BGP 前缀查询

输入一个前缀（或单个地址）。由我们每日复制的全球路由表回答。

示例:

2001:c20::/32

单个采集器（APNIC）的视角。在到达该采集器之前被过滤的路由不会列出。

精确宣告

2001:c20::/32AS3758SingNetRPKI 有效2001:c20::

注册机构: APNIC · 新加坡 · 2002年7月24日
分配的地址块: 2001:c20:: – 2001:c20:ffff:ffff:ffff:ffff:ffff:ffff

覆盖路由

没有较不具体的路由覆盖它。

更具体的路由

来自 2 个来源 AS 的 62 条更具体路由

2001:c20::/38AS3758SingNetRPKI 有效2001:c20::
2001:c20:10::/48AS3758SingNetRPKI 有效2001:c20:10::
2001:c20:18::/48AS3758SingNetRPKI 有效2001:c20:18::
2001:c20:3c00::/38AS3758SingNetRPKI 有效2001:c20:3c00::
2001:c20:4800::/38AS3758SingNetRPKI 有效2001:c20:4800::
2001:c20:4849::/48AS9255Singapore TelecomRPKI 有效2001:c20:4849::
2001:c20:485e::/48AS9255Singapore TelecomRPKI 有效2001:c20:485e::
2001:c20:485f::/48AS9255Singapore TelecomRPKI 有效2001:c20:485f::
2001:c20:486c::/48AS9255Singapore TelecomRPKI 有效2001:c20:486c::
2001:c20:4871::/48AS9255Singapore TelecomRPKI 有效2001:c20:4871::
2001:c20:4874::/48AS9255Singapore TelecomRPKI 有效2001:c20:4874::
2001:c20:487e::/48AS9255Singapore TelecomRPKI 有效2001:c20:487e::
2001:c20:4884::/48AS9255Singapore TelecomRPKI 有效2001:c20:4884::
2001:c20:4887::/48AS9255Singapore TelecomRPKI 有效2001:c20:4887::
2001:c20:488c::/48AS9255Singapore TelecomRPKI 有效2001:c20:488c::
2001:c20:488d::/48AS9255Singapore TelecomRPKI 有效2001:c20:488d::
2001:c20:488f::/48AS9255Singapore TelecomRPKI 有效2001:c20:488f::
2001:c20:4892::/48AS9255Singapore TelecomRPKI 有效2001:c20:4892::
2001:c20:4894::/48AS9255Singapore TelecomRPKI 有效2001:c20:4894::
2001:c20:4895::/48AS9255Singapore TelecomRPKI 有效2001:c20:4895::
2001:c20:489a::/48AS9255Singapore TelecomRPKI 有效2001:c20:489a::
2001:c20:48a0::/48AS9255Singapore TelecomRPKI 有效2001:c20:48a0::
2001:c20:48a6::/48AS9255Singapore TelecomRPKI 有效2001:c20:48a6::
2001:c20:48ae::/48AS9255Singapore TelecomRPKI 有效2001:c20:48ae::
2001:c20:48af::/48AS9255Singapore TelecomRPKI 有效2001:c20:48af::
2001:c20:48b0::/48AS9255Singapore TelecomRPKI 有效2001:c20:48b0::
2001:c20:48b8::/48AS9255Singapore TelecomRPKI 有效2001:c20:48b8::
2001:c20:48c2::/48AS9255Singapore TelecomRPKI 有效2001:c20:48c2::
2001:c20:48c4::/48AS9255Singapore TelecomRPKI 有效2001:c20:48c4::
2001:c20:48c6::/48AS9255Singapore TelecomRPKI 有效2001:c20:48c6::
2001:c20:48cc::/48AS9255Singapore TelecomRPKI 有效2001:c20:48cc::
2001:c20:48da::/48AS9255Singapore TelecomRPKI 有效2001:c20:48da::
2001:c20:48db::/48AS9255Singapore TelecomRPKI 有效2001:c20:48db::
2001:c20:48dc::/48AS9255Singapore TelecomRPKI 有效2001:c20:48dc::
2001:c20:48e6::/48AS9255Singapore TelecomRPKI 有效2001:c20:48e6::
2001:c20:48e7::/48AS9255Singapore TelecomRPKI 有效2001:c20:48e7::
2001:c20:48f0::/48AS9255Singapore TelecomRPKI 有效2001:c20:48f0::
2001:c20:48fe::/48AS3758SingNetRPKI 有效2001:c20:48fe::
2001:c20:4c00::/38AS3758SingNetRPKI 有效2001:c20:4c00::
2001:c20:5000::/38AS3758SingNetRPKI 有效2001:c20:5000::
2001:c20:6c00::/38AS3758SingNetRPKI 有效2001:c20:6c00::
2001:c20:7009::/48AS3758SingNetRPKI 有效2001:c20:7009::
2001:c20:7807::/48AS3758SingNetRPKI 有效2001:c20:7807::
2001:c20:8405::/48AS3758SingNetRPKI 有效2001:c20:8405::
2001:c20:8407::/48AS3758SingNetRPKI 有效2001:c20:8407::
2001:c20:8408::/48AS3758SingNetRPKI 有效2001:c20:8408::
2001:c20:8409::/48AS3758SingNetRPKI 有效2001:c20:8409::
2001:c20:c814::/48AS3758SingNetRPKI 有效2001:c20:c814::
2001:c20:c818::/48AS3758SingNetRPKI 有效2001:c20:c818::
2001:c20:c819::/48AS9255Singapore TelecomRPKI 有效2001:c20:c819::
2001:c20:c824::/48AS9255Singapore TelecomRPKI 有效2001:c20:c824::
2001:c20:c825::/48AS9255Singapore TelecomRPKI 有效2001:c20:c825::
2001:c20:c826::/48AS9255Singapore TelecomRPKI 有效2001:c20:c826::
2001:c20:c827::/48AS9255Singapore TelecomRPKI 有效2001:c20:c827::
2001:c20:c831::/48AS9255Singapore TelecomRPKI 有效2001:c20:c831::
2001:c20:c835::/48AS9255Singapore TelecomRPKI 有效2001:c20:c835::
2001:c20:c839::/48AS9255Singapore TelecomRPKI 有效2001:c20:c839::
2001:c20:c83f::/48AS9255Singapore TelecomRPKI 有效2001:c20:c83f::
2001:c20:c844::/48AS9255Singapore TelecomRPKI 有效2001:c20:c844::
2001:c20:c847::/48AS9255Singapore TelecomRPKI 有效2001:c20:c847::
2001:c20:c84e::/48AS9255Singapore TelecomRPKI 有效2001:c20:c84e::
2001:c20:c856::/48AS9255Singapore TelecomRPKI 有效2001:c20:c856::

在互联网上,路由以前缀的形式宣告:一个自治系统通过 BGP 告诉邻居,它可以投递发往例如 193.166.0.0/15 的流量。本工具在我们每日更新的全球路由表副本中查找前缀,并显示三项内容:

精确宣告:哪个 AS 正好起源这个前缀。存在多个起源(MOAS)对任播服务和某些多归属网络来说是正常的,其他情况下则值得怀疑。
覆盖路由:包含该前缀、但不那么具体的宣告。流量遵循最具体的路由;当更具体的路由消失时,覆盖路由才起作用。
更具体的路由:前缀内部的宣告,可能属于其他网络(客户,或者劫持)。

对每条宣告的路由,还会检查 RPKI:是否有 ROA 授权其起源 AS。

该路由表来自 APNIC 路由收集器的视角。全球路由表的大部分从任何地方看都一样,但在到达收集器之前被过滤掉的路由不会出现。

常见问题

为什么我的 /24 不显示,而 /16 却显示?

您的地址是作为更大地址块的一部分宣告的,没有人单独宣告这个 /24。这是大多数运营商客户的正常情况。

什么是更具体前缀劫持?

有人在您的地址空间内宣告一个更长的前缀。由于路由器优先选择最具体的路由,流量就会流向对方。设置严格最大长度的 RPKI 会使这类宣告无效。

可以输入单个地址吗?

可以。工具会显示包含该地址的最具体宣告路由。

常见问题

相关内容