<div dir="ltr">Nice find Suresh!<div><br></div><div><br></div><div>Btw this brings to me to slightly unrelated issues of wrong RADB entries for all such prefixes. The ISP which I represent has some prefix with RADB entries from ISP which (I guess) had prefix years back before APNIC re-allocated them. Isn't this very common? In traceroute with "-A" argument we see multiple ASNs so many times (since -A is based on RADB data rather than actual routing data).</div>
<div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Feb 17, 2014 at 11:51 PM, Suresh Ramasubramanian <span dir="ltr"><<a href="mailto:suresh@hserus.net" target="_blank">suresh@hserus.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Tarun Dua [17/02/14 23:13 +0530]:<div class=""><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
The prefix in question is <a href="http://205.147.96.0/21" target="_blank">205.147.96.0/21</a><br>
</blockquote>
<br></div>
Cogent seems to think - and whois too - that it is split into /23s<br>
See the routeviews entries as well below<br>
<br>
<a href="http://www.onesc.net/communities/as174/" target="_blank">http://www.onesc.net/<u></u>communities/as174/</a> says 174:21001 Route is NA internal or customer route.<br>
<br>
by the way. And there's <a href="http://rr.arin.net" target="_blank">rr.arin.net</a> / <a href="http://radb.net" target="_blank">radb.net</a> route registry entries for<br>
the covering /20 assigned to a legacy provider. Looks like that IP space<br>
was reclaimed by arin and allocated to apnic.<br>
<br>
suresh@samwise 12:17:34 <~> $ whois -h <a href="http://rr.arin.net" target="_blank">rr.arin.net</a> <a href="http://205.147.96.0/21" target="_blank">205.147.96.0/21</a><br>
% This is the ARIN Routing Registry.<br>
<br>
% Note: this output has been filtered.<br>
% To receive output for a database update, use the "-B" flag.<br>
<br>
% Information related to '<a href="http://205.147.96.0/20AS18999" target="_blank">205.147.96.0/20AS18999</a>'<br>
<br>
route: <a href="http://205.147.96.0/20" target="_blank">205.147.96.0/20</a><br>
descr: Poplar Bluff Internet, Inc.<br>
P.O. Box 190<br>
Poplar Bluff, MO 63902<br>
US<br>
origin: AS18999<br>
mnt-by: MNT-POPL<br>
source: ARIN # Filtered<br>
<br>
<br>
suresh@samwise 12:17:38 <~> $ whois -h <a href="http://whois.radb.net" target="_blank">whois.radb.net</a> <a href="http://205.147.96.0/21" target="_blank">205.147.96.0/21</a><br>
route: <a href="http://205.147.96.0/20" target="_blank">205.147.96.0/20</a><br>
descr: Forced Object Correction<br>
origin: AS18999<br>
mnt-by: MAINT-AS7132<br>
changed: <a href="mailto:backbone@sbis.sbc.com" target="_blank">backbone@sbis.sbc.com</a> 20060607<br>
source: RADB<br>
<br>
route: <a href="http://205.147.96.0/20" target="_blank">205.147.96.0/20</a><br>
descr: Poplar Bluff Internet, Inc.<br>
P.O. Box 190<br>
Poplar Bluff, MO 63902<br>
US<br>
origin: AS18999<br>
mnt-by: MNT-POPL<br>
changed: <a href="mailto:james@semo.net" target="_blank">james@semo.net</a> 20051003<br>
source: ARIN<br>
<br>
routeviews lookups -<br>
<br>
BGP routing table entry for <a href="http://205.147.96.0/21" target="_blank">205.147.96.0/21</a>, version 436273<br>
Paths: (31 available, best #30, table Default-IP-Routing-Table)<br>
Not advertised to any peer<br>
5459 174<br>
<a href="tel:195.66.232.239" value="+19566232239" target="_blank">195.66.232.239</a> from <a href="tel:195.66.232.239" value="+19566232239" target="_blank">195.66.232.239</a> <a href="tel:%28195.66.232.239" value="+19566232239" target="_blank">(195.66.232.239</a>)<br>
Origin IGP, localpref 100, valid, external<br>
Community: 174:21001 174:22013 5459:1 5459:60<br>
3356 174<br>
4.69.184.193 from 4.69.184.193 (4.69.184.193)<br>
Origin IGP, metric 0, localpref 100, valid, external<br>
Community: 3356:3 3356:22 3356:86 3356:575 3356:666 3356:2012<br>
2914 174<br>
129.250.0.11 from 129.250.0.11 (129.250.0.12)<br>
Origin IGP, metric 7, localpref 100, valid, external<br>
Community: 2914:420 2914:1008 2914:2000 2914:3000 65504:174<br>
6939 1299 174<br>
216.218.252.164 from 216.218.252.164 (216.218.252.164)<br>
<br>
Using cogent's looking glass<br>
<a href="http://www.cogentco.com/en/network/looking-glass" target="_blank">http://www.cogentco.com/en/<u></u>network/looking-glass</a><br>
<br>
I just get an entry for the /23 and then for another /23 but not a covering<br>
/21<br>
<br>
BGP routing table entry for <a href="http://205.147.96.0/23" target="_blank">205.147.96.0/23</a>, version <a href="tel:2088153801" value="+12088153801" target="_blank">2088153801</a><br>
Paths: (1 available, best #1, table Default-IP-Routing-Table)<br>
<a href="tel:9498%2017439%202" value="+19498174392" target="_blank">9498 17439 2</a>.1348<br>
38.122.147.122 (metric 10166061) from 154.54.66.76 (154.54.66.76)<br>
Origin IGP, localpref 130, valid, internal, best<br>
Community: 174:981 174:10017 174:20999 174:21001 174:22013<br>
Originator: 66.28.1.39, Cluster list: 154.54.66.76, 66.28.1.69,<br>
66.28.1.89, 66.28.1.68<br>
<br>
BGP routing table entry for <a href="http://205.147.98.0/23" target="_blank">205.147.98.0/23</a>, version <a href="tel:2088153802" value="+12088153802" target="_blank">2088153802</a><br>
Paths: (1 available, best #1, table Default-IP-Routing-Table)<br>
<a href="tel:9498%2017439%202" value="+19498174392" target="_blank">9498 17439 2</a>.1348<br>
38.122.147.122 (metric 10166061) from 154.54.66.76 (154.54.66.76)<br>
Origin IGP, localpref 130, valid, internal, best<br>
Community: 174:981 174:10017 174:20999 174:21001 174:22013<br>
Originator: 66.28.1.39, Cluster list: 154.54.66.76, 66.28.1.69,<br>
66.28.1.89, 66.28.1.68<div class="HOEnZb"><div class="h5"><br>
<br>
______________________________<u></u>_________________<br>
sanog mailing list<br>
<a href="mailto:sanog@sanog.org" target="_blank">sanog@sanog.org</a><br>
<a href="https://lists.sanog.org/mailman/listinfo/sanog" target="_blank">https://lists.sanog.org/<u></u>mailman/listinfo/sanog</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div><font face="arial, helvetica, sans-serif"><br></font></div><div><br></div><font face="arial, helvetica, sans-serif">Anurag Bhatia<br>
</font><div></div><div><font face="arial, helvetica, sans-serif"><a href="http://anuragbhatia.com" target="_blank">anuragbhatia.com</a></font><div><br></div></div><div><font face="arial, helvetica, sans-serif"><a href="http://in.linkedin.com/in/anuragbhatia21" target="_blank">Linkedin</a> | <a href="https://twitter.com/anurag_bhatia" target="_blank">Twitter</a><br>
Skype: <a>anuragbhatia.com</a></font></div><div><font face="arial, helvetica, sans-serif"><a><br></a></font></div><div>PGP Key Fingerprint: 3115 677D 2E94 B696 651B 870C C06D D524 245E 58E2</div></div>
</div>