- routing-wg - mailman.ripe.net

Re: [routing-wg] [db-wg] [anti-abuse-wg] The Ongoing Summer of Hijacks: MNT-SERVERSGET / dnsget.top
by Ronald F. Guilmette 15 Aug '18

15 Aug '18

In message <07e92bc3-2856-a40c-4b4e-c248b941dbd3(a)foobar.org>, Nick Hilliard <nick(a)foobar.org> wrote: >Ronald F. Guilmette via db-wg wrote on 14/08/2018 21:53: >> None of them have even had the courtesy to send me a FOAD message in >> response. >> >> Their silence on these matters is deafening. > >Yes, and there is not a problem with this. The RIPE NCC board of >directors are not involved in day-to-day operations... Wait a minute. Didn't Erik Bais just -advise- me that I -should- be contacting the board? Wouldn't he qualify as an authority, given that he is a chair of a RIPE working group? More to the point, since when has it become a routine part of "day to day operations" to have RIPE members flooding the RIPE data base with blatant bovine excrement? I -do- see, and I -have- reported on an inordinate amount of exactly such deliberate hanky panky being perpetrated within the RIPE region, and within the RIPE data base of late, but I was not aware, until now, that this sort of behavior is nowadays considered, within the RIPE region at least, to be nothing more than "another day at the office". When exactly did the RIPE membership come around to this bland and careless acceptance of the clearly unacceptable? Or has it just always been like this? >If you need to submit a complaint to the RIPE NCC about problem >registrations in the RIPE IRRDB... I see that you have not understood my points at all. Please allow me to try again. The issue I have, and that I have tried to raise, is -not- merely the existance, in the data base, of this one deliberately fradulent entry or that one deliberately fradulent entry. Nor is the real issue even any given *collection* of deliberately fradulent entries that have been placed into the data base by any one specific member. Rather, the real issue I have raised is the question of what, if anything, RIPE is either willing or able to do to disipline any member that has demonstratably engaged in this exact pattern of repeated frauds. Removal of the fradulent data base entries that I have already identified, or that I may in the future identify, is a good thing, but it does not even begin to address the underlying issue: Why does this keep on happening, specifically and, it seems, -exclusively- within the RIPE region? What is RIPE doing, or not doing, that seems to engourage so many RIPE members to try their hand at this exact type of fraud? Could it perhaps be the case that since no one is ever sanctioned in any way for such activities, there is no real downside to giving it a try? >Also, could you kindly not cc: your emails to so many working groups? No >doubt people appreciate how important your reports are, but spamming >your emails across three working groups is, in all fairness, a bit much. Let me see if I have understood you. I've sent my recent messages to exactly and only three mailing lists for three clearly relevant working working groups, namely the data base working group, the routing working group and the (arguably mis-named) "anti-abuse" working group. Are you asserting that my points have nothing whatever to do with the RIPE data base? Are you asserting that my points have nothing whatever to do with routing? Does the deliberate pollution of the data base not constitute a type of "abuse" in your opinion? Just to make sure that I understand, you are apparently asserting that it is now just ordinary "day to day" activity for RIPE to permit the creation, in its data base, of numerous deliberately fradulent entries which then serve to legitimize the hijacking of various IP address blocks, right? And because RIPE "is not the Internet Police" it is also true that nobody on any RIPE mailing list cares about the fact that any of this hijacked IP space... space which RIPE has effectively legitimized... has been or is being sub-leased out to various high-end professional snowshoe spanmmers, who have then proceeded to pump out millions or tens of millions of -actual- spams, right? And yet you have the unmitigated audacity to accuse -me- of "spamming" for the unforgivable act of posting the three clearly relevant WG mailing lists? The gentleman doth protest too much, methinks. That having been said, I am at least pleased to learn that there exists one more member of the RIPE community who evinces at least some concern about the global problem of spam. And I look forward to seeing your concern translated into action with respect to the real and primary issue I have raised, which is the sanctioning of clearly misbehaving members, or rather, the apparently abundant current lack thereof. Regards, rfg

3 3

Weekly Routing Table Report
by cscora＠apnic.net 10 Aug '18

10 Aug '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 11 Aug, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 710351 Prefixes after maximum aggregation (per Origin AS): 272851 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 341377 Total ASes present in the Internet Routing Table: 61486 Prefixes per ASN: 11.55 Origin-only ASes present in the Internet Routing Table: 53097 Origin ASes announcing only one prefix: 23134 Transit ASes present in the Internet Routing Table: 8389 Transit-only ASes present in the Internet Routing Table: 266 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 71 Number of instances of unregistered ASNs: 71 Number of 32-bit ASNs allocated by the RIRs: 23624 Number of 32-bit ASNs visible in the Routing Table: 19037 Prefixes from 32-bit ASNs in the Routing Table: 79679 Number of bogon 32-bit ASNs visible in the Routing Table: 107 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 275 Number of addresses announced to Internet: 2857141828 Equivalent to 170 /8s, 76 /16s and 134 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 237154 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 193620 Total APNIC prefixes after maximum aggregation: 55167 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 191870 Unique aggregates announced from the APNIC address blocks: 79105 APNIC Region origin ASes present in the Internet Routing Table: 8995 APNIC Prefixes per ASN: 21.33 APNIC Region origin ASes announcing only one prefix: 2537 APNIC Region transit ASes present in the Internet Routing Table: 1341 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3958 Number of APNIC addresses announced to Internet: 767223811 Equivalent to 45 /8s, 186 /16s and 232 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 210910 Total ARIN prefixes after maximum aggregation: 100181 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 210886 Unique aggregates announced from the ARIN address blocks: 99818 ARIN Region origin ASes present in the Internet Routing Table: 18212 ARIN Prefixes per ASN: 11.58 ARIN Region origin ASes announcing only one prefix: 6737 ARIN Region transit ASes present in the Internet Routing Table: 1812 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2396 Number of ARIN addresses announced to Internet: 1103025824 Equivalent to 65 /8s, 190 /16s and 214 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 194304 Total RIPE prefixes after maximum aggregation: 92790 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 190611 Unique aggregates announced from the RIPE address blocks: 113115 RIPE Region origin ASes present in the Internet Routing Table: 25398 RIPE Prefixes per ASN: 7.50 RIPE Region origin ASes announcing only one prefix: 11460 RIPE Region transit ASes present in the Internet Routing Table: 3514 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7284 Number of RIPE addresses announced to Internet: 714048896 Equivalent to 42 /8s, 143 /16s and 133 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 92228 Total LACNIC prefixes after maximum aggregation: 20546 LACNIC Deaggregation factor: 4.49 Prefixes being announced from the LACNIC address blocks: 93649 Unique aggregates announced from the LACNIC address blocks: 41078 LACNIC Region origin ASes present in the Internet Routing Table: 7399 LACNIC Prefixes per ASN: 12.66 LACNIC Region origin ASes announcing only one prefix: 2008 LACNIC Region transit ASes present in the Internet Routing Table: 1387 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4944 Number of LACNIC addresses announced to Internet: 172309792 Equivalent to 10 /8s, 69 /16s and 61 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19217 Total AfriNIC prefixes after maximum aggregation: 4104 AfriNIC Deaggregation factor: 4.68 Prefixes being announced from the AfriNIC address blocks: 23060 Unique aggregates announced from the AfriNIC address blocks: 8018 AfriNIC Region origin ASes present in the Internet Routing Table: 1185 AfriNIC Prefixes per ASN: 19.46 AfriNIC Region origin ASes announcing only one prefix: 392 AfriNIC Region transit ASes present in the Internet Routing Table: 237 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 455 Number of AfriNIC addresses announced to Internet: 100085248 Equivalent to 5 /8s, 247 /16s and 46 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4689 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4405 477 468 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2969 1153 83 VIETEL-AS-AP Viettel Group, VN 4766 2830 11132 759 KIXS-AS-KR Korea Telecom, KR 9829 2816 1497 543 BSNL-NIB National Internet Backbone, IN 45899 2573 1634 157 VNPT-AS-VN VNPT Corp, VN 9394 2543 4907 32 CTTNET China TieTong Telecommunications 17974 2261 962 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2249 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2115 417 203 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3442 1324 82 SHAW - Shaw Communications Inc., CA 22773 3253 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 11492 2842 256 421 CABLEONE - CABLE ONE, INC., US 16509 2259 4791 768 AMAZON-02 - Amazon.com, Inc., US 18566 2166 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2124 2641 484 CHARTER-NET-HKY-NC - Charter Communicat 30036 2018 344 142 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 16625 2007 1031 1445 AKAMAI-AS - Akamai Technologies, Inc., 209 1994 5085 604 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 7018 1764 20206 1281 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4682 1613 128 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 2819 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2552 624 1891 AKAMAI-ASN1, US 12389 2042 1891 731 ROSTELECOM-AS, RU 34984 2013 335 506 TELLCOM-AS, TR 9121 1837 1692 19 TTNET, TR 13188 1605 100 39 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1204 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5191 3349 607 Uninet S.A. de C.V., MX 10620 3483 531 456 Telmex Colombia S.A., CO 11830 2657 369 78 Instituto Costarricense de Electricidad 6503 1666 444 63 Axtel, S.A.B. de C.V., MX 7303 1508 1027 189 Telecom Argentina S.A., AR 28573 1087 2241 189 CLARO S.A., BR 3816 1020 508 128 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 933 377 31 Telefonica del Peru S.A.A., PE 11172 929 126 85 Alestra, S. de R.L. de C.V., MX 18881 913 1078 30 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1172 396 48 LINKdotNET-AS, EG 37611 890 107 9 Afrihost, ZA 36903 778 391 137 MT-MPLS, MA 36992 744 1411 40 ETISALAT-MISR, EG 24835 635 818 18 RAYA-AS, EG 8452 602 1730 18 TE-AS TE-AS, EG 37492 474 470 57 ORANGE-, TN 29571 459 68 12 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 23889 373 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5191 3349 607 Uninet S.A. de C.V., MX 4538 4689 4192 74 ERX-CERNET-BKB China Education and Rese 12479 4682 1613 128 UNI2-AS, ES 7545 4405 477 468 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3483 531 456 Telmex Colombia S.A., CO 6327 3442 1324 82 SHAW - Shaw Communications Inc., CA 22773 3253 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 7552 2969 1153 83 VIETEL-AS-AP Viettel Group, VN 11492 2842 256 421 CABLEONE - CABLE ONE, INC., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4538 4689 4615 ERX-CERNET-BKB China Education and Research Net 12479 4682 4554 UNI2-AS, ES 7545 4405 3937 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3442 3360 SHAW - Shaw Communications Inc., CA 22773 3253 3104 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 10620 3483 3027 Telmex Colombia S.A., CO 7552 2969 2886 VIETEL-AS-AP Viettel Group, VN 8551 2819 2775 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11830 2657 2579 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 64514 PRIVATE 5.42.231.0/24 35753 ITC ITC AS number, SA 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 135391 AOFEI-HK AOFEI DATA INTERNATIO 268422 UNALLOCATED 45.160.208.0/24 263321 Ejmnet Tecnologia ltda, BR 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb 419333 UNALLOCATED 84.17.91.0/24 41933 IPRAGAZ-AS Istanbul/ TURKEY, T 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 45.121.32.0/22 134356 UNKNOWN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:291 /13:570 /14:1096 /15:1896 /16:13372 /17:7913 /18:13792 /19:25356 /20:39404 /21:45677 /22:88015 /23:71590 /24:399059 /25:800 /26:602 /27:627 /28:35 /29:20 /30:19 /31:4 /32:53 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3427 4682 UNI2-AS, ES 6327 3231 3442 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 22773 2515 3253 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2281 2819 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 2214 2842 CABLEONE - CABLE ONE, INC., US 18566 2060 2166 MEGAPATH5-US - MegaPath Corporation, US 11830 2005 2657 Instituto Costarricense de Electricidad y Telec 30036 1770 2018 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1575 3483 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1612 2:835 4:18 5:2827 6:43 7:1 8:1128 12:1877 13:210 14:1795 15:31 16:3 17:190 18:54 20:50 23:2464 24:2209 25:2 27:2476 31:2020 32:88 35:29 36:512 37:2883 38:1486 39:254 40:122 41:3154 42:652 43:1967 44:122 45:5309 46:3101 47:197 49:1333 50:1049 51:318 52:1078 54:370 55:1 56:12 57:39 58:1622 59:991 60:403 61:2118 62:1862 63:1793 64:5050 65:2216 66:4705 67:2552 68:1164 69:3290 70:1155 71:582 72:2155 74:2722 75:422 76:463 77:1643 78:1686 79:2133 80:1541 81:1381 82:1031 83:783 84:1034 85:1986 86:566 87:1357 88:918 89:2356 90:216 91:6444 92:1263 93:2368 94:2393 95:2919 96:793 97:357 98:934 99:133 100:85 101:1234 102:174 103:18328 104:3578 105:216 106:769 107:1775 108:714 109:3147 110:1639 111:1798 112:1334 113:1299 114:1136 115:1660 116:1645 117:1774 118:2217 119:1678 120:1009 121:1047 122:2435 123:1767 124:1446 125:1922 128:1109 129:690 130:492 131:1636 132:727 133:195 134:1023 135:232 136:499 137:645 138:1946 139:664 140:471 141:736 142:810 143:1027 144:809 145:484 146:1209 147:730 148:1646 149:748 150:741 151:1100 152:821 153:323 154:1488 155:804 156:1313 157:797 158:655 159:1821 160:1296 161:841 162:2592 163:602 164:1080 165:1528 166:460 167:1296 168:3135 169:828 170:3833 171:492 172:1002 173:2027 174:929 175:779 176:2005 177:4035 178:2505 179:1251 180:2170 181:2421 182:2392 183:1240 184:1041 185:13938 186:3644 187:2401 188:2914 189:2037 190:8357 191:1357 192:9812 193:6099 194:5002 195:3983 196:2660 197:1593 198:5572 199:5911 200:7394 201:5018 202:10247 203:10290 204:4590 205:2923 206:3163 207:3207 208:3962 209:4012 210:3866 211:1989 212:3042 213:2811 214:1043 215:56 216:6041 217:2118 218:859 219:578 220:1813 221:994 222:972 223:1373 End of report

1 0

Weekly Routing Table Report
by cscora＠apnic.net 03 Aug '18

03 Aug '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 04 Aug, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 709541 Prefixes after maximum aggregation (per Origin AS): 272353 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 340445 Total ASes present in the Internet Routing Table: 61400 Prefixes per ASN: 11.56 Origin-only ASes present in the Internet Routing Table: 53022 Origin ASes announcing only one prefix: 23103 Transit ASes present in the Internet Routing Table: 8378 Transit-only ASes present in the Internet Routing Table: 271 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 69 Number of instances of unregistered ASNs: 69 Number of 32-bit ASNs allocated by the RIRs: 23546 Number of 32-bit ASNs visible in the Routing Table: 18953 Prefixes from 32-bit ASNs in the Routing Table: 79380 Number of bogon 32-bit ASNs visible in the Routing Table: 37 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 286 Number of addresses announced to Internet: 2857337412 Equivalent to 170 /8s, 79 /16s and 130 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 236740 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 193849 Total APNIC prefixes after maximum aggregation: 55014 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 192078 Unique aggregates announced from the APNIC address blocks: 78887 APNIC Region origin ASes present in the Internet Routing Table: 8980 APNIC Prefixes per ASN: 21.39 APNIC Region origin ASes announcing only one prefix: 2527 APNIC Region transit ASes present in the Internet Routing Table: 1331 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3937 Number of APNIC addresses announced to Internet: 767366915 Equivalent to 45 /8s, 189 /16s and 23 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 210390 Total ARIN prefixes after maximum aggregation: 100012 ARIN Deaggregation factor: 2.10 Prefixes being announced from the ARIN address blocks: 210547 Unique aggregates announced from the ARIN address blocks: 99642 ARIN Region origin ASes present in the Internet Routing Table: 18194 ARIN Prefixes per ASN: 11.57 ARIN Region origin ASes announcing only one prefix: 6731 ARIN Region transit ASes present in the Internet Routing Table: 1810 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2391 Number of ARIN addresses announced to Internet: 1103191200 Equivalent to 65 /8s, 193 /16s and 92 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 194343 Total RIPE prefixes after maximum aggregation: 92754 RIPE Deaggregation factor: 2.10 Prefixes being announced from the RIPE address blocks: 190547 Unique aggregates announced from the RIPE address blocks: 112905 RIPE Region origin ASes present in the Internet Routing Table: 25366 RIPE Prefixes per ASN: 7.51 RIPE Region origin ASes announcing only one prefix: 11433 RIPE Region transit ASes present in the Internet Routing Table: 3511 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7254 Number of RIPE addresses announced to Internet: 714013824 Equivalent to 42 /8s, 142 /16s and 252 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 91640 Total LACNIC prefixes after maximum aggregation: 20428 LACNIC Deaggregation factor: 4.49 Prefixes being announced from the LACNIC address blocks: 93081 Unique aggregates announced from the LACNIC address blocks: 40845 LACNIC Region origin ASes present in the Internet Routing Table: 7379 LACNIC Prefixes per ASN: 12.61 LACNIC Region origin ASes announcing only one prefix: 2020 LACNIC Region transit ASes present in the Internet Routing Table: 1393 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 32 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4922 Number of LACNIC addresses announced to Internet: 172281632 Equivalent to 10 /8s, 68 /16s and 207 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19249 Total AfriNIC prefixes after maximum aggregation: 4087 AfriNIC Deaggregation factor: 4.71 Prefixes being announced from the AfriNIC address blocks: 23002 Unique aggregates announced from the AfriNIC address blocks: 7917 AfriNIC Region origin ASes present in the Internet Routing Table: 1180 AfriNIC Prefixes per ASN: 19.49 AfriNIC Region origin ASes announcing only one prefix: 392 AfriNIC Region transit ASes present in the Internet Routing Table: 236 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 449 Number of AfriNIC addresses announced to Internet: 100038144 Equivalent to 5 /8s, 246 /16s and 118 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4694 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4383 467 464 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2979 1153 84 VIETEL-AS-AP Viettel Group, VN 4766 2855 11135 767 KIXS-AS-KR Korea Telecom, KR 9829 2813 1497 543 BSNL-NIB National Internet Backbone, IN 45899 2658 1636 109 VNPT-AS-VN VNPT Corp, VN 9394 2541 4907 31 CTTNET China TieTong Telecommunications 17974 2260 946 70 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2240 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2115 433 206 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3435 1324 82 SHAW - Shaw Communications Inc., CA 22773 3261 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 11492 2691 252 436 CABLEONE - CABLE ONE, INC., US 16509 2247 4790 767 AMAZON-02 - Amazon.com, Inc., US 18566 2167 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2124 2640 485 CHARTER-NET-HKY-NC - Charter Communicat 30036 2016 344 147 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 16625 2013 1037 1447 AKAMAI-AS - Akamai Technologies, Inc., 209 1993 5085 603 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 7018 1761 20206 1278 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4657 1611 123 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 2847 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2541 622 1886 AKAMAI-ASN1, US 12389 2041 1891 731 ROSTELECOM-AS, RU 34984 1999 334 511 TELLCOM-AS, TR 9121 1855 1692 19 TTNET, TR 13188 1605 100 39 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1214 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5178 3349 606 Uninet S.A. de C.V., MX 10620 3515 535 387 Telmex Colombia S.A., CO 11830 2656 369 78 Instituto Costarricense de Electricidad 6503 1667 444 64 Axtel, S.A.B. de C.V., MX 7303 1507 1026 188 Telecom Argentina S.A., AR 28573 1088 2245 185 CLARO S.A., BR 3816 1020 508 129 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 931 377 31 Telefonica del Peru S.A.A., PE 11172 929 126 85 Alestra, S. de R.L. de C.V., MX 18881 913 1078 30 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1170 396 48 LINKdotNET-AS, EG 37611 888 107 9 Afrihost, ZA 36903 778 391 137 MT-MPLS, MA 36992 742 1411 40 ETISALAT-MISR, EG 24835 635 818 18 RAYA-AS, EG 8452 617 1730 18 TE-AS TE-AS, EG 37492 473 470 57 ORANGE-, TN 29571 458 68 12 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 23889 377 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5178 3349 606 Uninet S.A. de C.V., MX 4538 4694 4192 74 ERX-CERNET-BKB China Education and Rese 12479 4657 1611 123 UNI2-AS, ES 7545 4383 467 464 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3515 535 387 Telmex Colombia S.A., CO 6327 3435 1324 82 SHAW - Shaw Communications Inc., CA 22773 3261 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 7552 2979 1153 84 VIETEL-AS-AP Viettel Group, VN 4766 2855 11135 767 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4538 4694 4620 ERX-CERNET-BKB China Education and Research Net 12479 4657 4534 UNI2-AS, ES 7545 4383 3919 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3435 3353 SHAW - Shaw Communications Inc., CA 10620 3515 3128 Telmex Colombia S.A., CO 22773 3261 3112 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 2979 2895 VIETEL-AS-AP Viettel Group, VN 8551 2847 2803 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11830 2656 2578 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 64514 PRIVATE 5.42.231.0/24 35753 ITC ITC AS number, SA 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 135391 AOFEI-HK AOFEI DATA INTERNATIO 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 4200015017 PRIVATE 47.74.136.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.74.161.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.74.203.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.88.147.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 43.251.84.0/22 133676 PNPL-AS Precious netcom pvt ltd, IN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:291 /13:570 /14:1096 /15:1897 /16:13374 /17:7928 /18:13775 /19:25377 /20:39399 /21:45804 /22:87910 /23:71570 /24:398231 /25:797 /26:605 /27:625 /28:35 /29:20 /30:19 /31:4 /32:54 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3399 4657 UNI2-AS, ES 6327 3222 3435 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 22773 2522 3261 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 2309 2847 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 2110 2691 CABLEONE - CABLE ONE, INC., US 18566 2061 2167 MEGAPATH5-US - MegaPath Corporation, US 11830 2004 2656 Instituto Costarricense de Electricidad y Telec 30036 1768 2016 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1593 3515 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1612 2:846 4:18 5:2825 6:41 7:1 8:1125 12:1872 13:208 14:1787 15:31 16:3 17:189 18:54 20:50 23:2465 24:2223 25:2 27:2473 31:2037 32:86 35:27 36:509 37:2777 38:1483 39:246 40:122 41:3155 42:695 43:1967 44:122 45:5227 46:3094 47:205 49:1331 50:1054 51:318 52:1076 54:365 55:1 56:12 57:39 58:1626 59:992 60:400 61:2118 62:1873 63:1788 64:5045 65:2199 66:4683 67:2471 68:1162 69:3288 70:1154 71:580 72:2135 74:2716 75:420 76:460 77:1635 78:1698 79:2149 80:1545 81:1381 82:1067 83:786 84:1069 85:1987 86:566 87:1358 88:920 89:2361 90:214 91:6435 92:1258 93:2382 94:2387 95:2918 96:778 97:355 98:936 99:133 100:86 101:1237 102:172 103:18311 104:3566 105:216 106:768 107:1796 108:696 109:3170 110:1626 111:1792 112:1332 113:1298 114:1135 115:1654 116:1644 117:1896 118:2211 119:1678 120:1009 121:1057 122:2472 123:1766 124:1448 125:1922 128:1101 129:684 130:492 131:1609 132:729 133:195 134:1023 135:232 136:503 137:651 138:1930 139:660 140:476 141:734 142:803 143:1007 144:809 145:484 146:1211 147:727 148:1643 149:754 150:743 151:1095 152:816 153:321 154:1463 155:799 156:1256 157:795 158:655 159:1784 160:1277 161:804 162:2593 163:597 164:1074 165:1525 166:462 167:1307 168:3126 169:827 170:3828 171:492 172:1022 173:2001 174:929 175:771 176:2000 177:4051 178:2552 179:1247 180:2176 181:2412 182:2399 183:1239 184:1053 185:13899 186:3601 187:2376 188:2922 189:2045 190:8173 191:1352 192:9810 193:6092 194:4973 195:3984 196:2617 197:1608 198:5554 199:5900 200:7335 201:5040 202:10248 203:10268 204:4561 205:2870 206:3176 207:3199 208:3969 209:4009 210:3867 211:1983 212:3051 213:2813 214:1025 215:56 216:6037 217:2123 218:853 219:578 220:1817 221:992 222:973 223:1375 End of report

1 0

Weekly Routing Table Report
by cscora＠apnic.net 27 Jul '18

27 Jul '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 28 Jul, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 707831 Prefixes after maximum aggregation (per Origin AS): 271940 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 339769 Total ASes present in the Internet Routing Table: 61314 Prefixes per ASN: 11.54 Origin-only ASes present in the Internet Routing Table: 52960 Origin ASes announcing only one prefix: 23085 Transit ASes present in the Internet Routing Table: 8354 Transit-only ASes present in the Internet Routing Table: 267 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 55 Number of instances of unregistered ASNs: 55 Number of 32-bit ASNs allocated by the RIRs: 23460 Number of 32-bit ASNs visible in the Routing Table: 18868 Prefixes from 32-bit ASNs in the Routing Table: 78889 Number of bogon 32-bit ASNs visible in the Routing Table: 22 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 282 Number of addresses announced to Internet: 2857289283 Equivalent to 170 /8s, 78 /16s and 198 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 235856 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 193185 Total APNIC prefixes after maximum aggregation: 54926 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 191556 Unique aggregates announced from the APNIC address blocks: 78618 APNIC Region origin ASes present in the Internet Routing Table: 8971 APNIC Prefixes per ASN: 21.35 APNIC Region origin ASes announcing only one prefix: 2518 APNIC Region transit ASes present in the Internet Routing Table: 1338 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3922 Number of APNIC addresses announced to Internet: 767760130 Equivalent to 45 /8s, 195 /16s and 23 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 210288 Total ARIN prefixes after maximum aggregation: 100019 ARIN Deaggregation factor: 2.10 Prefixes being announced from the ARIN address blocks: 210480 Unique aggregates announced from the ARIN address blocks: 99420 ARIN Region origin ASes present in the Internet Routing Table: 18191 ARIN Prefixes per ASN: 11.57 ARIN Region origin ASes announcing only one prefix: 6721 ARIN Region transit ASes present in the Internet Routing Table: 1807 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 22 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2385 Number of ARIN addresses announced to Internet: 1102770848 Equivalent to 65 /8s, 186 /16s and 242 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 193768 Total RIPE prefixes after maximum aggregation: 92607 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 189917 Unique aggregates announced from the RIPE address blocks: 112763 RIPE Region origin ASes present in the Internet Routing Table: 25326 RIPE Prefixes per ASN: 7.50 RIPE Region origin ASes announcing only one prefix: 11415 RIPE Region transit ASes present in the Internet Routing Table: 3503 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7216 Number of RIPE addresses announced to Internet: 714010240 Equivalent to 42 /8s, 142 /16s and 238 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 91315 Total LACNIC prefixes after maximum aggregation: 20268 LACNIC Deaggregation factor: 4.51 Prefixes being announced from the LACNIC address blocks: 92744 Unique aggregates announced from the LACNIC address blocks: 40795 LACNIC Region origin ASes present in the Internet Routing Table: 7348 LACNIC Prefixes per ASN: 12.62 LACNIC Region origin ASes announcing only one prefix: 2032 LACNIC Region transit ASes present in the Internet Routing Table: 1379 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 34 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4891 Number of LACNIC addresses announced to Internet: 172285216 Equivalent to 10 /8s, 68 /16s and 221 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19219 Total AfriNIC prefixes after maximum aggregation: 4076 AfriNIC Deaggregation factor: 4.72 Prefixes being announced from the AfriNIC address blocks: 22852 Unique aggregates announced from the AfriNIC address blocks: 7926 AfriNIC Region origin ASes present in the Internet Routing Table: 1183 AfriNIC Prefixes per ASN: 19.32 AfriNIC Region origin ASes announcing only one prefix: 399 AfriNIC Region transit ASes present in the Internet Routing Table: 236 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 454 Number of AfriNIC addresses announced to Internet: 100013568 Equivalent to 5 /8s, 246 /16s and 22 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4692 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4364 467 460 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2966 1153 83 VIETEL-AS-AP Viettel Group, VN 4766 2863 11135 765 KIXS-AS-KR Korea Telecom, KR 9829 2813 1497 543 BSNL-NIB National Internet Backbone, IN 45899 2657 1637 110 VNPT-AS-VN VNPT Corp, VN 9394 2542 4907 31 CTTNET China TieTong Telecommunications 17974 2260 930 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2238 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2112 417 205 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3433 1324 82 SHAW - Shaw Communications Inc., CA 22773 3272 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 11492 2541 244 475 CABLEONE - CABLE ONE, INC., US 16509 2250 4790 759 AMAZON-02 - Amazon.com, Inc., US 18566 2167 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2118 2616 480 CHARTER-NET-HKY-NC - Charter Communicat 16625 2014 1033 1440 AKAMAI-AS - Akamai Technologies, Inc., 30036 2013 344 148 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 1996 5071 607 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 7018 1746 20200 1263 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4614 1610 122 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 20940 2540 624 1886 AKAMAI-ASN1, US 8551 2523 378 44 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2043 1891 731 ROSTELECOM-AS, RU 34984 2008 335 500 TELLCOM-AS, TR 9121 1865 1692 19 TTNET, TR 13188 1604 100 43 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1203 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5155 3346 605 Uninet S.A. de C.V., MX 10620 3533 538 320 Telmex Colombia S.A., CO 11830 2656 369 78 Instituto Costarricense de Electricidad 6503 1670 444 64 Axtel, S.A.B. de C.V., MX 7303 1507 1026 188 Telecom Argentina S.A., AR 28573 1039 2248 184 CLARO S.A., BR 3816 1024 508 130 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 931 377 31 Telefonica del Peru S.A.A., PE 11172 922 126 85 Alestra, S. de R.L. de C.V., MX 18881 913 1078 30 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1166 396 48 LINKdotNET-AS, EG 37611 888 107 9 Afrihost, ZA 36903 778 391 137 MT-MPLS, MA 36992 742 1411 40 ETISALAT-MISR, EG 8452 641 1730 18 TE-AS TE-AS, EG 24835 635 818 18 RAYA-AS, EG 37492 473 470 57 ORANGE-, TN 29571 458 68 12 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 23889 378 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5155 3346 605 Uninet S.A. de C.V., MX 4538 4692 4192 74 ERX-CERNET-BKB China Education and Rese 12479 4614 1610 122 UNI2-AS, ES 7545 4364 467 460 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3533 538 320 Telmex Colombia S.A., CO 6327 3433 1324 82 SHAW - Shaw Communications Inc., CA 22773 3272 2968 149 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 7552 2966 1153 83 VIETEL-AS-AP Viettel Group, VN 4766 2863 11135 765 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4538 4692 4618 ERX-CERNET-BKB China Education and Research Net 12479 4614 4492 UNI2-AS, ES 7545 4364 3904 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3433 3351 SHAW - Shaw Communications Inc., CA 10620 3533 3213 Telmex Colombia S.A., CO 22773 3272 3123 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 2966 2883 VIETEL-AS-AP Viettel Group, VN 11830 2656 2578 Instituto Costarricense de Electricidad y Telec 45899 2657 2547 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 135391 AOFEI-HK AOFEI DATA INTERNATIO 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 4200015017 PRIVATE 47.74.136.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.74.161.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.74.203.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.88.147.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 43.251.84.0/22 133676 PNPL-AS Precious netcom pvt ltd, IN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:291 /13:570 /14:1096 /15:1897 /16:13374 /17:7948 /18:13788 /19:25370 /20:39367 /21:45769 /22:87770 /23:71416 /24:396848 /25:803 /26:606 /27:626 /28:35 /29:20 /30:19 /31:4 /32:54 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3355 4614 UNI2-AS, ES 6327 3220 3433 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 22773 2534 3272 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2060 2167 MEGAPATH5-US - MegaPath Corporation, US 11830 2004 2656 Instituto Costarricense de Electricidad y Telec 8551 1985 2523 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 1963 2541 CABLEONE - CABLE ONE, INC., US 30036 1765 2013 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1601 3533 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1613 2:825 4:18 5:2832 6:41 7:1 8:1123 12:1874 13:207 14:1767 15:30 16:3 17:188 18:54 20:50 23:2458 24:2202 25:2 27:2478 31:2033 32:85 35:27 36:508 37:2876 38:1490 39:247 40:122 41:3126 42:692 43:1965 44:121 45:5105 46:3092 47:204 49:1330 50:1054 51:317 52:1071 54:370 55:4 56:12 57:39 58:1619 59:993 60:401 61:2112 62:1867 63:1799 64:5048 65:2201 66:4657 67:2429 68:1166 69:3274 70:1155 71:580 72:2150 74:2713 75:419 76:461 77:1571 78:1700 79:1820 80:1533 81:1389 82:1073 83:787 84:1070 85:2004 86:564 87:1352 88:923 89:2350 90:214 91:6424 92:1253 93:2371 94:2391 95:2924 96:774 97:358 98:935 99:133 100:85 101:1234 102:170 103:18260 104:3590 105:217 106:746 107:1789 108:695 109:3173 110:1630 111:1772 112:1314 113:1293 114:1135 115:1653 116:1638 117:1767 118:2207 119:1669 120:1006 121:1061 122:2474 123:1760 124:1447 125:1920 128:1084 129:666 130:489 131:1643 132:712 133:195 134:1018 135:231 136:504 137:650 138:1925 139:663 140:477 141:735 142:805 143:1012 144:805 145:486 146:1204 147:742 148:1642 149:752 150:741 151:1098 152:816 153:320 154:1457 155:798 156:1182 157:797 158:654 159:1778 160:1266 161:799 162:2587 163:609 164:1063 165:1524 166:458 167:1307 168:3121 169:827 170:3796 171:492 172:1006 173:1991 174:905 175:761 176:2007 177:4025 178:2542 179:1240 180:2174 181:2380 182:2395 183:1239 184:1030 185:13841 186:3568 187:2398 188:2883 189:2012 190:8183 191:1371 192:9801 193:6095 194:4913 195:3976 196:2657 197:1608 198:5562 199:5903 200:7338 201:4971 202:10218 203:10254 204:4575 205:2902 206:3174 207:3199 208:3975 209:3989 210:3887 211:1977 212:3016 213:2810 214:1050 215:57 216:6041 217:2129 218:856 219:584 220:1806 221:994 222:973 223:1359 End of report

1 0

New on RIPE Labs: Monitoring BGP Anomalies on the Interne
by Mirjam Kuehne 27 Jul '18

27 Jul '18

Dear colleagues, There are many flavours of BGP hijacks, misconfigurations or outdated implementations. In this new RIPE Labs article Martin Winter lists some examples and tips how to verify your announcements: https://labs.ripe.net/Members/martin_winter/monitoring-bgp-anomalies-on-the… Kind regards, Mirjam Kühne RIPE NCC

1 0

New on RIPE Labs: An Update on Securing BGP (by Geoff Huston)
by Mirjam Kuehne 25 Jul '18

25 Jul '18

Dear colleagues, Geoff Huston gives a typically interesting and comprehensive analysis of where we are with routing security today. Read on RIPE Labs: https://labs.ripe.net/Members/gih/an-update-on-securing-bgp Kind regards, Mirjam Kühne RIPE NCC

2 1

Hijacking
by Ronald F. Guilmette 25 Jul '18

25 Jul '18

Please excuse me for this rather naive question, but I really don't know the answer. (And in the present context, I would very much like to know.) Do the contracts that various entities, including but not limited to LiRs, sign with RIPE, in exchange for being issued RIPE number reources, include any sort of a stipulation or condition that the parties agree not to deliberately and with malice aforethought announce routes either (a) using AS numbers which have not been issued to them by one of the five Regional Internet Registries and/or (b) covering IP address space that has not been formally issued to them, or to any of their legitimate customers by one of the five Regional Internet Registries? I guess that another way of expressing this question would be: Do RIPE contracts allow anyone to announce whatever the hell they want, willy nilly, and with no concern whatsoever for the formal allocation process? I wouldn't ask, but it appears that certain RIPE members do not feel particularly constrained to avoid announcing routes to IP address space that they are clearly and deliberately stealing from other parties. Is this the accepted norm in the RIPE region? Is such behavior it contractually permissible, within the RIPE region?

4 7

New on RIPE Labs: Detection of Peering Infrastructure Outages Based on BGP Communities
by Mirjam Kuehne 24 Jul '18

24 Jul '18

Dear colleagues, Please read this new RIPE Labs article by former RACI fellow Vasilis Giotsas: Detection of Peering Infrastructure Outages Based on BGP Communities https://labs.ripe.net/Members/vgiotsas/detection-of-peering-infrastructure-… Kind regards, Mirjam Kühne RIPE NCC

1 0

Weekly Routing Table Report
by cscora＠apnic.net 20 Jul '18

20 Jul '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 21 Jul, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 706689 Prefixes after maximum aggregation (per Origin AS): 271490 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 339522 Total ASes present in the Internet Routing Table: 61277 Prefixes per ASN: 11.53 Origin-only ASes present in the Internet Routing Table: 52941 Origin ASes announcing only one prefix: 23079 Transit ASes present in the Internet Routing Table: 8336 Transit-only ASes present in the Internet Routing Table: 278 Average AS path length visible in the Internet Routing Table: 4.1 Max AS path length visible: 34 Max AS path prepend of ASN ( 30873) 32 Prefixes from unregistered ASNs in the Routing Table: 56 Number of instances of unregistered ASNs: 59 Number of 32-bit ASNs allocated by the RIRs: 23343 Number of 32-bit ASNs visible in the Routing Table: 18822 Prefixes from 32-bit ASNs in the Routing Table: 78370 Number of bogon 32-bit ASNs visible in the Routing Table: 27 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 289 Number of addresses announced to Internet: 2856751939 Equivalent to 170 /8s, 70 /16s and 147 /24s Percentage of available address space announced: 77.2 Percentage of allocated address space announced: 77.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 235774 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 192804 Total APNIC prefixes after maximum aggregation: 54910 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 191212 Unique aggregates announced from the APNIC address blocks: 78530 APNIC Region origin ASes present in the Internet Routing Table: 8959 APNIC Prefixes per ASN: 21.34 APNIC Region origin ASes announcing only one prefix: 2522 APNIC Region transit ASes present in the Internet Routing Table: 1335 Average APNIC Region AS path length visible: 4.1 Max APNIC Region AS path length visible: 29 Number of APNIC region 32-bit ASNs visible in the Routing Table: 3919 Number of APNIC addresses announced to Internet: 767822850 Equivalent to 45 /8s, 196 /16s and 12 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 209991 Total ARIN prefixes after maximum aggregation: 99923 ARIN Deaggregation factor: 2.10 Prefixes being announced from the ARIN address blocks: 210273 Unique aggregates announced from the ARIN address blocks: 99476 ARIN Region origin ASes present in the Internet Routing Table: 18190 ARIN Prefixes per ASN: 11.56 ARIN Region origin ASes announcing only one prefix: 6725 ARIN Region transit ASes present in the Internet Routing Table: 1805 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2386 Number of ARIN addresses announced to Internet: 1102400672 Equivalent to 65 /8s, 181 /16s and 76 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 193597 Total RIPE prefixes after maximum aggregation: 92449 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 189728 Unique aggregates announced from the RIPE address blocks: 112597 RIPE Region origin ASes present in the Internet Routing Table: 25313 RIPE Prefixes per ASN: 7.50 RIPE Region origin ASes announcing only one prefix: 11414 RIPE Region transit ASes present in the Internet Routing Table: 3490 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 34 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7187 Number of RIPE addresses announced to Internet: 714018432 Equivalent to 42 /8s, 143 /16s and 14 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 91068 Total LACNIC prefixes after maximum aggregation: 20101 LACNIC Deaggregation factor: 4.53 Prefixes being announced from the LACNIC address blocks: 92487 Unique aggregates announced from the LACNIC address blocks: 40809 LACNIC Region origin ASes present in the Internet Routing Table: 7333 LACNIC Prefixes per ASN: 12.61 LACNIC Region origin ASes announcing only one prefix: 2029 LACNIC Region transit ASes present in the Internet Routing Table: 1382 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 25 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 4880 Number of LACNIC addresses announced to Internet: 172083488 Equivalent to 10 /8s, 65 /16s and 201 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19172 Total AfriNIC prefixes after maximum aggregation: 4062 AfriNIC Deaggregation factor: 4.72 Prefixes being announced from the AfriNIC address blocks: 22700 Unique aggregates announced from the AfriNIC address blocks: 7856 AfriNIC Region origin ASes present in the Internet Routing Table: 1175 AfriNIC Prefixes per ASN: 19.32 AfriNIC Region origin ASes announcing only one prefix: 389 AfriNIC Region transit ASes present in the Internet Routing Table: 236 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 450 Number of AfriNIC addresses announced to Internet: 99974400 Equivalent to 5 /8s, 245 /16s and 125 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4690 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4348 467 459 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2948 1153 83 VIETEL-AS-AP Viettel Group, VN 4766 2853 11130 764 KIXS-AS-KR Korea Telecom, KR 9829 2813 1497 543 BSNL-NIB National Internet Backbone, IN 45899 2658 1633 114 VNPT-AS-VN VNPT Corp, VN 9394 2542 4907 31 CTTNET China TieTong Telecommunications 17974 2260 930 71 TELKOMNET-AS2-AP PT Telekomunikasi Indo 9808 2236 8699 26 CMNET-GD Guangdong Mobile Communication 4755 2115 417 205 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6327 3431 1324 84 SHAW - Shaw Communications Inc., CA 22773 3271 2968 148 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 11492 2550 247 462 CABLEONE - CABLE ONE, INC., US 16509 2248 4727 753 AMAZON-02 - Amazon.com, Inc., US 18566 2168 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2114 2591 478 CHARTER-NET-HKY-NC - Charter Communicat 30036 2004 343 154 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 1994 5070 605 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 16625 1966 988 1404 AKAMAI-AS - Akamai Technologies, Inc., 7018 1751 20201 1270 ATT-INTERNET4 - AT&T Services, Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4543 1609 122 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 20940 2547 623 1880 AKAMAI-ASN1, US 8551 2536 377 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2014 1877 708 ROSTELECOM-AS, RU 34984 2009 335 499 TELLCOM-AS, TR 9121 1879 1692 19 TTNET, TR 13188 1604 100 43 TRIOLAN, UA 6849 1241 355 21 UKRTELNET, UA 8402 1210 544 14 CORBINA-AS OJSC "Vimpelcom", RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5007 3299 589 Uninet S.A. de C.V., MX 10620 3560 541 256 Telmex Colombia S.A., CO 11830 2655 369 78 Instituto Costarricense de Electricidad 6503 1669 443 62 Axtel, S.A.B. de C.V., MX 7303 1507 1026 188 Telecom Argentina S.A., AR 28573 1035 2248 184 CLARO S.A., BR 3816 1023 508 129 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 936 377 31 Telefonica del Peru S.A.A., PE 11172 929 127 86 Alestra, S. de R.L. de C.V., MX 18881 913 1078 30 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1172 396 48 LINKdotNET-AS, EG 37611 884 107 9 Afrihost, ZA 36903 778 391 137 MT-MPLS, MA 36992 744 1411 40 ETISALAT-MISR, EG 8452 635 1730 18 TE-AS TE-AS, EG 24835 635 818 18 RAYA-AS, EG 37492 472 470 57 ORANGE-, TN 29571 457 68 11 ORANGE-COTE-IVOIRE, CI 37342 386 32 1 MOVITEL, MZ 23889 378 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5007 3299 589 Uninet S.A. de C.V., MX 4538 4690 4192 74 ERX-CERNET-BKB China Education and Rese 12479 4543 1609 122 UNI2-AS, ES 7545 4348 467 459 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 10620 3560 541 256 Telmex Colombia S.A., CO 6327 3431 1324 84 SHAW - Shaw Communications Inc., CA 22773 3271 2968 148 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 7552 2948 1153 83 VIETEL-AS-AP Viettel Group, VN 4766 2853 11130 764 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4538 4690 4616 ERX-CERNET-BKB China Education and Research Net 12479 4543 4421 UNI2-AS, ES 7545 4348 3889 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3431 3347 SHAW - Shaw Communications Inc., CA 10620 3560 3304 Telmex Colombia S.A., CO 22773 3271 3123 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7552 2948 2865 VIETEL-AS-AP Viettel Group, VN 11830 2655 2577 Instituto Costarricense de Electricidad y Telec 45899 2658 2544 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 135391 AOFEI-HK AOFEI DATA INTERNATIO 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 4200015017 PRIVATE 47.74.136.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.74.161.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.74.203.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 4200015017 PRIVATE 47.88.147.0/24 45102 CNNIC-ALIBABA-CN-NET-AP Alibab 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 65537 DOCUMENT 62.162.120.0/24 6821 MT-AS-OWN bul. Orce Nikolov bb Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.66.224.0/19 209 CENTURYLINK-US-LEGACY-QWEST - Qwest Communicati 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.136.0/24 37500 -Reserved AS-, ZZ 41.76.138.0/24 37500 -Reserved AS-, ZZ 41.76.139.0/24 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 43.251.84.0/22 133676 PNPL-AS Precious netcom pvt ltd, IN Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:99 /12:291 /13:570 /14:1095 /15:1894 /16:13348 /17:7939 /18:13760 /19:25331 /20:39376 /21:45625 /22:87778 /23:71260 /24:396097 /25:802 /26:607 /27:624 /28:35 /29:20 /30:19 /31:6 /32:52 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3291 4543 UNI2-AS, ES 6327 3217 3431 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 22773 2535 3271 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2061 2168 MEGAPATH5-US - MegaPath Corporation, US 11830 2004 2655 Instituto Costarricense de Electricidad y Telec 8551 1998 2536 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 11492 1972 2550 CABLEONE - CABLE ONE, INC., US 30036 1756 2004 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1613 3560 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1615 2:834 4:18 5:2854 6:40 7:1 8:1125 12:1869 13:206 14:1765 15:29 16:3 17:188 18:54 20:50 23:2460 24:2224 25:2 27:2475 31:2041 32:92 35:27 36:508 37:2821 38:1482 39:248 40:121 41:3152 42:690 43:1959 44:121 45:5012 46:3094 47:203 49:1332 50:1056 51:317 52:1070 54:372 55:4 56:12 57:39 58:1618 59:993 60:401 61:2102 62:1876 63:1790 64:5026 65:2196 66:4673 67:2423 68:1170 69:3266 70:1157 71:580 72:2137 74:2704 75:422 76:459 77:1545 78:1712 79:1817 80:1535 81:1384 82:1075 83:790 84:1077 85:2012 86:561 87:1351 88:929 89:2350 90:216 91:6433 92:1251 93:2383 94:2395 95:2917 96:781 97:359 98:935 99:133 100:85 101:1231 102:146 103:18174 104:3567 105:213 106:738 107:1789 108:694 109:3180 110:1624 111:1773 112:1309 113:1292 114:1133 115:1660 116:1631 117:1763 118:2209 119:1658 120:1003 121:1063 122:2462 123:1757 124:1448 125:1912 128:1082 129:674 130:489 131:1636 132:697 133:195 134:1020 135:225 136:502 137:651 138:1942 139:661 140:468 141:730 142:803 143:1022 144:801 145:486 146:1197 147:725 148:1644 149:756 150:749 151:1096 152:794 153:320 154:1429 155:789 156:1136 157:799 158:654 159:1779 160:1262 161:785 162:2574 163:604 164:1071 165:1521 166:449 167:1302 168:3113 169:821 170:3805 171:488 172:994 173:1983 174:905 175:769 176:1994 177:4067 178:2540 179:1235 180:2169 181:2358 182:2405 183:1238 184:1034 185:13807 186:3564 187:2439 188:2843 189:2045 190:8131 191:1309 192:9789 193:6062 194:4898 195:3977 196:2643 197:1588 198:5554 199:5906 200:7312 201:4988 202:10236 203:10256 204:4583 205:2893 206:3164 207:3179 208:3984 209:3997 210:3888 211:1984 212:3023 213:2784 214:1046 215:57 216:6035 217:2134 218:859 219:577 220:1785 221:985 222:971 223:1352 End of report

1 0

NTT now treats RPKI ROAs as IRR route(6)-objects
by Job Snijders 19 Jul '18

19 Jul '18

Dear RIPE Routing-WG, [ TL:DR - From now on, NTT / AS 2914 allows customers to either register their announcements in the IRR, or as RPKI ROAs. This is a convenience service for relevant regions of the world where IRR is not the norm but RPKI is commonly available. Previously NTT only accepted IRR and ARIN-WHOIS. I hope competitors and partners will use this approach too! ] As most of you know, the Resource Public Key Infrastructure (RPKI) is a modern reimagination of the good ole' IRR system we have come to love and hate. The main advantage of the RPKI is that a consumer of the data can cryptographically verify whether it was the actual owner of the IP prefix that created a so-called "RPKI ROA". (more reading: https://en.wikipedia.org/wiki/Resource_Public_Key_Infrastructure) Given that RPKI ROAs are somewhat equivalent to IRR route-objects, but more reliable in terms of authoritativeness, NTT now has an automated nightly process that converts RPKI information into IRR format so that our toolchain can consume the data as if it were just another IRR source. Using RPKI ROAs as if they are IRR route(6)-objects is a transitional step towards increased security in the routing ecosystem. We are not the first to explore this method (see post-scriptum), but I think we are the first to republish elements from RPKI ROAs via a publicly accessible IRRd instance queryable with the RADB IRRd protocol. This means that anyone that points their bgpq3 or peval programs at rr.ntt.net can leverage this method without having to update anything else in the pipeline. An example can be inspected here: job@eng0 ~$ whois -h rr.ntt.net 193.0.6.139 [Querying rr.ntt.net] [rr.ntt.net] route: 193.0.0.0/21 descr: RIPE-NCC origin: AS3333 mnt-by: RIPE-NCC-MNT changed: unread(a)ripe.net 20000101 source: RIPE remarks: **************************** remarks: * THIS OBJECT IS MODIFIED remarks: * Please note that all data that is generally regarded as personal remarks: * data has been removed from this object. remarks: * To view the original object, please query the RIPE Database at: remarks: * http://www.ripe.net/whois remarks: **************************** route: 193.0.0.0/21 descr: RPKI ROA for 193.0.0.0/21 remarks: This route object represents routing data retrieved from the RPKI remarks: The original data can be found here: https://rpki.gin.ntt.net/r/AS3333/193.0.0.0/21 remarks: This route object is the result of an automated RPKI-to-IRR conversion process. remarks: maxLength 21 origin: AS3333 mnt-by: MAINT-JOB changed: job(a)ntt.net 20180718 source: RPKI # Trust Anchor: RIPE NCC RPKI Root job@eng0 ~$ The first object is an actual IRR "route:" object from the RIPE NCC operated IRR, the second object is a representation of the RPKI ROA in RPSL format published via rr.ntt.net. In general we can state that RPKI data is very good quality data, however please keep in mind that it may not be /correct/ data. In this context "Good Quality" means that it cannot easily be forged or tampered with by adversaries (but of course that doesn't protect the legitimate owner against making misconfigurations). Just like with IRR route(6)-objects, owners may input the wrong origin ASN in this type of object or configure the wrong MaxLength. NTT operates a "RPKI Cache Validator" at https://rpki.gin.ntt.net/ Everyone is free to inspect and click around in this webinterface. Instead of https://rpki.gin.ntt.net/, there also is a command line interface available via BGPMon's whois service: job@vurt ~$ whois -h whois.bgpmon.com 193.0.0.0/21 % This is the BGPmon.net whois Service % You can use this whois gateway to retrieve information % about an IP adress or prefix % We support both IPv4 and IPv6 address. % % For more information visit: % https://portal.bgpmon.net/bgpmonapi.php Prefix: 193.0.0.0/21 Prefix description: RIPE-NCC Country code: NL Origin AS: 3333 Origin AS Name: Reseaux IP Europeens Network Coordination Centre (RIPE NCC) RPKI status: ROA validation successful First seen: 2011-10-19 Last seen: 2018-07-19 Seen by #peers: 77 Notice in the above output the "ROA validation successful". Nota bene: the fact that NTT uses RPKI ROA information in the prefix filter generation process - does _not_ mean that NTT does "RPKI Origin Validation" for BGP updates (yet). RPKI Origin Validation is an additional security layer that we hope to deploy in the not too distant future. Using RPKI ROAs in this way is an important step forward in this process. Kind regards, Job Snijders Post scriptum on prior work: Dragon Research Labs implemented the idea in 2015: https://github.com/dragonresearch/rpki.net/blob/master/potpourri/roa-to-irr… RIPE NCC's RPKI Validator added RPSL export functionality in 2015: https://mailman.nanog.org/pipermail/nanog/2015-May/075185.html Arouteserver added native support for this method in October 2017. https://github.com/pierky/arouteserver/issues/19

1 0