- routing-wg - mailman.ripe.net

New on RIPE Labs: Moving RPKI Beyond Routing Security
by Antony Gollan 23 Dec '20

23 Dec '20

Dear colleagues, Resource Tagged Attestations, or RTAs, are a new type of RPKI object that is being proposed by authors from APNIC and NLnet Labs in the IETF. They allow any arbitrary file to be signed ‘with resources’ by one or more parties. As a part of the RTA development effort, NLnet Labs has now introduced proof-of-concept support for this in Routinator and Krill, which is interoperable with the RTA signing function in development at APNIC. Read more on RIPE Labs: https://labs.ripe.net/Members/tim_bruijnzeels/moving-rpki-beyond-routing-se… Kind regards, Antony Gollan Senior Communications Officer RIPE NCC

1 0

AS28753 - Leaseweb Deutschland GmbH -- Facilitating legacy squatting?
by Ronald F. Guilmette 21 Dec '20

21 Dec '20

In the period from 2020-12-04 until 2020-12-10 someone representing AS28753 - Leaseweb Deutschland GmbH, or someone purporting to represent that ASN/company created a set of thirteen (13) new route: entries in the security-free RADB data base: https://pastebin.com/raw/qs9yywFe It appears somewhat more than coincidental that many of these new RADB route entries refer to either(a) legacy IPv4 address blocks in the ARIN region or else (b) unassigned (bogon) IPv4 address space in the ARIN region. A listing of the relevant IPv4 cidrs along with the top-level allocation holders for each CIDR is given in the following table: https://pastebin.com/raw/rnqMXHW0 Although there is some ambiguity regarding the status of the non-US/non-ARIN blocks listed in the above table, my inspection of the relevant WHOIS records for the US/ARIN blocks indicates to me that these are all either (a) abandoned IPv4 legacy blocks or else (b) unassigned ARIN bogons. This strongly suggests that all of the IPv4 address blocks named in all of the relevant RADB rote entries may be, and likely are being squatted on at the present time. Please note however that AS28753 - Leaseweb Deutschland GmbH - is not itself doing any of the squatting. Rather, the squatting is being undertaken by the various ASNs mention in the following active routing summary: 62.182.160.0/21 AS39325 RU Viptelecom LLC 79.173.104.0/21 AS13259 RU Delta Telesystems Ltd. 85.28.48.0/20 AS13259 RU Delta Telesystems Ltd. 85.89.104.0/21 AS13259 RU Delta Telesystems Ltd. 89.187.8.0/21 AS41762 UA PE Logvinov Vladimir Vladimirovich 91.229.148.0/22 AS56968 KZ TemirLan Net Ltd 128.0.80.0/20 AS34498 RU Jilcomservice 199.61.32.0/19 AS9009 GB M247 Ltd 204.229.64.0/19 AS10650 US Extreme Internet 205.134.96.0/19 AS10650 US Extreme Internet 205.148.96.0/19 AS397373 US H4Y Technologies LLC 209.151.96.0/19 AS9009 GB M247 Ltd 216.93.0.0/19 AS9009 GB M247 Ltd Note that AS10650 (Extreme Internet) is itself a legacy abandoned ARIN ASN. It is likely also squatted. It's one and only current upstream, according to bgp.he.net, is AS13259 - Delta Telesystems Ltd. (Russia). In fact, all of the following ASNs from the above table also have AS13259, Delta Telesystems Ltd. (Russia) as their one and only upstream at the present time: AS39325 - Viptelecom LLC AS41762 - PE Logvinov Vladimir Vladimirovich AS56968 - TemirLan Net Ltd AS34498 - Jilcomservice AS1065 - Extreme Internet On this basis it would appear that the root of the problem in this case lies at AS13259, Delta Telesystems Ltd. (Russia). As a mitigation for these squats, I recommend dropping/blocking all of the IPv4 CIDRs listed above. Additionally, since AS13259 appears to be highly untrustworth at the present time. I would advise blocking all traffic to/from these blocks also: https://bgp.he.net/AS13259#_prefixes 79.173.104.0/21 82.147.68.0/24 82.147.70.0/24 82.147.71.0/24 82.147.75.0/24 85.28.48.0/20 85.89.104.0/21 91.206.16.0/23 193.107.92.0/22 2001:678:68c::/48 Regards, rfg

1 0

Weekly Routing Table Report
by cscora＠apnic.net 18 Dec '20

18 Dec '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 19 Dec, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 834384 Prefixes after maximum aggregation (per Origin AS): 319639 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 399442 Total ASes present in the Internet Routing Table: 70165 Prefixes per ASN: 11.89 Origin-only ASes present in the Internet Routing Table: 60316 Origin ASes announcing only one prefix: 24963 Transit ASes present in the Internet Routing Table: 9849 Transit-only ASes present in the Internet Routing Table: 296 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 203 Max AS path prepend of ASN (396896) 200 Prefixes from unregistered ASNs in the Routing Table: 1041 Number of instances of unregistered ASNs: 1042 Number of 32-bit ASNs allocated by the RIRs: 34457 Number of 32-bit ASNs visible in the Routing Table: 28615 Prefixes from 32-bit ASNs in the Routing Table: 131766 Number of bogon 32-bit ASNs visible in the Routing Table: 19 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 487 Number of addresses announced to Internet: 2864080896 Equivalent to 170 /8s, 182 /16s and 104 /24s Percentage of available address space announced: 77.4 Percentage of allocated address space announced: 77.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 283940 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 218271 Total APNIC prefixes after maximum aggregation: 64342 APNIC Deaggregation factor: 3.39 Prefixes being announced from the APNIC address blocks: 214363 Unique aggregates announced from the APNIC address blocks: 87510 APNIC Region origin ASes present in the Internet Routing Table: 11125 APNIC Prefixes per ASN: 19.27 APNIC Region origin ASes announcing only one prefix: 3163 APNIC Region transit ASes present in the Internet Routing Table: 1606 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6259 Number of APNIC addresses announced to Internet: 778351744 Equivalent to 46 /8s, 100 /16s and 180 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 240878 Total ARIN prefixes after maximum aggregation: 111543 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 241238 Unique aggregates announced from the ARIN address blocks: 115495 ARIN Region origin ASes present in the Internet Routing Table: 18688 ARIN Prefixes per ASN: 12.91 ARIN Region origin ASes announcing only one prefix: 6810 ARIN Region transit ASes present in the Internet Routing Table: 1917 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 203 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3614 Number of ARIN addresses announced to Internet: 1093010176 Equivalent to 65 /8s, 38 /16s and 3 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 237298 Total RIPE prefixes after maximum aggregation: 111936 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 233244 Unique aggregates announced from the RIPE address blocks: 137821 RIPE Region origin ASes present in the Internet Routing Table: 27601 RIPE Prefixes per ASN: 8.45 RIPE Region origin ASes announcing only one prefix: 11876 RIPE Region transit ASes present in the Internet Routing Table: 3889 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9766 Number of RIPE addresses announced to Internet: 709745280 Equivalent to 42 /8s, 77 /16s and 218 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112152 Total LACNIC prefixes after maximum aggregation: 26270 LACNIC Deaggregation factor: 4.27 Prefixes being announced from the LACNIC address blocks: 113258 Unique aggregates announced from the LACNIC address blocks: 47934 LACNIC Region origin ASes present in the Internet Routing Table: 10629 LACNIC Prefixes per ASN: 10.66 LACNIC Region origin ASes announcing only one prefix: 2629 LACNIC Region transit ASes present in the Internet Routing Table: 1991 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8226 Number of LACNIC addresses announced to Internet: 174119424 Equivalent to 10 /8s, 96 /16s and 218 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24742 Total AfriNIC prefixes after maximum aggregation: 4794 AfriNIC Deaggregation factor: 5.16 Prefixes being announced from the AfriNIC address blocks: 31794 Unique aggregates announced from the AfriNIC address blocks: 10293 AfriNIC Region origin ASes present in the Internet Routing Table: 1424 AfriNIC Prefixes per ASN: 22.33 AfriNIC Region origin ASes announcing only one prefix: 484 AfriNIC Region transit ASes present in the Internet Routing Table: 284 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 750 Number of AfriNIC addresses announced to Internet: 108424448 Equivalent to 6 /8s, 118 /16s and 109 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5682 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4749 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3548 1330 21 VIETEL-AS-AP Viettel Group, VN 7713 3232 952 519 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2855 1896 55 VNPT-AS-VN VNPT Corp, VN 9808 2585 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2352 11103 560 KIXS-AS-KR Korea Telecom, KR 9498 2296 466 233 BBIL-AP BHARTI Airtel Ltd., IN 4755 2133 441 189 TATACOMM-AS TATA Communications formerl 45090 2067 1045 64 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4755 315 701 CABLEONE, US 16509 4528 9069 2096 AMAZON-02, US 7155 4020 264 32 VIASAT-SP-BACKBONE, US 22773 3769 3008 211 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3357 1319 83 SHAW, CA 16625 3155 1654 2271 AKAMAI-AS, US 209 2523 5059 507 CENTURYLINK-US-LEGACY-QWEST, US 30036 2491 368 113 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2336 2984 1643 FRONTIER-FRTR, US 20115 2163 2898 509 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6214 1667 141 UNI2-AS, ES 47331 6104 845 3572 TTNET, TR 39891 3459 195 22 ALJAWWALSTC-AS, SA 20940 3327 3347 200 AKAMAI-ASN1, NL 8551 3225 379 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2883 2282 892 ROSTELECOM-AS, RU 9009 2236 231 1220 M247, GB 34984 2168 352 577 TELLCOM-AS, TR 13188 1610 100 31 TRIOLAN, UA 58224 1463 856 550 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8215 3444 601 Uninet S.A. de C.V., MX 10620 3394 526 590 Telmex Colombia S.A., CO 11830 2564 369 63 Instituto Costarricense de Electricidad 13999 1588 431 406 Mega Cable, S.A. de C.V., MX 6503 1438 311 475 Axtel, S.A.B. de C.V., MX 7303 1435 909 262 Telecom Argentina S.A., AR 28573 1376 2260 222 CLARO S.A., BR 6147 1146 379 39 Telefonica del Peru S.A.A., PE 3816 1115 537 152 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 1007 213 419 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1566 393 22 LINKdotNET-AS, EG 24835 1287 478 26 RAYA-AS, EG 36992 1218 1530 137 ETISALAT-MISR, EG 36903 951 497 97 MT-MPLS, MA 29571 709 68 12 ORANGE-COTE-IVOIRE, CI 6713 533 1863 34 IAM-AS, MA 37342 478 32 1 MOVITEL, MZ 36935 464 522 40 Vodafone-, EG 23889 451 232 16 MauritiusTelecom, MU 15399 439 46 16 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8215 3444 601 Uninet S.A. de C.V., MX 12479 6214 1667 141 UNI2-AS, ES 47331 6104 845 3572 TTNET, TR 7545 5682 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 11492 4755 315 701 CABLEONE, US 4538 4749 4192 73 ERX-CERNET-BKB China Education and Rese 16509 4528 9069 2096 AMAZON-02, US 7155 4020 264 32 VIASAT-SP-BACKBONE, US 22773 3769 3008 211 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3548 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6214 6073 UNI2-AS, ES 7545 5682 5021 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4749 4676 ERX-CERNET-BKB China Education and Research Net 11492 4755 4054 CABLEONE, US 7155 4020 3988 VIASAT-SP-BACKBONE, US 22773 3769 3558 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3548 3527 VIETEL-AS-AP Viettel Group, VN 39891 3459 3437 ALJAWWALSTC-AS, SA 6327 3357 3274 SHAW, CA 8551 3225 3182 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 393489 UNALLOCATED 12.7.109.0/24 7018 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 3803 RCN-AS1, US Transit: 398481 REDMERCURY, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:13 /10:40 /11:101 /12:292 /13:579 /14:1175 /15:1931 /16:13469 /17:8273 /18:13705 /19:25617 /20:41559 /21:50418 /22:103435 /23:87982 /24:484539 /25:1248 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 5362 6104 TTNET, TR 12479 5185 6214 UNI2-AS, ES 11492 3805 4755 CABLEONE, US 6327 3152 3357 SHAW, CA 7155 3109 4020 VIASAT-SP-BACKBONE, US 8151 2917 8215 Uninet S.A. de C.V., MX 22773 2879 3769 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3459 ALJAWWALSTC-AS, SA 8551 2687 3225 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2224 2491 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1881 2:1139 3:35 4:18 5:3410 6:53 8:1487 9:1 11:1 12:1755 13:349 14:2402 15:75 16:13 17:303 18:93 20:113 23:4145 24:2364 25:3 27:2339 31:2187 32:112 34:1 35:35 36:1137 37:3546 38:1999 39:458 40:150 41:3851 42:872 43:2114 44:234 45:14610 46:3625 47:321 49:1602 50:1678 51:90 52:1127 54:217 55:768 56:6 57:57 58:1689 59:1149 60:817 61:2312 62:2198 63:2011 64:5220 65:2375 66:5120 67:2947 68:1172 69:4100 70:1399 71:685 72:3102 74:2548 75:1457 76:688 77:1982 78:3096 79:2485 80:1924 81:1632 82:1313 83:1095 84:1261 85:3055 86:612 87:1792 88:2339 89:2891 90:400 91:7166 92:1597 93:2553 94:2919 95:4109 96:1226 97:342 98:966 99:976 100:90 101:1055 102:1215 103:25085 104:3620 105:390 106:775 107:2189 108:690 109:3752 110:2007 111:2351 112:1661 113:1554 114:1425 115:1855 116:1858 117:2111 118:2288 119:1866 120:958 121:1049 122:2301 123:2132 124:1639 125:2140 128:1342 129:1258 130:766 131:2003 132:743 133:311 134:1392 135:326 136:688 137:894 138:2307 139:1167 140:737 141:1165 142:1042 143:1242 144:1210 145:341 146:1383 147:1215 148:2175 149:1248 150:752 151:1201 152:1609 153:445 154:2116 155:1267 156:1353 157:1140 158:907 159:2039 160:2049 161:1079 162:3210 163:927 164:1421 165:1315 166:599 167:1735 168:3608 169:632 170:4354 171:744 172:2025 173:2911 174:973 175:1059 176:2926 177:4428 178:2788 179:1891 180:2278 181:2571 182:3161 183:1526 184:2406 185:17607 186:4030 187:3075 188:3391 189:2751 190:9060 191:1401 192:10596 193:7859 194:6401 195:4583 196:3079 197:2269 198:6023 199:5947 200:7325 201:5277 202:10554 203:10175 204:4651 205:3102 206:3308 207:3320 208:3991 209:4611 210:4199 211:2098 212:3613 213:3183 214:1186 215:61 216:6132 217:2476 218:899 219:641 220:2085 221:935 222:987 223:1706 End of report

1 0

Post-mortem: Error in Contractual Status of Legacy Resources Impacted RPKI
by Marco Schmidt 18 Dec '20

18 Dec '20

Dear colleagues, On Wednesday, 16 December 2020, we carried out work to implement Numbered Work Item 10 (NWI-10), which applies a consistent interpretation of the country code attribute in the RIPE Database and the Extended Delegated Statistics. At some point between 18:00-19:00 (UTC+1), 105 legacy resources mistakenly lost their contractual status in our internal systems. As a result, these resources were no longer able to be certified using RPKI. Details: Legacy resources can only be certified with RPKI when there is a contractual relationship in place with the RIPE NCC. These resources are registered differently from RIPE NCC-issued resources in our internal systems. A programming error in our NWI-10 implementation overlooked this aspect, which caused the contractual status for these legacy resources to be set to “none”. As a consequence, the resources were unable to be certified. Once RPKI detected this change: * The resource certificates for 36 Certificate Authorities (CAs) were updated to contain fewer certifiable resources. * The ROAs for legacy resources held by affected hosted CAs were revoked. 41 ROAs (with 202 Validated ROA Payloads) from 24 CAs were deleted. * The RPKI certificates issued for affected delegated CAs shrank, which caused their ROAs to disappear or be rejected due to overclaiming, depending on their CA software. We recovered the contractual status of the 105 affected resources at 17:10 (UTC+1) on Thursday, 17 December, re-established the correct resource list for the affected certificates, and recreated the 41 affected/deleted ROAs (with 202 VRPs) that are hosted by us. Recommendations: We have already recovered the ROAs belonging to the affected hosted CAs. We recommend that these CAs double-check this. Affected delegated CAs should check whether they need to recreate any ROAs. Our Customer Services team will be in contact to follow up. To prevent this from happening again in future, we will improve our Quality Assurance and Acceptance Testing. We will also improve our testing and prepare more detailed impact analyses when making changes to our registry software, applying a more risk-based testing approach to mitigate any concerns that are identified. Kind regards, Marco Schmidt Registry Services Assistant Manager

1 0

Re: [routing-wg] [anti-abuse-wg] AS47510 & AS35555 -- Bogon ASNs routing Bogon IPv4 space
by Ronald F. Guilmette 12 Dec '20

12 Dec '20

In message <CALZ3u+YADAVB1HouHfsWKG4txTNO6xLqoD=-tjU831W-1CQJxg(a)mail.gmail.com> =?UTF-8?Q?T=C3=B6ma_Gavrichenkov?= <ximaera(a)gmail.com> wrote: >On Sat, Dec 5, 2020, 1:57 AM Ronald F. Guilmette <rfg(a)tristatelogic.com> >wrote: > >> It appears that AS47510 is itself an unallocated bogon at the present >> time: >> >> https://bgp.he.net/AS47510#_asinfo >> >> As can be readily seen at the above link, AS47510 is peering with only >> two other ASNs, i.e. AS29226 - JSC Mastertel (Russia) and AS35555 - >> Crex Fex Pex Internet System Solutions" LLC. >> > >Both peering links are now down. > >The matters with AS35555 may be harder to resolve, though. If possible please elaborate. It appears that AS35555, which is a bogon ASN, is bdeing kept alive at this point only by AS213254 -- Rait Telecom, which is just a seven-month old Russian company/ASN with -zero- IP allocations and apparently NO WEB SITE. And yet despite being only 7 months old and having absolutely no IP space of its own (and also no web site), Rait Telecom has somehow managed to work itself into the fabric of no fewer than seven European IXes: https://bgp.he.net/AS213254#_ix And it also has managed to acquire all these IPv4 peers: AS25091 IP-Max SA AS50340 OOO "Network of data-centers "Selectel" AS35297 Dataline LLC AS199524 G-Core Labs S.A. AS35555 "Crex Fex Pex Internet System Solutions" LLC AS49673 Truenetwork LLC AS8492 "OBIT" Ltd. AS42861 Foton Telecom CJSC AS35598 INETCOM LLC AS47441 TRUNK MOBILE, INC How exactly does that even happen? And who the hell are these people anyway? Regards, rfg

1 0

Weekly Routing Table Report
by cscora＠apnic.net 11 Dec '20

11 Dec '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 12 Dec, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 833024 Prefixes after maximum aggregation (per Origin AS): 319019 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 399101 Total ASes present in the Internet Routing Table: 70094 Prefixes per ASN: 11.88 Origin-only ASes present in the Internet Routing Table: 60270 Origin ASes announcing only one prefix: 24923 Transit ASes present in the Internet Routing Table: 9824 Transit-only ASes present in the Internet Routing Table: 286 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 40 Max AS path prepend of ASN ( 22394) 36 Prefixes from unregistered ASNs in the Routing Table: 1079 Number of instances of unregistered ASNs: 1080 Number of 32-bit ASNs allocated by the RIRs: 34384 Number of 32-bit ASNs visible in the Routing Table: 28526 Prefixes from 32-bit ASNs in the Routing Table: 130841 Number of bogon 32-bit ASNs visible in the Routing Table: 18 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 531 Number of addresses announced to Internet: 2864277120 Equivalent to 170 /8s, 185 /16s and 102 /24s Percentage of available address space announced: 77.4 Percentage of allocated address space announced: 77.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 283782 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 217228 Total APNIC prefixes after maximum aggregation: 64069 APNIC Deaggregation factor: 3.39 Prefixes being announced from the APNIC address blocks: 213269 Unique aggregates announced from the APNIC address blocks: 87397 APNIC Region origin ASes present in the Internet Routing Table: 11101 APNIC Prefixes per ASN: 19.21 APNIC Region origin ASes announcing only one prefix: 3153 APNIC Region transit ASes present in the Internet Routing Table: 1603 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 34 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6224 Number of APNIC addresses announced to Internet: 778323968 Equivalent to 46 /8s, 100 /16s and 72 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 240688 Total ARIN prefixes after maximum aggregation: 111288 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 240949 Unique aggregates announced from the ARIN address blocks: 115360 ARIN Region origin ASes present in the Internet Routing Table: 18690 ARIN Prefixes per ASN: 12.89 ARIN Region origin ASes announcing only one prefix: 6809 ARIN Region transit ASes present in the Internet Routing Table: 1913 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 40 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3604 Number of ARIN addresses announced to Internet: 1093117952 Equivalent to 65 /8s, 39 /16s and 168 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 237159 Total RIPE prefixes after maximum aggregation: 111900 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 233076 Unique aggregates announced from the RIPE address blocks: 137705 RIPE Region origin ASes present in the Internet Routing Table: 27564 RIPE Prefixes per ASN: 8.46 RIPE Region origin ASes announcing only one prefix: 11851 RIPE Region transit ASes present in the Internet Routing Table: 3893 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9735 Number of RIPE addresses announced to Internet: 709722752 Equivalent to 42 /8s, 77 /16s and 130 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 112113 Total LACNIC prefixes after maximum aggregation: 26185 LACNIC Deaggregation factor: 4.28 Prefixes being announced from the LACNIC address blocks: 113225 Unique aggregates announced from the LACNIC address blocks: 47917 LACNIC Region origin ASes present in the Internet Routing Table: 10626 LACNIC Prefixes per ASN: 10.66 LACNIC Region origin ASes announcing only one prefix: 2626 LACNIC Region transit ASes present in the Internet Routing Table: 1967 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 33 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8216 Number of LACNIC addresses announced to Internet: 174113024 Equivalent to 10 /8s, 96 /16s and 193 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24755 Total AfriNIC prefixes after maximum aggregation: 4791 AfriNIC Deaggregation factor: 5.17 Prefixes being announced from the AfriNIC address blocks: 31974 Unique aggregates announced from the AfriNIC address blocks: 10289 AfriNIC Region origin ASes present in the Internet Routing Table: 1420 AfriNIC Prefixes per ASN: 22.52 AfriNIC Region origin ASes announcing only one prefix: 483 AfriNIC Region transit ASes present in the Internet Routing Table: 287 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 747 Number of AfriNIC addresses announced to Internet: 108557312 Equivalent to 6 /8s, 120 /16s and 116 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5676 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4755 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3577 1330 21 VIETEL-AS-AP Viettel Group, VN 7713 3227 952 519 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2842 1896 55 VNPT-AS-VN VNPT Corp, VN 9808 2574 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2356 11104 565 KIXS-AS-KR Korea Telecom, KR 9498 2297 466 232 BBIL-AP BHARTI Airtel Ltd., IN 4755 2133 441 189 TATACOMM-AS TATA Communications formerl 45090 2064 1045 63 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4755 315 695 CABLEONE, US 16509 4501 9066 2085 AMAZON-02, US 7155 4019 264 32 VIASAT-SP-BACKBONE, US 22773 3739 2994 196 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3357 1319 83 SHAW, CA 16625 3124 1641 2247 AKAMAI-AS, US 209 2525 5059 511 CENTURYLINK-US-LEGACY-QWEST, US 30036 2487 370 113 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2336 2984 1643 FRONTIER-FRTR, US 20115 2165 2899 504 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 6502 900 3642 TTNET, TR 12479 6226 1667 141 UNI2-AS, ES 39891 3459 195 22 ALJAWWALSTC-AS, SA 20940 3330 3347 200 AKAMAI-ASN1, EU 8551 3237 379 43 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2881 2282 892 ROSTELECOM-AS, RU 9009 2235 231 1219 M247, GB 34984 2167 351 576 TELLCOM-AS, TR 13188 1610 100 31 TRIOLAN, UA 58224 1449 853 541 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8187 3442 603 Uninet S.A. de C.V., MX 10620 3396 526 550 Telmex Colombia S.A., CO 11830 2565 369 63 Instituto Costarricense de Electricidad 13999 1561 430 411 Mega Cable, S.A. de C.V., MX 6503 1444 311 475 Axtel, S.A.B. de C.V., MX 7303 1435 909 262 Telecom Argentina S.A., AR 28573 1371 2259 223 CLARO S.A., BR 6147 1147 379 39 Telefonica del Peru S.A.A., PE 3816 1113 537 151 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 999 212 418 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1567 393 22 LINKdotNET-AS, EG 24835 1288 480 25 RAYA-AS, EG 36992 1206 1529 133 ETISALAT-MISR, EG 36903 950 496 96 MT-MPLS, MA 29571 709 68 12 ORANGE-COTE-IVOIRE, CI 6713 533 1863 34 IAM-AS, MA 15399 485 46 17 WANANCHI-, KE 37342 478 32 1 MOVITEL, MZ 36935 464 522 40 Vodafone-, EG 23889 450 232 16 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8187 3442 603 Uninet S.A. de C.V., MX 47331 6502 900 3642 TTNET, TR 12479 6226 1667 141 UNI2-AS, ES 7545 5676 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4755 4192 73 ERX-CERNET-BKB China Education and Rese 11492 4755 315 695 CABLEONE, US 16509 4501 9066 2085 AMAZON-02, US 7155 4019 264 32 VIASAT-SP-BACKBONE, US 22773 3739 2994 196 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3577 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6226 6085 UNI2-AS, ES 7545 5676 5015 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4755 4682 ERX-CERNET-BKB China Education and Research Net 11492 4755 4060 CABLEONE, US 7155 4019 3987 VIASAT-SP-BACKBONE, US 7552 3577 3556 VIETEL-AS-AP Viettel Group, VN 22773 3739 3543 ASN-CXA-ALL-CCI-22773-RDC, US 39891 3459 3437 ALJAWWALSTC-AS, SA 6327 3357 3274 SHAW, CA 8551 3237 3194 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 393489 UNALLOCATED 12.7.109.0/24 7018 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397294 UNASSIGNED Transit: 398559 TUNBROKER, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:13 /10:40 /11:101 /12:292 /13:579 /14:1175 /15:1932 /16:13469 /17:8249 /18:13675 /19:25588 /20:41340 /21:50275 /22:103262 /23:87738 /24:484046 /25:1242 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 5724 6502 TTNET, TR 12479 5201 6226 UNI2-AS, ES 11492 3803 4755 CABLEONE, US 6327 3152 3357 SHAW, CA 7155 3108 4019 VIASAT-SP-BACKBONE, US 8151 2892 8187 Uninet S.A. de C.V., MX 22773 2867 3739 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3459 ALJAWWALSTC-AS, SA 8551 2699 3237 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2225 2487 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1879 2:1143 3:35 4:18 5:3408 6:53 8:1484 9:1 11:1 12:1759 13:351 14:2397 15:72 16:13 17:302 18:93 20:111 23:4139 24:2359 25:3 27:2340 31:2162 32:112 34:1 35:35 36:1128 37:3507 38:2000 39:476 40:150 41:3866 42:616 43:2111 44:236 45:14651 46:3618 47:322 49:1607 50:1680 51:90 52:1129 54:213 55:781 56:6 57:56 58:1691 59:1144 60:817 61:2305 62:2197 63:2016 64:5226 65:2380 66:5121 67:2951 68:1170 69:4101 70:1400 71:685 72:3090 74:2545 75:1457 76:687 77:1973 78:3178 79:2493 80:1917 81:1630 82:1297 83:1105 84:1251 85:3100 86:619 87:1784 88:2428 89:2868 90:402 91:7167 92:1590 93:2549 94:2910 95:4162 96:1228 97:341 98:968 99:976 100:90 101:1048 102:1211 103:24992 104:3616 105:390 106:775 107:2172 108:686 109:3743 110:2001 111:2346 112:1652 113:1533 114:1415 115:1853 116:1862 117:2118 118:2276 119:1863 120:939 121:1040 122:2295 123:2126 124:1631 125:2133 128:1384 129:1258 130:770 131:1996 132:746 133:311 134:1390 135:331 136:684 137:899 138:2293 139:1157 140:737 141:1161 142:1041 143:1249 144:1210 145:334 146:1361 147:1212 148:2170 149:1262 150:758 151:1201 152:1603 153:446 154:2298 155:1261 156:1353 157:1133 158:912 159:2040 160:2039 161:1078 162:3202 163:920 164:1422 165:1314 166:600 167:1719 168:3627 169:630 170:4359 171:743 172:2007 173:2923 174:966 175:1060 176:2910 177:4440 178:2785 179:1896 180:2280 181:2578 182:3160 183:1516 184:2403 185:17553 186:4025 187:3053 188:3298 189:2728 190:9091 191:1400 192:10585 193:7846 194:6379 195:4581 196:3109 197:2297 198:6010 199:5940 200:7310 201:5269 202:10566 203:10142 204:4633 205:3096 206:3295 207:3311 208:3986 209:4608 210:4193 211:2095 212:3587 213:3193 214:1189 215:61 216:6143 217:2472 218:897 219:637 220:2086 221:929 222:975 223:1701 End of report

1 0

Invalid RPKI Certificate Published / Update RPKI Validator Software
by Ties de Kock 09 Dec '20

09 Dec '20

Dear colleagues, Summary: An issue with our RPKI software caused an invalid certificate to be published from 9.40-10:43 (UTC+1) today. This has resulted in outages. We strongly recommend network operators update their Relying Party software to the latest version. At 9:32 (UTC+1) this morning, we processed an outgoing transfer of IP resources to another RIR service region. This caused our system to update the corresponding RPKI certificates in our Certificate Authority (CA). Unfortunately, a bug in our software caused the publication of the updated child certificate ahead of its parent. As a result, our CA published incorrect information from 9:40-10:43 (UTC+1). Some Relying Parties had applied a strict interpretation in their validator software. This meant that they were configured to reject all certificates in the manifest if a single entry was invalid. As a consequence, all RPKI certificates covering RIPE resources were rejected by these validators during this period. While RPKI is designed to "fail-open", an unrelated issue with some routers seems to have prevented this from happening, which resulted in outages. Some Relying Parties have since updated their validator software to apply a less-strict approach in light of this issue[1]. We have published a release candidate of our own RIPE NCC RPKI Validator and we plan to release this to production tomorrow. While our CA is now publishing correct information, the underlying cause remains unsolved. We are continuing to investigate and will share more details when we have them, followed by a post mortem report once everything is resolved. In the meantime, we recommend that network operators update their RPKI validator software to the latest version. Regards, Ties de Kock Software Engineer RIPE NCC [1] Note: Routinator 0.8.2, Fort, rpki-client and octorpki 1.2.2 are either unaffected or contain the updated interpretation.

1 0

AS47510 & AS35555 -- Bogon ASNs routing Bogon IPv4 space
by Ronald F. Guilmette 04 Dec '20

04 Dec '20

I have just received a spam which has a so-called "payload" URL which the spammer wants me to visit, apparently so that I can be sold some male performance drugs of dubious origin. The domain part of the URL resolves to the IPv4 address 217.8.117.98. That address lies within a pair of bogon (unallocated) IPv4 address blocks, 217.8.116.0/24 and 217.8.117.0/24, that are both being routed by a common ASN, i.e. AS47510. https://bgp.he.net/AS47510#_prefixes It appears that AS47510 is itself an unallocated bogon at the present time: https://bgp.he.net/AS47510#_asinfo As can be readily seen at the above link, AS47510 is peering with only two other ASNs, i.e. AS29226 - JSC Mastertel (Russia) and AS35555 - Crex Fex Pex Internet System Solutions" LLC. The latter ASN, AS35555 also appears to be an unallocated bogon ASN at the present time. Nontheless, that does not appear to be preventing it from peering with yet another Russian network, AS213254 - OOO Rait Telecom: https://bgp.he.net/AS35555 It would be Nice, in my opinion, if someone who speaks Russian could make contact with the operators of AS29226 and AS213254 and respectfully suggest to them that they should cease peering with bogon ASNs, such as AS47510 and AS35555, including but not limited to bogon ASNs that are at present routing bogon IPv4 address space. Regards, rfg P.S. It appears that the company "Crex Fex Pex Internet System Solutions, LLC" which was the former owner of AS47510 and AS35555 and also AS60031 was a Russian entity, and one that most likely no longer qualifies as what one would call a "going concern": https://crex-fex-pex.ru/

1 0

Weekly Routing Table Report
by cscora＠apnic.net 04 Dec '20

04 Dec '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 05 Dec, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 832105 Prefixes after maximum aggregation (per Origin AS): 318553 Deaggregation factor: 2.61 Unique aggregates announced (without unneeded subnets): 398591 Total ASes present in the Internet Routing Table: 70047 Prefixes per ASN: 11.88 Origin-only ASes present in the Internet Routing Table: 60215 Origin ASes announcing only one prefix: 24916 Transit ASes present in the Internet Routing Table: 9832 Transit-only ASes present in the Internet Routing Table: 298 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 35 Max AS path prepend of ASN ( 30873) 27 Prefixes from unregistered ASNs in the Routing Table: 930 Number of instances of unregistered ASNs: 931 Number of 32-bit ASNs allocated by the RIRs: 34327 Number of 32-bit ASNs visible in the Routing Table: 28445 Prefixes from 32-bit ASNs in the Routing Table: 130073 Number of bogon 32-bit ASNs visible in the Routing Table: 18 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 458 Number of addresses announced to Internet: 2864289664 Equivalent to 170 /8s, 185 /16s and 151 /24s Percentage of available address space announced: 77.4 Percentage of allocated address space announced: 77.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 283123 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 217200 Total APNIC prefixes after maximum aggregation: 63839 APNIC Deaggregation factor: 3.40 Prefixes being announced from the APNIC address blocks: 213245 Unique aggregates announced from the APNIC address blocks: 87189 APNIC Region origin ASes present in the Internet Routing Table: 11079 APNIC Prefixes per ASN: 19.25 APNIC Region origin ASes announcing only one prefix: 3152 APNIC Region transit ASes present in the Internet Routing Table: 1604 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 31 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6202 Number of APNIC addresses announced to Internet: 778212608 Equivalent to 46 /8s, 98 /16s and 149 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-143673 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 240769 Total ARIN prefixes after maximum aggregation: 111305 ARIN Deaggregation factor: 2.16 Prefixes being announced from the ARIN address blocks: 240950 Unique aggregates announced from the ARIN address blocks: 115468 ARIN Region origin ASes present in the Internet Routing Table: 18686 ARIN Prefixes per ASN: 12.89 ARIN Region origin ASes announcing only one prefix: 6788 ARIN Region transit ASes present in the Internet Routing Table: 1914 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3582 Number of ARIN addresses announced to Internet: 1093408000 Equivalent to 65 /8s, 44 /16s and 21 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 236644 Total RIPE prefixes after maximum aggregation: 111694 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 232642 Unique aggregates announced from the RIPE address blocks: 137427 RIPE Region origin ASes present in the Internet Routing Table: 27555 RIPE Prefixes per ASN: 8.44 RIPE Region origin ASes announcing only one prefix: 11867 RIPE Region transit ASes present in the Internet Routing Table: 3899 Average RIPE Region AS path length visible: 4.4 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9712 Number of RIPE addresses announced to Internet: 709617024 Equivalent to 42 /8s, 75 /16s and 229 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 111895 Total LACNIC prefixes after maximum aggregation: 26217 LACNIC Deaggregation factor: 4.27 Prefixes being announced from the LACNIC address blocks: 112953 Unique aggregates announced from the LACNIC address blocks: 47861 LACNIC Region origin ASes present in the Internet Routing Table: 10616 LACNIC Prefixes per ASN: 10.64 LACNIC Region origin ASes announcing only one prefix: 2629 LACNIC Region transit ASes present in the Internet Routing Table: 1961 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 35 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8210 Number of LACNIC addresses announced to Internet: 174095872 Equivalent to 10 /8s, 96 /16s and 126 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24665 Total AfriNIC prefixes after maximum aggregation: 4766 AfriNIC Deaggregation factor: 5.18 Prefixes being announced from the AfriNIC address blocks: 31857 Unique aggregates announced from the AfriNIC address blocks: 10244 AfriNIC Region origin ASes present in the Internet Routing Table: 1412 AfriNIC Prefixes per ASN: 22.56 AfriNIC Region origin ASes announcing only one prefix: 479 AfriNIC Region transit ASes present in the Internet Routing Table: 286 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 739 Number of AfriNIC addresses announced to Internet: 108610304 Equivalent to 6 /8s, 121 /16s and 67 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5672 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4748 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3582 1330 21 VIETEL-AS-AP Viettel Group, VN 45899 3265 1896 55 VNPT-AS-VN VNPT Corp, VN 7713 3221 936 520 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2566 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2354 11103 553 KIXS-AS-KR Korea Telecom, KR 9498 2295 466 231 BBIL-AP BHARTI Airtel Ltd., IN 4755 2136 441 189 TATACOMM-AS TATA Communications formerl 45090 2064 1045 63 CNNIC-TENCENT-NET-AP Shenzhen Tencent C Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4780 317 683 CABLEONE, US 16509 4479 9059 2081 AMAZON-02, US 7155 4019 264 32 VIASAT-SP-BACKBONE, US 22773 3736 2994 197 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3356 1323 82 SHAW, CA 16625 3127 1647 2251 AKAMAI-AS, US 209 2495 5059 511 CENTURYLINK-US-LEGACY-QWEST, US 30036 2485 368 106 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 2336 2984 1643 FRONTIER-FRTR, US 20115 2164 2899 504 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 47331 6458 895 3631 TTNET, TR 12479 6223 1667 141 UNI2-AS, ES 39891 3459 195 22 ALJAWWALSTC-AS, SA 20940 3320 3347 200 AKAMAI-ASN1, EU 8551 3241 378 42 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2883 2282 891 ROSTELECOM-AS, RU 9009 2215 229 1205 M247, GB 34984 2167 351 576 TELLCOM-AS, TR 13188 1610 100 31 TRIOLAN, UA 58224 1440 853 541 TCI, IR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8157 3440 604 Uninet S.A. de C.V., MX 10620 3396 526 550 Telmex Colombia S.A., CO 11830 2563 369 63 Instituto Costarricense de Electricidad 13999 1535 428 409 Mega Cable, S.A. de C.V., MX 6503 1468 311 475 Axtel, S.A.B. de C.V., MX 7303 1435 909 262 Telecom Argentina S.A., AR 28573 1362 2258 225 CLARO S.A., BR 6147 1148 379 39 Telefonica del Peru S.A.A., PE 3816 1113 537 151 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 1006 212 419 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1567 393 22 LINKdotNET-AS, EG 24835 1286 476 26 RAYA-AS, EG 36992 1199 1529 133 ETISALAT-MISR, EG 36903 950 496 96 MT-MPLS, MA 29571 705 68 12 ORANGE-COTE-IVOIRE, CI 6713 532 1863 34 IAM-AS, MA 15399 488 46 17 WANANCHI-, KE 37342 478 32 1 MOVITEL, MZ 36935 455 522 40 Vodafone-, EG 23889 450 232 16 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8157 3440 604 Uninet S.A. de C.V., MX 47331 6458 895 3631 TTNET, TR 12479 6223 1667 141 UNI2-AS, ES 7545 5672 777 661 TPG-INTERNET-AP TPG Telecom Limited, AU 11492 4780 317 683 CABLEONE, US 4538 4748 4192 73 ERX-CERNET-BKB China Education and Rese 16509 4479 9059 2081 AMAZON-02, US 7155 4019 264 32 VIASAT-SP-BACKBONE, US 22773 3736 2994 197 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3582 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6223 6082 UNI2-AS, ES 7545 5672 5011 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4748 4675 ERX-CERNET-BKB China Education and Research Net 11492 4780 4097 CABLEONE, US 7155 4019 3987 VIASAT-SP-BACKBONE, US 7552 3582 3561 VIETEL-AS-AP Viettel Group, VN 22773 3736 3539 ASN-CXA-ALL-CCI-22773-RDC, US 39891 3459 3437 ALJAWWALSTC-AS, SA 6327 3356 3274 SHAW, CA 45899 3265 3210 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 393489 UNALLOCATED 12.7.109.0/24 7018 ATT-INTERNET4, US 46505 UNALLOCATED 12.7.131.0/24 7018 ATT-INTERNET4, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397294 UNASSIGNED Transit: 398559 TUNBROKER, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:8 /9:13 /10:40 /11:101 /12:292 /13:578 /14:1175 /15:1932 /16:13464 /17:8246 /18:14065 /19:25621 /20:41317 /21:50267 /22:103131 /23:87580 /24:483038 /25:1237 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 47331 5677 6458 TTNET, TR 12479 5197 6223 UNI2-AS, ES 11492 3831 4780 CABLEONE, US 6327 3152 3356 SHAW, CA 7155 3108 4019 VIASAT-SP-BACKBONE, US 8151 2872 8157 Uninet S.A. de C.V., MX 22773 2865 3736 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2801 3459 ALJAWWALSTC-AS, SA 8551 2703 3241 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2225 2485 MEDIACOM-ENTERPRISE-BUSINESS, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1871 2:1162 3:35 4:18 5:3415 6:53 8:1492 9:1 11:1 12:1762 13:351 14:2381 15:72 16:12 17:304 18:93 20:113 23:4092 24:2365 25:3 27:2335 31:2164 32:112 34:1 35:35 36:1108 37:3474 38:1991 39:469 40:150 41:3831 42:625 43:2109 44:231 45:14609 46:3607 47:323 49:1579 50:1674 51:90 52:1127 54:212 55:769 56:7 57:55 58:1693 59:1139 60:814 61:2310 62:2197 63:2008 64:5219 65:2374 66:5123 67:2934 68:1169 69:4116 70:1394 71:685 72:3092 74:2552 75:1457 76:687 77:1971 78:3152 79:2494 80:1879 81:1635 82:1298 83:1100 84:1243 85:3078 86:618 87:1786 88:2413 89:2865 90:393 91:7180 92:1604 93:2545 94:2908 95:4157 96:1229 97:341 98:967 99:976 100:89 101:1041 102:1199 103:24960 104:3644 105:387 106:770 107:2171 108:687 109:3746 110:1995 111:2342 112:1650 113:1536 114:1513 115:1854 116:1860 117:2103 118:2273 119:1837 120:939 121:1035 122:2278 123:2119 124:1633 125:2136 128:1397 129:1252 130:768 131:2003 132:750 133:311 134:1395 135:330 136:681 137:899 138:2280 139:1156 140:771 141:1148 142:1023 143:1258 144:1209 145:334 146:1358 147:1242 148:2170 149:1260 150:758 151:1196 152:1586 153:445 154:2275 155:1260 156:1346 157:1119 158:904 159:2037 160:2032 161:1077 162:3194 163:918 164:1417 165:1317 166:595 167:1718 168:3608 169:629 170:4363 171:745 172:2008 173:2924 174:969 175:1060 176:2849 177:4398 178:2781 179:1885 180:2279 181:2563 182:3158 183:1509 184:2435 185:17413 186:4057 187:2997 188:3303 189:2720 190:9040 191:1358 192:10604 193:7839 194:6349 195:4571 196:3096 197:2293 198:6012 199:5901 200:7289 201:5240 202:10554 203:10139 204:4644 205:3088 206:3287 207:3298 208:4005 209:4592 210:4211 211:2077 212:3593 213:3208 214:1190 215:60 216:6171 217:2481 218:867 219:626 220:2060 221:928 222:974 223:1676 End of report

1 0

AS55330 -- Routing oddities
by Ronald F. Guilmette 01 Dec '20

01 Dec '20

Some people seem to think that I'm sort of a master Internet sleuth. The truth is that I'm just as dumb as anybody else, and maybe even moreso. But if one spends enough time looking at stuff on the Internet, it really takes both very little time and also very little in the way of brains to notice many many inexplicable oddities. AS55330 is a case in point. This ASN was allocated/assigned to the Afghan government by APNIC, circa 2009-12-08. Given the nature of the registrant in this case, One might thus reasonably assume that this ASN, belonging as it does to a national government, would be one of the last ones that one would ever see as being involved in any kind of untoward hanky panky or funny business on the Internet. But despite that, I feel compelled to ask if anyone would like to take a stab at explaining to me why the Afghan national government's ASN would be announcing routes to IP blocks belonging to (a) a Chinese commercial enterprise (180.94.99.0/24) and also (b) several RIPE-issued IPv4 blocks that appear to be the property of some Airbus facility located in Norway (182.50.176.0/24, 182.50.177.0/24, 182.50.178.0/23, 182.50.180.0/22): https://bgp.he.net/AS55330#_prefixes I am not persuaded that Airbus/Norway's apparent reliance on the Afghan government to route their IPv4 space for them is an entirely sustainable business model, over the longer term. If I have misunderstood any of the data I'm looking at, then I do apologize to all parties concerned. Regards, rfg

1 0