- routing-wg - mailman.ripe.net

RPKI Validator 3 Disk Space Requirement
by nusenu 11 Oct '18

11 Oct '18

Hi, the wiki page [1] states: > The repository objects are stored in a file based database, rather > than in memory - we recommend at least 10GB of available disk space > (under /var/lib/rpki-validator-3/db for the RPM). the rpki-validator.h2.mv.db file is already >22GB in size, I assume there is no way to reduce the disk usage requirements via a configuration change? How big will the db file become? thanks, nusenu [1] https://github.com/RIPE-NCC/rpki-validator-3/wiki#system-requirements -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 5

RPKI Validator 3 stuck after some time
by nusenu 09 Oct '18

09 Oct '18

Hi, I'm running rpki-validator-3.0-313 with openjdk version "1.8.0_181" OpenJDK Runtime Environment (build 1.8.0_181-b15) OpenJDK 64-Bit Server VM (build 25.181-b15, mixed mode) After some time it becomes defunct or at least does no longer update the underlying data. When accessing the web ui: http://localhost:8080/trust-anchors it redirects to: http://localhost:8080/error;error=500;errorMsg=OK and shows: "OK 500" same happens when clicking on http://localhost:8080/roas stdout shows: WARN http-nio-127.0.0.1-8080-exec-4 o.h.e.j.s.SqlExceptionHelper SQL Error: 0, SQLState: null ERROR http-nio-127.0.0.1-8080-exec-4 o.h.e.j.s.SqlExceptionHelper rpki - Connection is not available, request timed out after 30000ms. ERROR http-nio-127.0.0.1-8080-exec-4 o.a.c.c.C.[.[.[.[dispatcherServlet] Servlet.service() for servlet [dispatcherServlet] in context with path [] threw exception [Request processing failed; nested exception is org.springframework.transaction.CannotCreateTransactionException: Could not open JPA EntityManager for transaction; nested exception is org.hibernate.exception.JDBCConnectionException: Unable to acquire JDBC Connection] with root cause java.sql.SQLTransientConnectionException: rpki - Connection is not available, request timed out after 30000ms. at com.zaxxer.hikari.pool.HikariPool.createTimeoutException(HikariPool.java:669) at com.zaxxer.hikari.pool.HikariPool.getConnection(HikariPool.java:183) at com.zaxxer.hikari.pool.HikariPool.getConnection(HikariPool.java:148) at com.zaxxer.hikari.HikariDataSource.getConnection(HikariDataSource.java:128) at org.hibernate.engine.jdbc.connections.internal.DatasourceConnectionProviderImpl.getConnection(DatasourceConnectionProviderImpl.java:122) at org.hibernate.internal.NonContextualJdbcConnectionAccess.obtainConnection(NonContextualJdbcConnectionAccess.java:35) at org.hibernate.resource.jdbc.internal.LogicalConnectionManagedImpl.acquireConnectionIfNeeded(LogicalConnectionManagedImpl.java:106) at org.hibernate.resource.jdbc.internal.LogicalConnectionManagedImpl.getPhysicalConnection(LogicalConnectionManagedImpl.java:136) at org.hibernate.resource.jdbc.internal.LogicalConnectionManagedImpl.getConnectionForTransactionManagement(LogicalConnectionManagedImpl.java:254) at org.hibernate.resource.jdbc.internal.LogicalConnectionManagedImpl.begin(LogicalConnectionManagedImpl.java:262) at org.hibernate.resource.transaction.backend.jdbc.internal.JdbcResourceLocalTransactionCoordinatorImpl$TransactionDriverControlImpl.begin(JdbcResourceLocalTransactionCoordinatorImpl.java:214) at org.hibernate.engine.transaction.internal.TransactionImpl.begin(TransactionImpl.java:56) at org.springframework.orm.jpa.vendor.HibernateJpaDialect.beginTransaction(HibernateJpaDialect.java:164) at org.springframework.orm.jpa.JpaTransactionManager.doBegin(JpaTransactionManager.java:400) at org.springframework.transaction.support.AbstractPlatformTransactionManager.getTransaction(AbstractPlatformTransactionManager.java:378) at org.springframework.transaction.interceptor.TransactionAspectSupport.createTransactionIfNecessary(TransactionAspectSupport.java:474) at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:289) at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:98) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:185) at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:688) at net.ripe.rpki.validator3.adapter.jpa.JPATrustAnchors$$EnhancerBySpringCGLIB$$23bf1287.getStatuses(<generated>) at net.ripe.rpki.validator3.api.trustanchors.TrustAnchorController.statuses(TrustAnchorController.java:193) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:209) at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:136) at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:102) at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:877) at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:783) at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87) at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:991) at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:925) at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:974) at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:866) at javax.servlet.http.HttpServlet.service(HttpServlet.java:635) at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:851) at javax.servlet.http.HttpServlet.service(HttpServlet.java:742) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) after killing it, starting it again fails. ./rpki-validator-3.sh [ warning ] Neither JAVA_CMD nor JAVA_HOME are set, will try to find java on path. . ____ _ __ _ _ /\\ / ___'_ __ _ _(_)_ __ __ _ \ \ \ \ ( ( )\___ | '_ | '_| | '_ \/ _` | \ \ \ \ \\/ ___)| |_)| | | | | || (_| | ) ) ) ) ' |____| .__|_| |_|_| |_\__, | / / / / =========|_|==============|___/=/_/_/_/ :: Spring Boot :: (v2.0.2.RELEASE) it appears stuck there for >10min?. Maybe that has todo with the ~50GB db folder.. To recover from this, I deleted the entire rpki-validator-3.0-313 folder and started from scratch. kind regards, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 0

AS12337 RPKI Validation deployed
by Sebastian Wiesinger 08 Oct '18

08 Oct '18

I just wanted to let you know that noris network (AS12337) is now validating RPKI information with invalid == reject in our upstream & IXP eBGP sessions. First impression (and impact analysis before the deployment) suggests no customer impact by this. I'll let you know if this changes in the coming weeks. :) Regards Sebastian -- GPG Key: 0x58A2D94A93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE. -- Terry Pratchett, The Fifth Elephant

4 4

RIPEstat: conflicting IRR entries are invisible in as-routing-consistency widget
by nusenu 08 Oct '18

08 Oct '18

Hi Christian, would be nice if conflicting IRR entries would be visible in the as-routing-consistency widget an example with screenshots is documented here: https://github.com/nusenu/RIPEstat-wishlist/issues/8 kind regards, nusenu -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 0

is RIPEstat confused about the origin of 147.171.0.0/16?
by nusenu 08 Oct '18

08 Oct '18

Hi, I came across this particular prefix when going through big RPKI unreachable blocks. prefix-routing-consistency [1] says: current origin is AS2200 prefix-overview [2] says: current origin is AS1942 (nlnog's LG agrees) routing-history [3] says it was announced by AS220 until 2017-06-10 and is currently announced by AS1942 RPKI validator's BGP Preview (using RIS): says it is announced by AS1942 and is therefore invalid (ROA authorizes AS2200 - not AS1942) So why does [1] say this prefix is announced by AS2200? maybe it is announced by both? btw: AS2200 and AS1942 have the same owner and AS2200 appears to be the only upstream of AS1942. [1] https://stat.ripe.net/widget/prefix-routing-consistency#w.resource=147.171.… [2] https://stat.ripe.net/widget/prefix-overview#w.resource=147.171.0.0%2F16 [3] https://stat.ripe.net/widget/routing-history#w.resource=147.171.0.0%2F16 -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 5

Weekly Routing Table Report
by cscora＠apnic.net 05 Oct '18

05 Oct '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 06 Oct, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 719613 Prefixes after maximum aggregation (per Origin AS): 276479 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 345397 Total ASes present in the Internet Routing Table: 62033 Prefixes per ASN: 11.60 Origin-only ASes present in the Internet Routing Table: 53570 Origin ASes announcing only one prefix: 23365 Transit ASes present in the Internet Routing Table: 8463 Transit-only ASes present in the Internet Routing Table: 265 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 36 Max AS path prepend of ASN ( 30873) 34 Prefixes from unregistered ASNs in the Routing Table: 45 Number of instances of unregistered ASNs: 45 Number of 32-bit ASNs allocated by the RIRs: 24323 Number of 32-bit ASNs visible in the Routing Table: 19649 Prefixes from 32-bit ASNs in the Routing Table: 82878 Number of bogon 32-bit ASNs visible in the Routing Table: 12 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 282 Number of addresses announced to Internet: 2855171843 Equivalent to 170 /8s, 46 /16s and 119 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.1 Total number of prefixes smaller than registry allocations: 240471 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 196173 Total APNIC prefixes after maximum aggregation: 55802 APNIC Deaggregation factor: 3.52 Prefixes being announced from the APNIC address blocks: 193872 Unique aggregates announced from the APNIC address blocks: 79906 APNIC Region origin ASes present in the Internet Routing Table: 9145 APNIC Prefixes per ASN: 21.20 APNIC Region origin ASes announcing only one prefix: 2579 APNIC Region transit ASes present in the Internet Routing Table: 1369 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4111 Number of APNIC addresses announced to Internet: 767775170 Equivalent to 45 /8s, 195 /16s and 81 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 214165 Total ARIN prefixes after maximum aggregation: 101278 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 214003 Unique aggregates announced from the ARIN address blocks: 101771 ARIN Region origin ASes present in the Internet Routing Table: 18264 ARIN Prefixes per ASN: 11.72 ARIN Region origin ASes announcing only one prefix: 6792 ARIN Region transit ASes present in the Internet Routing Table: 1816 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2455 Number of ARIN addresses announced to Internet: 1098491808 Equivalent to 65 /8s, 121 /16s and 167 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 196442 Total RIPE prefixes after maximum aggregation: 93831 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 192762 Unique aggregates announced from the RIPE address blocks: 113962 RIPE Region origin ASes present in the Internet Routing Table: 25533 RIPE Prefixes per ASN: 7.55 RIPE Region origin ASes announcing only one prefix: 11499 RIPE Region transit ASes present in the Internet Routing Table: 3519 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 36 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7459 Number of RIPE addresses announced to Internet: 714618496 Equivalent to 42 /8s, 152 /16s and 54 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 93183 Total LACNIC prefixes after maximum aggregation: 21345 LACNIC Deaggregation factor: 4.37 Prefixes being announced from the LACNIC address blocks: 94581 Unique aggregates announced from the LACNIC address blocks: 41323 LACNIC Region origin ASes present in the Internet Routing Table: 7601 LACNIC Prefixes per ASN: 12.44 LACNIC Region origin ASes announcing only one prefix: 2089 LACNIC Region transit ASes present in the Internet Routing Table: 1423 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 26 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5149 Number of LACNIC addresses announced to Internet: 172320544 Equivalent to 10 /8s, 69 /16s and 103 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19604 Total AfriNIC prefixes after maximum aggregation: 4183 AfriNIC Deaggregation factor: 4.69 Prefixes being announced from the AfriNIC address blocks: 24113 Unique aggregates announced from the AfriNIC address blocks: 8183 AfriNIC Region origin ASes present in the Internet Routing Table: 1201 AfriNIC Prefixes per ASN: 20.08 AfriNIC Region origin ASes announcing only one prefix: 406 AfriNIC Region transit ASes present in the Internet Routing Table: 246 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 475 Number of AfriNIC addresses announced to Internet: 101538304 Equivalent to 6 /8s, 13 /16s and 90 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4645 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4450 485 476 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2994 1153 93 VIETEL-AS-AP Viettel Group, VN 4766 2822 11130 764 KIXS-AS-KR Korea Telecom, KR 45899 2762 1674 159 VNPT-AS-VN VNPT Corp, VN 9829 2746 1494 557 BSNL-NIB National Internet Backbone, IN 9394 2589 4907 31 CTTNET China TieTong Telecommunications 9808 2270 8699 26 CMNET-GD Guangdong Mobile Communication 17974 2250 968 51 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4755 2132 421 171 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 3547 229 465 CABLEONE - CABLE ONE, INC., US 6327 3451 1324 83 SHAW - Shaw Communications Inc., CA 22773 3242 2971 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2315 5005 815 AMAZON-02 - Amazon.com, Inc., US 18566 2157 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2153 2739 522 CHARTER-NET-HKY-NC - Charter Communicat 16625 2143 1109 1551 AKAMAI-AS - Akamai Technologies, Inc., 5650 2085 3074 1461 FRONTIER-FRTR - Frontier Communications 30036 2047 346 149 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 2046 5081 602 CENTURYLINK-US-LEGACY-QWEST - Qwest Com Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4907 1613 129 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3054 378 50 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2568 592 1915 AKAMAI-ASN1, US 12389 2099 2048 673 ROSTELECOM-AS, RU 34984 2047 337 509 TELLCOM-AS, TR 9121 1837 1691 17 TTNET, TR 13188 1604 100 45 TRIOLAN, UA 8402 1256 544 14 CORBINA-AS OJSC "Vimpelcom", RU 6849 1241 355 21 UKRTELNET, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5401 3302 612 Uninet S.A. de C.V., MX 10620 3195 489 804 Telmex Colombia S.A., CO 11830 2650 370 81 Instituto Costarricense de Electricidad 6503 1648 444 65 Axtel, S.A.B. de C.V., MX 7303 1432 955 206 Telecom Argentina S.A., AR 28573 1120 2238 189 CLARO S.A., BR 6147 1040 377 31 Telefonica del Peru S.A.A., PE 3816 1014 509 121 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11172 933 144 71 Alestra, S. de R.L. de C.V., MX 18881 919 1114 28 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1205 396 48 LINKdotNET-AS, EG 37611 898 107 9 Afrihost, ZA 36903 795 399 143 MT-MPLS, MA 36992 749 1411 41 ETISALAT-MISR, EG 24835 653 802 18 RAYA-AS, EG 8452 607 1728 15 TE-AS TE-AS, EG 37492 466 470 57 ORANGE-, TN 29571 463 70 11 ORANGE-COTE-IVOIRE, CI 37342 394 32 1 MOVITEL, MZ 23889 375 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5401 3302 612 Uninet S.A. de C.V., MX 12479 4907 1613 129 UNI2-AS, ES 4538 4645 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4450 485 476 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 11492 3547 229 465 CABLEONE - CABLE ONE, INC., US 6327 3451 1324 83 SHAW - Shaw Communications Inc., CA 22773 3242 2971 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3195 489 804 Telmex Colombia S.A., CO 8551 3054 378 50 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 4907 4778 UNI2-AS, ES 4538 4645 4571 ERX-CERNET-BKB China Education and Research Net 7545 4450 3974 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3451 3368 SHAW - Shaw Communications Inc., CA 22773 3242 3086 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 11492 3547 3082 CABLEONE - CABLE ONE, INC., US 8551 3054 3004 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7552 2994 2901 VIETEL-AS-AP Viettel Group, VN 45899 2762 2603 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 45474 NEXUSGUARD-AS-AP Suite 2101~02 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN 65001 PRIVATE 109.161.56.0/24 13118 ASN-YARTELECOM PJSC Rostelecom 64643 PRIVATE 119.44.18.0/24 9394 CTTNET China TieTong Telecommu 64643 PRIVATE 119.44.192.0/22 9394 CTTNET China TieTong Telecommu Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 45.121.32.0/22 134356 UNKNOWN 45.121.136.0/22 22552 ESITED - eSited Solutions, US 45.124.164.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU 45.252.236.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU 64.28.160.0/20 20475 AS20475 - Global Capacity, LLC, US 64.29.240.0/20 27279 -Reserved AS-, ZZ 64.30.152.0/24 15830 TELECITY-LON, GB Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:98 /12:290 /13:566 /14:1104 /15:1884 /16:13315 /17:7906 /18:13774 /19:25359 /20:39581 /21:45915 /22:89388 /23:73469 /24:404701 /25:817 /26:618 /27:633 /28:36 /29:21 /30:21 /31:4 /32:52 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3684 4907 UNI2-AS, ES 6327 3237 3451 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2800 3547 CABLEONE - CABLE ONE, INC., US 8551 2510 3054 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2504 3242 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2051 2157 MEGAPATH5-US - MegaPath Corporation, US 11830 2000 2650 Instituto Costarricense de Electricidad y Telec 30036 1795 2047 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 5650 1762 2085 FRONTIER-FRTR - Frontier Communications of Amer Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1604 2:883 4:18 5:2660 6:44 7:1 8:1137 12:1864 13:218 14:1829 15:34 16:3 17:194 18:55 20:50 23:2546 24:2431 25:2 27:2512 31:2003 32:84 35:29 36:536 37:2878 38:1547 39:261 40:121 41:3218 42:714 43:1968 44:123 45:5699 46:3090 47:225 49:1348 50:1064 51:318 52:1087 54:364 55:1 56:12 57:39 58:1623 59:986 60:417 61:2090 62:1881 63:1800 64:5054 65:2209 66:4793 67:2680 68:1157 69:3365 70:1155 71:579 72:2256 74:2728 75:420 76:456 77:1647 78:1735 79:2234 80:1568 81:1415 82:1051 83:790 84:1043 85:2038 86:561 87:1489 88:916 89:2349 90:207 91:6440 92:1280 93:2397 94:2440 95:3029 96:934 97:353 98:928 99:142 100:86 101:1188 102:233 103:18831 104:3569 105:218 106:772 107:1805 108:709 109:3362 110:1676 111:1810 112:1332 113:1307 114:1169 115:1684 116:1666 117:1788 118:2208 119:1694 120:1084 121:1046 122:2387 123:1662 124:1444 125:1931 128:1179 129:672 130:500 131:1616 132:726 133:191 134:1033 135:237 136:530 137:658 138:1931 139:695 140:546 141:754 142:840 143:1020 144:844 145:498 146:1237 147:741 148:1685 149:776 150:767 151:997 152:867 153:325 154:1873 155:931 156:1414 157:813 158:661 159:1877 160:1490 161:838 162:2642 163:625 164:1093 165:1555 166:450 167:1258 168:3171 169:850 170:3954 171:497 172:1035 173:2074 174:999 175:806 176:2097 177:4044 178:2521 179:1329 180:2161 181:2442 182:2382 183:1303 184:1146 185:14183 186:3600 187:2474 188:2921 189:2000 190:8187 191:1368 192:9848 193:6287 194:5108 195:4026 196:2757 197:1606 198:5663 199:5948 200:7313 201:4991 202:10262 203:10234 204:4600 205:3001 206:3207 207:3176 208:3932 209:4149 210:3831 211:1986 212:3032 213:2806 214:1045 215:52 216:6012 217:2164 218:868 219:577 220:1802 221:1001 222:986 223:1392 End of report

1 0

Weekly Routing Table Report
by cscora＠apnic.net 28 Sep '18

28 Sep '18

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG, IRNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 29 Sep, 2018 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 718431 Prefixes after maximum aggregation (per Origin AS): 276135 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 344920 Total ASes present in the Internet Routing Table: 61949 Prefixes per ASN: 11.60 Origin-only ASes present in the Internet Routing Table: 53479 Origin ASes announcing only one prefix: 23303 Transit ASes present in the Internet Routing Table: 8470 Transit-only ASes present in the Internet Routing Table: 258 Average AS path length visible in the Internet Routing Table: 4.0 Max AS path length visible: 36 Max AS path prepend of ASN ( 30873) 34 Prefixes from unregistered ASNs in the Routing Table: 47 Number of instances of unregistered ASNs: 47 Number of 32-bit ASNs allocated by the RIRs: 24227 Number of 32-bit ASNs visible in the Routing Table: 19553 Prefixes from 32-bit ASNs in the Routing Table: 82433 Number of bogon 32-bit ASNs visible in the Routing Table: 13 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 297 Number of addresses announced to Internet: 2854737091 Equivalent to 170 /8s, 39 /16s and 212 /24s Percentage of available address space announced: 77.1 Percentage of allocated address space announced: 77.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.0 Total number of prefixes smaller than registry allocations: 240210 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 195396 Total APNIC prefixes after maximum aggregation: 55713 APNIC Deaggregation factor: 3.51 Prefixes being announced from the APNIC address blocks: 193250 Unique aggregates announced from the APNIC address blocks: 79704 APNIC Region origin ASes present in the Internet Routing Table: 9114 APNIC Prefixes per ASN: 21.20 APNIC Region origin ASes announcing only one prefix: 2559 APNIC Region transit ASes present in the Internet Routing Table: 1363 Average APNIC Region AS path length visible: 4.0 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4078 Number of APNIC addresses announced to Internet: 767593602 Equivalent to 45 /8s, 192 /16s and 140 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-139577 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 214048 Total ARIN prefixes after maximum aggregation: 101265 ARIN Deaggregation factor: 2.11 Prefixes being announced from the ARIN address blocks: 213746 Unique aggregates announced from the ARIN address blocks: 101660 ARIN Region origin ASes present in the Internet Routing Table: 18250 ARIN Prefixes per ASN: 11.71 ARIN Region origin ASes announcing only one prefix: 6772 ARIN Region transit ASes present in the Internet Routing Table: 1810 Average ARIN Region AS path length visible: 3.6 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2441 Number of ARIN addresses announced to Internet: 1098335136 Equivalent to 65 /8s, 119 /16s and 67 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 196161 Total RIPE prefixes after maximum aggregation: 93683 RIPE Deaggregation factor: 2.09 Prefixes being announced from the RIPE address blocks: 192448 Unique aggregates announced from the RIPE address blocks: 113867 RIPE Region origin ASes present in the Internet Routing Table: 25510 RIPE Prefixes per ASN: 7.54 RIPE Region origin ASes announcing only one prefix: 11484 RIPE Region transit ASes present in the Internet Routing Table: 3525 Average RIPE Region AS path length visible: 4.1 Max RIPE Region AS path length visible: 36 Number of RIPE region 32-bit ASNs visible in the Routing Table: 7425 Number of RIPE addresses announced to Internet: 714730112 Equivalent to 42 /8s, 153 /16s and 234 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 93175 Total LACNIC prefixes after maximum aggregation: 21264 LACNIC Deaggregation factor: 4.38 Prefixes being announced from the LACNIC address blocks: 94556 Unique aggregates announced from the LACNIC address blocks: 41268 LACNIC Region origin ASes present in the Internet Routing Table: 7590 LACNIC Prefixes per ASN: 12.46 LACNIC Region origin ASes announcing only one prefix: 2081 LACNIC Region transit ASes present in the Internet Routing Table: 1430 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 24 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 5136 Number of LACNIC addresses announced to Internet: 172160544 Equivalent to 10 /8s, 66 /16s and 246 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-268700 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 19603 Total AfriNIC prefixes after maximum aggregation: 4168 AfriNIC Deaggregation factor: 4.70 Prefixes being announced from the AfriNIC address blocks: 24134 Unique aggregates announced from the AfriNIC address blocks: 8164 AfriNIC Region origin ASes present in the Internet Routing Table: 1202 AfriNIC Prefixes per ASN: 20.08 AfriNIC Region origin ASes announcing only one prefix: 407 AfriNIC Region transit ASes present in the Internet Routing Table: 244 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 473 Number of AfriNIC addresses announced to Internet: 101476864 Equivalent to 6 /8s, 12 /16s and 106 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 4632 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4448 485 476 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 2981 1153 92 VIETEL-AS-AP Viettel Group, VN 4766 2822 11130 764 KIXS-AS-KR Korea Telecom, KR 9829 2807 1495 540 BSNL-NIB National Internet Backbone, IN 45899 2755 1666 158 VNPT-AS-VN VNPT Corp, VN 9394 2589 4907 31 CTTNET China TieTong Telecommunications 9808 2269 8699 26 CMNET-GD Guangdong Mobile Communication 17974 2251 972 73 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4755 2126 417 203 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 3554 233 463 CABLEONE - CABLE ONE, INC., US 6327 3466 1324 83 SHAW - Shaw Communications Inc., CA 22773 3239 2971 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 2303 5003 804 AMAZON-02 - Amazon.com, Inc., US 18566 2160 405 109 MEGAPATH5-US - MegaPath Corporation, US 20115 2155 2741 519 CHARTER-NET-HKY-NC - Charter Communicat 5650 2082 3074 1461 FRONTIER-FRTR - Frontier Communications 16625 2056 1094 1530 AKAMAI-AS - Akamai Technologies, Inc., 30036 2051 347 130 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 209 2038 5081 598 CENTURYLINK-US-LEGACY-QWEST - Qwest Com Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 4902 1616 127 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3056 378 51 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2560 592 1911 AKAMAI-ASN1, US 12389 2093 2039 676 ROSTELECOM-AS, RU 34984 2044 337 507 TELLCOM-AS, TR 9121 1978 1691 17 TTNET, TR 13188 1602 100 46 TRIOLAN, UA 8402 1245 544 14 CORBINA-AS OJSC "Vimpelcom", RU 6849 1241 355 21 UKRTELNET, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5438 3307 605 Uninet S.A. de C.V., MX 10620 3195 489 804 Telmex Colombia S.A., CO 11830 2655 370 81 Instituto Costarricense de Electricidad 6503 1654 444 66 Axtel, S.A.B. de C.V., MX 7303 1432 955 206 Telecom Argentina S.A., AR 28573 1102 2231 193 CLARO S.A., BR 3816 1014 509 121 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 963 377 31 Telefonica del Peru S.A.A., PE 11172 934 144 71 Alestra, S. de R.L. de C.V., MX 18881 919 1114 28 TELEFÔNICA BRASIL S.A, BR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1207 396 48 LINKdotNET-AS, EG 37611 904 107 9 Afrihost, ZA 36903 797 400 139 MT-MPLS, MA 36992 747 1411 41 ETISALAT-MISR, EG 24835 653 802 18 RAYA-AS, EG 8452 594 1728 15 TE-AS TE-AS, EG 37492 464 470 55 ORANGE-, TN 29571 463 70 11 ORANGE-COTE-IVOIRE, CI 37342 394 32 1 MOVITEL, MZ 23889 381 231 15 MauritiusTelecom, MU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 5438 3307 605 Uninet S.A. de C.V., MX 12479 4902 1616 127 UNI2-AS, ES 4538 4632 4192 74 ERX-CERNET-BKB China Education and Rese 7545 4448 485 476 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 203 20 ALJAWWALSTC-AS, SA 11492 3554 233 463 CABLEONE - CABLE ONE, INC., US 6327 3466 1324 83 SHAW - Shaw Communications Inc., CA 22773 3239 2971 156 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3195 489 804 Telmex Colombia S.A., CO 8551 3056 378 51 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 4902 4775 UNI2-AS, ES 4538 4632 4558 ERX-CERNET-BKB China Education and Research Net 7545 4448 3972 TPG-INTERNET-AP TPG Telecom Limited, AU 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3466 3383 SHAW - Shaw Communications Inc., CA 11492 3554 3091 CABLEONE - CABLE ONE, INC., US 22773 3239 3083 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3056 3005 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7552 2981 2889 VIETEL-AS-AP Viettel Group, VN 45899 2755 2597 VNPT-AS-VN VNPT Corp, VN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 64500 DOCUMENT 45.43.56.0/24 45474 NEXUSGUARD-AS-AP Suite 2101~02 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65001 PRIVATE 46.237.40.0/21 13118 ASN-YARTELECOM PJSC Rostelecom 64513 PRIVATE 62.150.101.0/24 9155 QNET Kuwait, KW 64121 UNALLOCATED 98.159.9.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64121 UNALLOCATED 98.159.12.0/24 19555 KMI-NETWORK - Kinder Morgan, I 64140 UNALLOCATED 98.159.14.0/24 64121 UNKNOWN 65001 PRIVATE 109.161.56.0/24 13118 ASN-YARTELECOM PJSC Rostelecom 64643 PRIVATE 119.44.18.0/24 9394 CTTNET China TieTong Telecommu Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 198.18.1.19/32 7497 CSTNET-AS-AP Computer Network Information Cente Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.78.92.0/22 14988 BTC-GATE1, BW 41.78.180.0/23 37265 -Reserved AS-, ZZ 43.251.20.0/22 9381 WTT-AS-AP WTT HK Limited, HK 45.121.32.0/22 134356 UNKNOWN 45.121.136.0/22 22552 ESITED - eSited Solutions, US 45.124.164.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU 45.252.236.0/22 38803 GTELECOM-AUSTRALIA Gtelecom-AUSTRALIA, AU 64.28.160.0/20 20475 AS20475 - Global Capacity, LLC, US 64.29.240.0/20 27279 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:14 /9:11 /10:36 /11:98 /12:289 /13:566 /14:1102 /15:1885 /16:13329 /17:7897 /18:13795 /19:25335 /20:39509 /21:45936 /22:89200 /23:73246 /24:403985 /25:816 /26:618 /27:628 /28:38 /29:21 /30:21 /31:4 /32:52 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 3667 4902 UNI2-AS, ES 6327 3252 3466 SHAW - Shaw Communications Inc., CA 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2806 3554 CABLEONE - CABLE ONE, INC., US 8551 2512 3056 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2501 3239 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 18566 2054 2160 MEGAPATH5-US - MegaPath Corporation, US 11830 2005 2655 Instituto Costarricense de Electricidad y Telec 30036 1799 2051 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 5650 1762 2082 FRONTIER-FRTR - Frontier Communications of Amer Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1599 2:842 4:18 5:2628 6:42 7:1 8:1131 12:1867 13:211 14:1817 15:33 16:3 17:196 18:55 20:50 23:2495 24:2417 25:2 27:2501 31:1988 32:88 35:29 36:536 37:2847 38:1538 39:261 40:121 41:3168 42:709 43:1946 44:120 45:5631 46:3101 47:216 49:1347 50:1057 51:318 52:1086 54:367 55:2 56:12 57:41 58:1625 59:989 60:417 61:2087 62:1895 63:1797 64:5042 65:2210 66:4827 67:2668 68:1153 69:3365 70:1156 71:576 72:2262 74:2723 75:418 76:457 77:1640 78:1709 79:2235 80:1567 81:1403 82:1061 83:789 84:1046 85:2036 86:560 87:1446 88:954 89:2344 90:207 91:6443 92:1297 93:2395 94:2441 95:3050 96:931 97:353 98:927 99:140 100:86 101:1190 102:233 103:18697 104:3535 105:218 106:769 107:1806 108:707 109:3360 110:1656 111:1811 112:1333 113:1307 114:1129 115:1674 116:1666 117:1791 118:2208 119:1671 120:1081 121:1047 122:2377 123:1644 124:1440 125:1932 128:1178 129:690 130:498 131:1608 132:726 133:191 134:1032 135:236 136:514 137:663 138:1938 139:686 140:548 141:757 142:845 143:1015 144:823 145:496 146:1242 147:737 148:1680 149:769 150:764 151:988 152:862 153:323 154:1859 155:916 156:1472 157:809 158:658 159:1870 160:1470 161:843 162:2663 163:617 164:1089 165:1559 166:454 167:1258 168:3154 169:854 170:3975 171:497 172:1001 173:2089 174:1000 175:806 176:2089 177:4025 178:2517 179:1318 180:2145 181:2440 182:2371 183:1275 184:1135 185:14117 186:3590 187:2531 188:2910 189:2028 190:8182 191:1397 192:9861 193:6276 194:5065 195:4014 196:2778 197:1618 198:5665 199:5980 200:7359 201:4978 202:10231 203:10283 204:4608 205:3000 206:3219 207:3193 208:3935 209:4095 210:3861 211:1997 212:3026 213:2820 214:1044 215:54 216:6028 217:2156 218:864 219:569 220:1797 221:1000 222:983 223:1390 End of report

1 0

adding a RPKI indicator to RIPEstat's prefix consistency widget?
by nusenu 27 Sep '18

27 Sep '18

Hi Christian, I really like the prefix-routing-consistency widget [1], thanks for creating it. I find it very useful when sending around URLs to point out certain prefix properties (i.e. announcement not matching IRR entry) and would see an additional RPKI related use-case for that widget (to have it in one place). What do you think about adding indicators for: - prefix is covered by a ROA and valid (green) - (mouseover could show the root CA) - prefix is not covered by a ROA (grey) - prefix is covered by a ROA, but invalid (red) - (mousover could show the invalid reason and ROA info) - an indicator for "is this prefix reachable?" in a ROV environment (yes = green, no = red) that would to some extend be possibly covered with the rpki-validation data call already available https://stat.ripe.net/docs/data_api#RPKI I think this would be very helpful when contacting network operators about their broken ROAs because most trust what they see on RIPEstat :) Ideally that would also work on an AS level as has been suggested before [2] but either is fine. kind regards, nusenu [1] https://stat.ripe.net/widget/prefix-routing-consistency [2] https://www.ripe.net/ripe/mail/archives/routing-wg/2018-May/003513.html -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

3 2

"Mapping the RPKI unreachable IP address space" - RIPE specific results
by nusenu 26 Sep '18

26 Sep '18

Hi, I looked into where RPKI unreachable IP address space is located [1] - with the motivation to reduce the size of it - and wanted to share the RIPE related numbers with you. Globally there are about 8700 /24 blocks that are RPKI unreachable. RIPE's share of the RPKI unreachable IP space is: - for IPv4: ~25% - for IPv6: ~61% What is "RPKI unreachable IP space"? IP space that is not reachable in an environment that rejects RPKI INVALID routes (performs ROV). Most such INVALIDs are likely results of ROA misconfigurations - but not all of them are. The goal is to shrink the size of unreachable IP space to ease the deployment and operations of ROV. If you are a network operator you can search the list [3] for your ASN to see if your reachability suffers from RPKI misconfigurations (data as of 2018-09-24) or you can use the RPKI validator BGP Preview functionality for up-to-date information: https://rpki-validator.ripe.net/bgp-preview Affected networks might soon (by the end of the year) loose the ability to talk to Cloudflare networks since they plan to deploy ROV. That list [3] might also be useful for operators that deployed ROV in their networks already to get an idea of what networks might cause reachability issues for them. If you are on the list but the INVALID state is expected (i.e. due to RPKI research blocks) please drop me an email. It would be nice if RIPE's RPKI world map [2] would include a graph for - unreachable IPv4 address space (in /24 blocks) - unreachable IPv6 address space (in /48 blocks) and maybe even: fraction of unreachable IP space compared to total IP space per country. kind regards, nusenu [1] https://medium.com/@nusenu/where-are-rpki-unreachable-networks-located-65c7… [2] https://lirportal.ripe.net/certification/content/static/statistics/world-ro… [3] https://gist.githubusercontent.com/nusenu/5e63f14815f2e9d19fa31ce2b0b549e7/… -- https://twitter.com/nusenu_ https://mastodon.social/@nusenu

1 0

/24 prefix "hijackability" metric (defining "better than avg AS")
by nusenu 25 Sep '18

25 Sep '18

Hi, I'm currently estimating how "vulnerable" certain IP addresses are to BGP hijacking. To do that, I put them into different categories (multiple can apply): a) RPKI validity state is "NotFound" (no ROA) and IP located in a prefix shorter than /24 (IPv4) or /48 (IPv6) b) Valid ROA but weak maxlength c) Valid ROA with proper maxlength d) is announced in a /24 prefix (IPv4) or /48 (IPv6) e) = (c) + (d) In addition to the distinction of prefix length (/24 vs. </24) I'd like to subcategorize /24 prefixes into - /24 prefix located in "well" connected AS (attacker's BGP visibility is presumed lower than the authentic AS visibility) - /24 prefix located in "poorly" connected AS (better for the attacker) The question is: What is the threshold and metric to tell these two apart? I'm having 3 approaches in mind and wanted to hear if you have any preferences, opinions or other approaches: Approach 1: ----------- If avg AS PATH length as provided by [1] is <2 in more than 50% of given locations and DE-CIX and AMS-IX is among them, then consider it a "well connected AS" Approach 2: ----------- Use CAIDA's AS rank data and define the top 50% ASes as "well" connected Approach 3: ----------- define "well connected" as avg AS PATH as seen in [1] is shorter than the global avg. AS PATH length (defined in [2]) Also: If there are already well established metrics for "well connected" AS I'd be happy to hear about them. Currently I'm leaning towards approach 1 as it is probably the strictest and most conservative approach. I also might compare the results of all 3 approaches. thanks! nusenu [1] https://stat.ripe.net/docs/data_api#AsPathLength [2] http://thyme.rand.apnic.net/current/data-summary (the mean value would actually be more interesting than the avg) Because it is hard to collect ROV data and the list on https://rov.rpki.net is still short I do not try to include a ROV metric (yet).

3 4