67.210.0.0/20 AS62502 -Reserved AS-,ZZ 67.210.0.0/21 AS62502 -Reserved AS-,ZZ 67.210.8.0/21 AS62502 -Reserved AS-,ZZ 72.19.0.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc.,US 74.113.200.0/23 AS46939 -Reserved AS-,ZZ 74.114.52.0/22 AS40818 -Reserved AS-,ZZ 74.114.52.0/23 AS40818 -Reserved AS-,ZZ 74.114.52.0/24 AS40818 -Reserved AS-,ZZ 74.114.53.0/24 AS40818 -Reserved AS-,ZZ 74.114.54.0/23 AS40818 -Reserved AS-,ZZ 74.114.54.0/24 AS40818 -Reserved AS-,ZZ 74.114.55.0/24 AS40818 -Reserved AS-,ZZ 74.114.184.0/22 AS19888 -Reserved AS-,ZZ 74.118.132.0/22 AS5117 -Reserved AS-,ZZ 74.120.212.0/23 AS32326 MORPHOTRUST-USA - MorphoTrust USA, Inc.,US 74.120.214.0/23 AS32326 MORPHOTRUST-USA - MorphoTrust USA, Inc.,US 74.121.24.0/22 AS36263 FORONA - Forona Technologies, Inc.,US 74.123.136.0/21 AS53358 -Reserved AS-,ZZ 77.243.91.0/24 AS42597 -Reserved AS-,ZZ 80.78.133.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.134.0/23 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.134.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.135.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.250.32.0/22 AS37106 ODUA-AS,NG 85.202.160.0/20 AS44404 -Reserved AS-,ZZ 89.31.24.0/23 AS41455 -Reserved AS-,ZZ 89.31.26.0/23 AS41455 -Reserved AS-,ZZ 89.31.28.0/22 AS41455 -Reserved AS-,ZZ 91.103.8.0/24 AS42551 -Reserved AS-,ZZ 91.103.9.0/24 AS42551 -Reserved AS-,ZZ 91.103.10.0/24 AS42551 -Reserved AS-,ZZ 91.103.11.0/24 AS42551 -Reserved AS-,ZZ 91.193.60.0/22 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 91.195.66.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 91.197.36.0/22 AS43359 -Reserved AS-,ZZ 91.220.84.0/24 AS5577 ROOT root SA,LU 98.143.160.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.161.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.162.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.163.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.164.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.165.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.166.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.167.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.168.0/22 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.172.0/22 AS26566 -Reserved AS-,ZZ 98.143.172.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.173.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.174.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.175.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. ,AU 103.6.108.0/22 AS55526 NOIDASOFTWARETECHNOLOGYPARK-IN NOIDA Software Technology Park Ltd,IN 103.10.222.0/24 AS13189 103.14.231.0/24 AS58680 103.15.92.0/22 AS23818 JETINTERNET JETINTERNET Corporation,JP 103.18.76.0/22 AS18097 DCN D.C.N. Corporation,JP 103.18.248.0/22 AS18097 DCN D.C.N. Corporation,JP 103.19.0.0/22 AS18097 DCN D.C.N. Corporation,JP 103.20.56.0/24 AS13239 103.20.100.0/24 AS45334 AIRCEL-AS-AP Dishnet Wireless Limited,IN 103.20.101.0/24 AS45334 AIRCEL-AS-AP Dishnet Wireless Limited,IN 103.21.4.0/22 AS12182 INTERNAP-2BLK - Internap Network Services Corporation,US 103.26.116.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.228.132.0/22 AS4826 VOCUS-BACKBONE-AS Vocus Connect International Backbone,AU 103.248.88.0/22 AS23818 JETINTERNET JETINTERNET Corporation,JP 103.248.220.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.250.0.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.251.244.0/22 AS55536 PSWITCH-HK Pacswitch Colocation & Datacentre,HK 104.243.32.0/20 AS20473 AS-CHOOPA - Choopa, LLC,US 104.244.157.0/24 AS29761 AS-QUADRANET - QuadraNet, Inc,US 104.244.158.0/24 AS31863 DACEN-2 - Centrilogic, Inc.,US 116.206.72.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 116.206.85.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 116.206.103.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP,IN 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street,CN 124.158.28.0/22 AS45857 142.147.62.0/24 AS3958 AIRCANADA - Air Canada,CA 162.210.240.0/24 AS17246 -Reserved AS-,ZZ 162.210.241.0/24 AS17246 -Reserved AS-,ZZ 162.210.244.0/24 AS17246 -Reserved AS-,ZZ 162.210.245.0/24 AS17246 -Reserved AS-,ZZ 162.210.246.0/24 AS17246 -Reserved AS-,ZZ 162.210.247.0/24 AS17246 -Reserved AS-,ZZ 162.217.156.0/22 AS62502 -Reserved AS-,ZZ 162.217.156.0/23 AS62502 -Reserved AS-,ZZ 162.217.158.0/23 AS62502 -Reserved AS-,ZZ 162.221.48.0/21 AS62502 -Reserved AS-,ZZ 162.221.48.0/22 AS62502 -Reserved AS-,ZZ 162.221.52.0/22 AS62502 -Reserved AS-,ZZ 162.223.64.0/21 AS62502 -Reserved AS-,ZZ 162.223.64.0/22 AS62502 -Reserved AS-,ZZ 162.223.68.0/22 AS62502 -Reserved AS-,ZZ 162.244.140.0/24 AS17246 -Reserved AS-,ZZ 162.244.141.0/24 AS17246 -Reserved AS-,ZZ 162.244.142.0/24 AS17246 -Reserved AS-,ZZ 162.244.143.0/24 AS17246 -Reserved AS-,ZZ 166.93.0.0/16 AS23537 CRITIGEN - Micro Source, Inc.,US 172.85.0.0/24 AS29571 CITelecom-AS,CI 172.85.1.0/24 AS29571 CITelecom-AS,CI 172.85.2.0/24 AS29571 CITelecom-AS,CI 172.85.3.0/24 AS29571 CITelecom-AS,CI 172.86.0.0/24 AS29571 CITelecom-AS,CI 172.86.1.0/24 AS29571 CITelecom-AS,CI 172.86.2.0/24 AS29571 CITelecom-AS,CI 172.87.0.0/24 AS29571 CITelecom-AS,CI 172.88.0.0/24 AS29571 CITelecom-AS,CI 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group),CN 176.111.168.0/22 AS50586 MACROSOLUTIONS MacroSolution SRL,RO 182.237.25.0/24 AS10201 DWL-AS-IN Dishnet Wireless Limited. Broadband Wireless,IN 185.28.180.0/22 AS18097 DCN D.C.N. Corporation,JP 185.77.12.0/24 AS20136 WIMIONLINE WimiOnline BVBA,BE 185.77.13.0/24 AS20136 WIMIONLINE WimiOnline BVBA,BE 185.77.14.0/23 AS20136 WIMIONLINE WimiOnline BVBA,BE 190.124.252.0/22 AS7303 Telecom Argentina S.A.,AR 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc,US 192.25.10.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.11.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.13.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.14.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.34.152.0/21 AS10835 VISIONARY - Visionary Communications, Inc.,US 192.75.23.0/24 AS2579 AS2579 - Alcatel-Lucent,FR 192.75.239.0/24 AS23498 CDSI - COGECODATA,CA 192.84.24.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.101.72.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.107.1.0/24 AS59377 ELE-MAGIC-TRANSIT 6 Bingshantang Industrial Park, Shawan, Longgang District, Shenzhen, China,CN 192.124.252.0/22 AS680 DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.,DE 192.131.233.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc.,US 192.149.81.0/24 AS14454 PERIMETER-ESECURITY - Perimeter eSecurity,US 192.154.32.0/19 AS81 NCREN - MCNC,US 192.154.64.0/19 AS81 NCREN - MCNC,US 192.155.48.0/22 AS209 ASN-QWEST - Qwest Communications Company, LLC,US 192.155.52.0/23 AS14455 SUNGARD-RECOVERY - Sungard Network Solutions, Inc.,US 192.155.57.0/24 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.58.0/23 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.61.0/24 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.65.0/24 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.66.0/24 AS174 COGENT-174 - Cogent Communications,US 192.155.67.0/24 AS174 COGENT-174 - Cogent Communications,US 192.155.68.0/24 AS174 COGENT-174 - Cogent Communications,US 192.166.32.0/20 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.188.208.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 192.245.195.0/24 AS7381 SUNGARDRS - SunGard Availability Services LP,US 193.9.59.0/24 AS1257 TELE2,SE 193.16.106.0/24 AS31539 -Reserved AS-,ZZ 193.16.145.0/24 AS31392 -Reserved AS-,ZZ 193.22.86.0/24 AS24751 MULTIFI-AS Jakobstadsnejdens Telefon Ab,FI 193.22.224.0/20 AS3322 -Reserved AS-,ZZ 193.22.238.0/23 AS62383 LDS-AS Lambrechts Data Services VOF,BE 193.26.213.0/24 AS31641 BYTEL-AS Bytel Ltd,GB 193.28.14.0/24 AS34309 LINK11 Link11 GmbH,DE 193.33.6.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.33.252.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.46.200.0/24 AS34243 WEBAGE Web Age Ltd,GB 193.93.6.0/23 AS35559 SOMEADDRESS Someaddress Networks Ltd,GB 193.111.229.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.149.2.0/23 AS15919 INTERHOST Servicios de Hosting en Internet S.A.,ES 193.164.152.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.178.196.0/22 AS15657 SPEEDBONE-AS Speedbone Internet & Connectivity GmbH,DE 193.188.252.0/24 AS8697 JTC-AS8697 Jordan Telecommunications Company,JO 193.200.244.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.201.244.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.201.245.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.201.246.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.202.8.0/21 AS6824 HERMES-NETWORK Hermes Telecom International Ltd,GB 193.202.9.0/24 AS6824 HERMES-NETWORK Hermes Telecom International Ltd,GB 193.223.103.0/24 AS8437 UTA-AS Tele2 Telecommunication GmbH,AT 193.227.109.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.227.236.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.6.252.0/24 AS21202 DCSNET-AS Bredband2 AB,SE 194.9.8.0/23 AS2863 SPRITELINK Centor AB,SE 194.9.8.0/24 AS2863 SPRITELINK Centor AB,SE 194.33.11.0/24 AS8943 JUMP Jump Networks Ltd.,GB 194.39.78.0/23 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 194.49.17.0/24 AS13135 CREW-AS Wieske's Crew GmbH,DE 194.50.8.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.60.88.0/21 AS5089 NTL Virgin Media Limited,GB 194.63.152.0/22 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.76.224.0/24 AS34701 WITZENMANN-AS Witzenmann GmbH, Pforzheim,DE 194.76.225.0/24 AS34701 WITZENMANN-AS Witzenmann GmbH, Pforzheim,DE 194.79.36.0/22 AS3257 TINET-BACKBONE Tinet SpA,DE 194.88.6.0/24 AS35093 RO-HTPASSPORT High Tech Passport Ltd SUA California San Jose SUCURSALA BUCURESTI ROMANIA,RO 194.88.226.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.99.67.0/24 AS9083 CARPENET carpeNet Information Technologies GmbH,DE 194.126.152.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.126.219.0/24 AS34545 -Reserved AS-,ZZ 194.126.233.0/24 AS31235 SKIWEBCENTER-AS SKIWEBCENTER SARL,FR 194.150.214.0/23 AS30880 SPACEDUMP-AS SpaceDump IT AB,SE 194.156.179.0/24 AS3209 VODANET Vodafone GmbH,DE 194.180.25.0/24 AS21358 ATOS-ORIGIN-DE-AS Atos Information Technology GmbH,DE 194.187.24.0/22 AS8856 UKRNET UkrNet Ltd,UA 195.8.48.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.8.48.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.8.119.0/24 AS34304 TEENTELECOM Teen Telecom SRL,RO 195.42.232.0/22 AS15657 SPEEDBONE-AS Speedbone Internet & Connectivity GmbH,DE 195.85.194.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.85.201.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.110.0.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.128.240.0/23 AS21202 DCSNET-AS Bredband2 AB,SE 195.149.119.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.189.174.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.216.234.0/24 AS31309 NMV-AS New Media Ventures BVBA,BE 195.234.156.0/24 AS25028 -Reserved AS-,ZZ 195.242.182.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.244.18.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.245.98.0/23 AS48918 GLOBALWAYS GLOBALWAYS AG,DE 196.3.181.0/24 AS37004 -Reserved AS-,ZZ 196.3.182.0/24 AS37004 -Reserved AS-,ZZ 196.3.183.0/24 AS37004 -Reserved AS-,ZZ 196.6.0.0/24 AS32768 routability-tests,MU 196.22.8.0/24 AS27822 Emerging Markets Communications de Argentina S.R.L,AR 196.22.11.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 196.192.124.0/23 AS37301 AFRINIC-ZA-CPT-AS,MU 196.216.254.0/24 AS32768 routability-tests,MU 198.22.195.0/24 AS54583 -Reserved AS-,ZZ 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc.,US 198.71.17.0/24 AS11268 -Reserved AS-,ZZ 198.71.18.0/23 AS11268 -Reserved AS-,ZZ 198.71.20.0/23 AS11268 -Reserved AS-,ZZ 198.71.22.0/24 AS11268 -Reserved AS-,ZZ 198.71.26.0/24 AS11268 -Reserved AS-,ZZ 198.71.27.0/24 AS11268 -Reserved AS-,ZZ 198.74.11.0/24 AS14573 KEYSPANENERGY-NE1 - Keyspan Energy,US 198.74.13.0/24 AS14573 KEYSPANENERGY-NE1 - Keyspan Energy,US 198.74.38.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.74.39.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.74.40.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.97.72.0/21 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.96.0/19 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.192.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.240.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.163.214.0/24 AS21804 ACCESS-SK - Access Communications Co-operative Limited,CA 198.163.215.0/24 AS6327 SHAW - Shaw Communications Inc.,CA 198.163.216.0/24 AS6327 SHAW - Shaw Communications Inc.,CA 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 198.252.165.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.166.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.167.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.168.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.169.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 199.7.160.0/21 AS13703 BROADRIVER-13703 - BroadRiver Communication Corp.,US 199.7.162.0/24 AS22626 -Reserved AS-,ZZ 199.7.167.0/24 AS22626 -Reserved AS-,ZZ 199.85.9.0/24 AS852 ASN852 - TELUS Communications Inc.,CA 199.88.52.0/22 AS17018 QTS-SACRAMENTO-1 - Quality Investment Properties Sacramento, LLC,US 199.116.200.0/21 AS22830 -Reserved AS-,ZZ 199.121.0.0/16 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 199.123.16.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 200.1.112.0/24 AS29754 GO2TEL - GO2TEL.COM INC.,US 200.58.248.0/21 AS27849 200.81.48.0/24 AS11664 Techtel LMDS Comunicaciones Interactivas S.A.,AR 200.81.49.0/24 AS11664 Techtel LMDS Comunicaciones Interactivas S.A.,AR 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd.,KR 202.53.138.0/24 AS4058 CITICTEL-CPC-AS4058 CITIC Telecom International CPC Limited,HK 202.58.113.0/24 AS19161 -Reserved AS-,ZZ 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network,CN 202.158.251.0/24 AS9255 CONNECTPLUS-AS Singapore Telecom,SG 202.165.120.0/24 AS19161 -Reserved AS-,ZZ 202.165.124.0/24 AS23749 GLOBAL-TRANSIT-AS-HKCOLO-AP HKCOLO ltd. Internet Service Provider,HK 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd.,IN 203.28.240.0/20 AS10148 UNIMELB-AS-AP The University of Melbourne, Melbourne, Victoria,AU 203.142.219.0/24 AS45149 203.160.48.0/21 AS38008 203.161.184.0/24 AS9328 GLOBALCENTER-AU Datacom Victoria,AU 203.189.116.0/22 AS45606 203.189.116.0/24 AS45606 203.189.117.0/24 AS45606 203.189.118.0/24 AS45606 203.189.119.0/24 AS45606 204.10.88.0/21 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 204.15.208.0/22 AS13706 COMPLETEWEBNET - CompleteWeb.Net LLC,US 204.16.96.0/24 AS19972 -Reserved AS-,ZZ 204.16.97.0/24 AS19972 -Reserved AS-,ZZ 204.16.98.0/24 AS19972 -Reserved AS-,ZZ 204.16.99.0/24 AS19972 -Reserved AS-,ZZ 204.69.144.0/24 AS27283 RJF-INTERNET - Raymond James Financial, Inc.,US 204.87.251.0/24 AS22217 -Reserved AS-,ZZ 204.106.16.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 204.187.11.0/24 AS51113 ELEKTA-AS Elekta,GB 205.137.240.0/20 AS11686 ENA - Education Networks of America,US 205.159.44.0/24 AS40157 ADESA-CORP-AS - ADESA Corp,US 205.166.231.0/24 AS7029 WINDSTREAM - Windstream Communications Inc,US 205.211.160.0/24 AS30045 UHN-ASN - University Health Network,CA 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company,US 206.223.224.0/24 AS21548 MTO - MTO Telecom Inc.,CA 207.2.120.0/21 AS6221 USCYBERSITES - US Cybersites, Inc,US 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc,US 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc,US 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc.,US 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc.,US 207.254.128.0/21 AS30689 FLOW-NET - FLOW,JM 207.254.128.0/24 AS30689 FLOW-NET - FLOW,JM 207.254.136.0/21 AS30689 FLOW-NET - FLOW,JM 208.66.64.0/24 AS16936 -Reserved AS-,ZZ 208.66.65.0/24 AS16936 -Reserved AS-,ZZ 208.66.66.0/24 AS16936 -Reserved AS-,ZZ 208.66.67.0/24 AS16936 -Reserved AS-,ZZ 208.67.132.0/22 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 208.69.192.0/23 AS6461 ABOVENET - Abovenet Communications, Inc,US 208.69.195.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 208.75.152.0/21 AS32146 -Reserved AS-,ZZ 208.76.20.0/24 AS31812 -Reserved AS-,ZZ 208.76.21.0/24 AS31812 -Reserved AS-,ZZ 208.77.164.0/24 AS22659 -Reserved AS-,ZZ 208.77.166.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC,US 208.84.232.0/24 AS33131 -Reserved AS-,ZZ 208.84.233.0/24 AS33131 -Reserved AS-,ZZ 208.84.234.0/24 AS33131 -Reserved AS-,ZZ 208.84.237.0/24 AS33131 -Reserved AS-,ZZ 208.84.238.0/24 AS33131 -Reserved AS-,ZZ 208.94.216.0/23 AS13629 -Reserved AS-,ZZ 208.94.219.0/24 AS13629 -Reserved AS-,ZZ 208.94.221.0/24 AS13629 -Reserved AS-,ZZ 208.94.223.0/24 AS13629 -Reserved AS-,ZZ 209.135.171.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 209.135.175.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 209.177.64.0/20 AS6461 ABOVENET - Abovenet Communications, Inc,US 209.193.112.0/20 AS209 ASN-QWEST - Qwest Communications Company, LLC,US 209.209.51.0/24 AS18687 MPOWER-2 - MPOWER COMMUNICATIONS CORP.,US 209.212.63.0/24 AS16467 ASN-NEXTWEB-R1 - Nextweb, Inc,US 209.234.112.0/23 AS32252 -Reserved AS-,ZZ 209.234.114.0/23 AS32252 -Reserved AS-,ZZ 209.234.116.0/24 AS32252 -Reserved AS-,ZZ 209.234.117.0/24 AS32252 -Reserved AS-,ZZ 209.234.118.0/24 AS32252 -Reserved AS-,ZZ 209.234.119.0/24 AS32252 -Reserved AS-,ZZ 209.234.120.0/24 AS32252 -Reserved AS-,ZZ 209.234.121.0/24 AS32252 -Reserved AS-,ZZ 209.234.122.0/24 AS32252 -Reserved AS-,ZZ 213.255.128.0/20 AS24863 LINKdotNET-AS,EG 213.255.144.0/20 AS24863 LINKdotNET-AS,EG 216.146.0.0/19 AS11915 US-TELEPACIFIC - TelePacific Communications,US 216.152.24.0/22 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.,US 216.170.96.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.101.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.104.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.105.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC.,US 216.238.192.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.238.193.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.238.194.0/24 AS26566 -Reserved AS-,ZZ 216.238.196.0/22 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.251.50.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN 216.251.53.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN 216.251.62.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 14 Nov '14

14 Nov '14

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 15 Nov, 2014 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 523387 Prefixes after maximum aggregation: 200080 Deaggregation factor: 2.62 Unique aggregates announced to Internet: 254079 Total ASes present in the Internet Routing Table: 48571 Prefixes per ASN: 10.78 Origin-only ASes present in the Internet Routing Table: 36287 Origin ASes announcing only one prefix: 16326 Transit ASes present in the Internet Routing Table: 6207 Transit-only ASes present in the Internet Routing Table: 172 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 78 Max AS path prepend of ASN ( 55644) 71 Prefixes from unregistered ASNs in the Routing Table: 1609 Unregistered ASNs in the Routing Table: 432 Number of 32-bit ASNs allocated by the RIRs: 7908 Number of 32-bit ASNs visible in the Routing Table: 6077 Prefixes from 32-bit ASNs in the Routing Table: 21732 Number of bogon 32-bit ASNs visible in the Routing Table: 2 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 385 Number of addresses announced to Internet: 2713710468 Equivalent to 161 /8s, 191 /16s and 239 /24s Percentage of available address space announced: 73.3 Percentage of allocated address space announced: 73.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 96.9 Total number of prefixes smaller than registry allocations: 176898 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 133068 Total APNIC prefixes after maximum aggregation: 37013 APNIC Deaggregation factor: 3.60 Prefixes being announced from the APNIC address blocks: 137428 Unique aggregates announced from the APNIC address blocks: 53664 APNIC Region origin ASes present in the Internet Routing Table: 4988 APNIC Prefixes per ASN: 27.55 APNIC Region origin ASes announcing only one prefix: 1204 APNIC Region transit ASes present in the Internet Routing Table: 864 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 78 Number of APNIC region 32-bit ASNs visible in the Routing Table: 1169 Number of APNIC addresses announced to Internet: 737090368 Equivalent to 43 /8s, 239 /16s and 27 /24s Percentage of available APNIC address space announced: 86.1 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 131072-135580 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 171939 Total ARIN prefixes after maximum aggregation: 85566 ARIN Deaggregation factor: 2.01 Prefixes being announced from the ARIN address blocks: 173830 Unique aggregates announced from the ARIN address blocks: 81757 ARIN Region origin ASes present in the Internet Routing Table: 16398 ARIN Prefixes per ASN: 10.60 ARIN Region origin ASes announcing only one prefix: 6088 ARIN Region transit ASes present in the Internet Routing Table: 1705 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 22 Number of ARIN region 32-bit ASNs visible in the Routing Table: 257 Number of ARIN addresses announced to Internet: 1053686464 Equivalent to 62 /8s, 205 /16s and 250 /24s Percentage of available ARIN address space announced: 55.7 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 125891 Total RIPE prefixes after maximum aggregation: 63703 RIPE Deaggregation factor: 1.98 Prefixes being announced from the RIPE address blocks: 131484 Unique aggregates announced from the RIPE address blocks: 82809 RIPE Region origin ASes present in the Internet Routing Table: 17803 RIPE Prefixes per ASN: 7.39 RIPE Region origin ASes announcing only one prefix: 8184 RIPE Region transit ASes present in the Internet Routing Table: 2931 Average RIPE Region AS path length visible: 4.9 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 3196 Number of RIPE addresses announced to Internet: 691635332 Equivalent to 41 /8s, 57 /16s and 132 /24s Percentage of available RIPE address space announced: 100.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-202239 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 58329 Total LACNIC prefixes after maximum aggregation: 10882 LACNIC Deaggregation factor: 5.36 Prefixes being announced from the LACNIC address blocks: 67079 Unique aggregates announced from the LACNIC address blocks: 30727 LACNIC Region origin ASes present in the Internet Routing Table: 2370 LACNIC Prefixes per ASN: 28.30 LACNIC Region origin ASes announcing only one prefix: 643 LACNIC Region transit ASes present in the Internet Routing Table: 472 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 30 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 1391 Number of LACNIC addresses announced to Internet: 167846400 Equivalent to 10 /8s, 1 /16s and 34 /24s Percentage of available LACNIC address space announced: 100.0 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-265628 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 12329 Total AfriNIC prefixes after maximum aggregation: 2872 AfriNIC Deaggregation factor: 4.29 Prefixes being announced from the AfriNIC address blocks: 13181 Unique aggregates announced from the AfriNIC address blocks: 4778 AfriNIC Region origin ASes present in the Internet Routing Table: 733 AfriNIC Prefixes per ASN: 17.98 AfriNIC Region origin ASes announcing only one prefix: 207 AfriNIC Region transit ASes present in the Internet Routing Table: 152 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 64 Number of AfriNIC addresses announced to Internet: 60012544 Equivalent to 3 /8s, 147 /16s and 184 /24s Percentage of available AfriNIC address space announced: 59.6 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5620 4190 71 China Education and Research 4766 2962 11585 932 Korea Telecom 17974 2841 903 77 PT Telekomunikasi Indonesia 7545 2458 336 126 TPG Telecom Limited 4755 1923 412 190 TATA Communications formerly 9829 1670 1322 37 National Internet Backbone 4812 1522 2098 110 China Telecom (Group) 9808 1487 6655 16 Guangdong Mobile Communicatio 4808 1425 2213 427 CNCGROUP IP network China169 9583 1362 112 561 Sify Limited Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 2894 3688 51 BellSouth.net Inc. 22773 2838 2956 144 Cox Communications Inc. 18566 2045 379 184 MegaPath Corporation 20115 1821 1796 479 Charter Communications 7029 1711 2180 363 Windstream Communications Inc 4323 1640 1052 412 tw telecom holdings, inc. 6983 1595 867 250 ITC^Deltacom 30036 1494 311 604 Mediacom Communications Corp 701 1430 11266 710 MCI Communications Services, 22561 1314 409 242 CenturyTel Internet Holdings, Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 34984 1839 296 355 TELLCOM ILETISIM HIZMETLERI A 20940 1502 582 1107 Akamai International B.V. 8402 1343 544 15 OJSC "Vimpelcom" 31148 1045 45 21 Freenet Ltd. 13188 1018 99 38 TOV "Bank-Inform" 8551 948 373 43 Bezeq International-Ltd 6849 828 356 26 JSC "Ukrtelecom" 9198 803 346 32 JSC Kazakhtelecom 6830 795 2339 438 Liberty Global Operations B.V 12479 767 785 96 France Telecom Espana SA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3034 492 244 Telmex Colombia S.A. 28573 2450 2256 111 NET Serviços de Comunicação S 7303 1766 1171 241 Telecom Argentina S.A. 8151 1475 3015 428 Uninet S.A. de C.V. 6147 1368 374 30 Telefonica del Peru S.A.A. 6503 1133 433 58 Axtel, S.A.B. de C.V. 7738 999 1882 41 Telemar Norte Leste S.A. 27947 916 130 52 Telconet S.A 26615 914 2325 35 Tim Celular S.A. 3816 891 383 151 COLOMBIA TELECOMUNICACIONES S Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1399 958 13 TE-AS 24863 956 280 26 Link Egypt (Link.NET) 6713 586 762 34 Office National des Postes et 36992 359 824 29 ETISALAT MISR 24835 308 144 9 Vodafone Data 37492 280 125 63 Orange Tunisie 3741 249 920 212 Internet Solutions 29571 245 22 17 Cote d'Ivoire Telecom 37054 242 19 6 Data Telecom Service 37457 187 161 7 Telkom SA Ltd. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5620 4190 71 China Education and Research 10620 3034 492 244 Telmex Colombia S.A. 4766 2962 11585 932 Korea Telecom 6389 2894 3688 51 BellSouth.net Inc. 17974 2841 903 77 PT Telekomunikasi Indonesia 22773 2838 2956 144 Cox Communications Inc. 7545 2458 336 126 TPG Telecom Limited 28573 2450 2256 111 NET Serviços de Comunicação S 18566 2045 379 184 MegaPath Corporation 4755 1923 412 190 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 2894 2843 BellSouth.net Inc. 10620 3034 2790 Telmex Colombia S.A. 17974 2841 2764 PT Telekomunikasi Indonesia 22773 2838 2694 Cox Communications Inc. 28573 2450 2339 NET Serviços de Comunicação S 7545 2458 2332 TPG Telecom Limited 4766 2962 2030 Korea Telecom 18566 2045 1861 MegaPath Corporation 4755 1923 1733 TATA Communications formerly 9829 1670 1633 National Internet Backbone Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 53506 UNALLOCATED 8.17.102.0/23 3356 Level 3 Communicatio 46467 UNALLOCATED 8.19.192.0/24 46887 Lightower Fiber Netw 20260 UNALLOCATED 8.25.160.0/24 3356 Level 3 Communicatio 20260 UNALLOCATED 8.25.161.0/24 3356 Level 3 Communicatio 46473 UNALLOCATED 8.27.122.0/24 12180 Internap Network Ser 46473 UNALLOCATED 8.27.124.0/24 12180 Internap Network Ser 27205 UNALLOCATED 8.38.16.0/21 6461 Abovenet Communicati 15347 UNALLOCATED 8.224.147.0/24 12064 Cox Communications I 33628 UNALLOCATED 12.0.239.0/24 1239 Sprint Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 5.100.241.0/24 23456 32bit Transition AS 23.252.224.0/20 62502 Xnet Media LLC 23.252.224.0/21 62502 Xnet Media LLC 23.252.232.0/21 62502 Xnet Media LLC 24.231.96.0/24 21548 MTO Telecom Inc. 27.100.7.0/24 56096 >>UNKNOWN<< 31.217.248.0/21 44902 COVAGE NETWORKS SASU 37.16.88.0/23 57652 >>UNKNOWN<< 41.73.1.0/24 37004 >>UNKNOWN<< 41.73.2.0/24 37004 >>UNKNOWN<< Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:12 /10:31 /11:90 /12:262 /13:500 /14:1010 /15:1721 /16:13041 /17:7247 /18:12079 /19:25517 /20:36643 /21:37904 /22:55948 /23:48983 /24:279399 /25:1127 /26:1094 /27:705 /28:15 /29:19 /30:11 /31:0 /32:13 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 22773 2056 2838 Cox Communications Inc. 18566 2000 2045 MegaPath Corporation 6389 1674 2894 BellSouth.net Inc. 30036 1340 1494 Mediacom Communications Corp 6983 1279 1595 ITC^Deltacom 34984 1162 1839 TELLCOM ILETISIM HIZMETLERI A 11492 1161 1214 CABLE ONE, INC. 10620 1074 3034 Telmex Colombia S.A. 8402 1008 1343 OJSC "Vimpelcom" 22561 1005 1314 CenturyTel Internet Holdings, Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1353 2:681 3:3 4:16 5:1180 6:22 8:769 12:1850 13:4 14:1192 15:17 16:2 17:42 18:21 20:51 23:961 24:1758 27:1816 31:1352 32:39 33:2 34:5 36:161 37:1823 38:1012 39:15 40:236 41:2984 42:283 43:633 44:20 45:81 46:2106 47:30 49:758 50:808 52:12 54:59 55:6 56:8 57:32 58:1203 59:720 60:442 61:1732 62:1310 63:1841 64:4425 65:2281 66:4171 67:2030 68:1087 69:3261 70:885 71:458 72:1989 74:2633 75:363 76:410 77:1621 78:916 79:779 80:1324 81:1286 82:811 83:665 84:718 85:1358 86:419 87:1170 88:504 89:1805 90:140 91:5869 92:801 93:1665 94:1930 95:1295 96:416 97:342 98:1071 99:48 100:67 101:754 103:6077 104:563 105:160 106:188 107:712 108:607 109:1982 110:1068 111:1435 112:741 113:917 114:805 115:1222 116:1244 117:1007 118:1603 119:1368 120:446 121:1023 122:2217 123:1697 124:1476 125:1601 128:656 129:389 130:380 131:950 132:427 133:164 134:320 135:82 136:326 137:307 138:387 139:199 140:228 141:422 142:599 143:452 144:504 145:111 146:688 147:561 148:1042 149:413 150:517 151:651 152:479 153:242 154:415 155:631 156:379 157:331 158:281 159:926 160:334 161:622 162:1826 163:371 164:648 165:670 166:309 167:693 168:1115 169:122 170:1430 171:215 172:60 173:1613 174:713 175:581 176:1525 177:3745 178:2108 179:796 180:1812 181:1585 182:1669 183:565 184:707 185:2333 186:2975 187:1655 188:2018 189:1503 190:7709 191:799 192:7785 193:5553 194:4050 195:3629 196:1653 197:817 198:5335 199:5485 200:6495 201:2887 202:9677 203:8991 204:4673 205:2671 206:3036 207:2956 208:3936 209:3817 210:3660 211:2036 212:2480 213:2184 214:843 215:86 216:5645 217:1713 218:716 219:550 220:1303 221:773 222:687 223:615 End of report

1 0

FW: FW: discussion about rogue database objects
by poty＠iiat.ru 14 Nov '14

14 Nov '14

No, I won't do that! I'm against the methods of resolving "problems" which are not exist and I will make all my efforts for not allowing the RPKI to be the only method of doing business. Not very regards, Vladislav -----Original Message----- From: Gert Doering [mailto:gert@space.net] Sent: Thursday, November 13, 2014 11:28 AM To: Potapov Vladislav Cc: gert(a)space.net; routing-wg(a)ripe.net Subject: Re: [routing-wg] FW: discussion about rogue database objects Hi, On Thu, Nov 13, 2014 at 12:25:44PM +0400, poty(a)iiat.ru wrote: > On Wed, Nov 12, 2014 at 11:18:25AM +0400, poty(a)iiat.ru wrote: > > I'm not sure the problem is imminent first hand. > > The problem is real, and needs to be fixed. > ---- > Your word against my word - nothing changed in the world. Evidence out there demonstrates the problem quite clearly (as can be seen in this thread). My word is irrelevant when there is data to back it. I'm stopping the discussion with you now - you've made it very clear that you are not interested in providing a solution and are not acknowledging that the problem even exists. So please go out of the way and let the people that are interested in solving network hijacking do their work. Gert Doering -- NetMaster -- have you enabled IPv6 on something today...? SpaceNet AG Vorstand: Sebastian v. Bomhard Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann D-80807 Muenchen HRB: 136055 (AG Muenchen) Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279

4 4

FW: FW: discussion about rogue database objects
by poty＠iiat.ru 13 Nov '14

13 Nov '14

> > I've already explained why this had been happened at all first hand. > RIRs have different rules and principles and constantly invents new > methods of complicating the situation in exchanging information > between them. > Second thought: the "concern" was raised in presumption that the route > objects "authorize" something to a provider. It is NOT. The absence of > the routing objects would change nothing in the situation. A lot of > providers do not build any filters based on a RIR routing policy at all. Yes. This was also the case with the providers of the rogue AS that started this discussion. There were even prefixes in the RIR db with a different origin AS than the one being announced on the internet. The data in the RIR db seem to have no influence on the routes being announced. You could however argue that a more correct RIR db would make LIRs use this db for actual filtering. ---------------- Absolutely agreed with the last sentence! Maybe not so clear, but I tried to say it earlier. We need internal integrity of the DBs from different RIRs first hand and a way of exchanging the information between them (reliably). It will solve the problem completely. Regards, Vladislav

1 0

FW: FW: FW: discussion about rogue database objects
by poty＠iiat.ru 13 Nov '14

13 Nov '14

Hi Rob, I've already explained why this had been happened at all first hand. RIRs have different rules and principles and constantly invents new methods of complicating the situation in exchanging information between them. Second thought: the "concern" was raised in presumption that the route objects "authorize" something to a provider. It is NOT. The absence of the routing objects would change nothing in the situation. A lot of providers do not build any filters based on a RIR routing policy at all. Then it just was not visible in the DB, but the routes were still here. And at this level no RIR with all its efforts cannot do anything (real routing decision is out of scope of any RIR). And this situation should go exactly in the law department of any company. Solving the problem with adding doubtful "security" is a waste of time and efforts. Regards, Vladislav -----Original Message----- From: Rob Evans [mailto:rhe@nosc.ja.net] Sent: Thursday, November 13, 2014 12:00 PM To: Potapov Vladislav Cc: routing-wg(a)ripe.net Subject: Re: [routing-wg] FW: FW: discussion about rogue database objects Hi Vladislav, > I'm against the methods of resolving "problems" > which are not exist I believe we've already heard of two instances of this problem existing -- the route objects that started this thread off, and Elvis Velea saying it has impacted at least one of his customers. Cheers, Rob

2 1