BGP 前缀查询
输入一个前缀(或单个地址)。由我们每日复制的全球路由表回答。
示例:
240e:982:d000::/36
单个采集器(APNIC)的视角。在到达该采集器之前被过滤的路由不会列出。
精确宣告
- 240e:982:d000::/36AS4134No.31,Jin-rong StreetRPKI 无 ROA240e:982:d000::
- 注册机构
- APNIC · 中国 · 2011年12月14日
- 分配的地址块
- 240e:800:: – 240e:fff:ffff:ffff:ffff:ffff:ffff:ffff
覆盖路由
1
更具体的路由
来自 8 个来源 AS 的 68 条更具体路由
- 240e:982:d300::/40AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:d300::
- 240e:982:d400::/40AS131325CHINATELECOM JIANGSU province NANTONG MAN networkRPKI 有效240e:982:d400::
- 240e:982:d500::/40AS134769ChinaNet Jiangsu Changzhou Liyang IDC networkRPKI 有效240e:982:d500::
- 240e:982:d600::/40AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:d600::
- 240e:982:d800::/40AS134769ChinaNet Jiangsu Changzhou Liyang IDC networkRPKI 有效240e:982:d800::
- 240e:982:d900::/40AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:d900::
- 240e:982:d902::/48AS146966China TelecomRPKI 有效240e:982:d902::
- 240e:982:d90d::/48AS146966China TelecomRPKI 有效240e:982:d90d::
- 240e:982:d936::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:d936::
- 240e:982:d940::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:d940::
- 240e:982:d947::/48AS146966China TelecomRPKI 有效240e:982:d947::
- 240e:982:d948::/48AS146966China TelecomRPKI 有效240e:982:d948::
- 240e:982:d95c::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:d95c::
- 240e:982:d98a::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:d98a::
- 240e:982:d98d::/48AS146966China TelecomRPKI 有效240e:982:d98d::
- 240e:982:d996::/48AS146966China TelecomRPKI 有效240e:982:d996::
- 240e:982:d9af::/48AS146966China TelecomRPKI 有效240e:982:d9af::
- 240e:982:d9b4::/48AS146966China TelecomRPKI 有效240e:982:d9b4::
- 240e:982:d9bc::/48AS146966China TelecomRPKI 有效240e:982:d9bc::
- 240e:982:d9cd::/48AS146966China TelecomRPKI 有效240e:982:d9cd::
- 240e:982:d9cf::/48AS146966China TelecomRPKI 有效240e:982:d9cf::
- 240e:982:d9d4::/48AS146966China TelecomRPKI 有效240e:982:d9d4::
- 240e:982:d9d7::/48AS146966China TelecomRPKI 有效240e:982:d9d7::
- 240e:982:da00::/40AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:da00::
- 240e:982:da26::/48AS146966China TelecomRPKI 有效240e:982:da26::
- 240e:982:da51::/48AS146966China TelecomRPKI 有效240e:982:da51::
- 240e:982:da55::/48AS146966China TelecomRPKI 有效240e:982:da55::
- 240e:982:da60::/48AS146966China TelecomRPKI 有效240e:982:da60::
- 240e:982:dab6::/48AS146966China TelecomRPKI 有效240e:982:dab6::
- 240e:982:dad6::/48AS146966China TelecomRPKI 有效240e:982:dad6::
- 240e:982:dae8::/48AS146966China TelecomRPKI 有效240e:982:dae8::
- 240e:982:daf1::/48AS146966China TelecomRPKI 有效240e:982:daf1::
- 240e:982:db29::/48AS146966China TelecomRPKI 有效240e:982:db29::
- 240e:982:db2c::/48AS146966China TelecomRPKI 有效240e:982:db2c::
- 240e:982:db36::/48AS146966China TelecomRPKI 有效240e:982:db36::
- 240e:982:db39::/48AS146966China TelecomRPKI 有效240e:982:db39::
- 240e:982:db3b::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:db3b::
- 240e:982:db51::/48AS146966China TelecomRPKI 有效240e:982:db51::
- 240e:982:db53::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:db53::
- 240e:982:db5f::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:db5f::
- 240e:982:db61::/48AS146966China TelecomRPKI 有效240e:982:db61::
- 240e:982:db66::/48AS146966China TelecomRPKI 有效240e:982:db66::
- 240e:982:db70::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:db70::
- 240e:982:db7d::/48AS146966China TelecomRPKI 有效240e:982:db7d::
- 240e:982:db98::/48AS146966China TelecomRPKI 有效240e:982:db98::
- 240e:982:dbb1::/48AS146966China TelecomRPKI 有效240e:982:dbb1::
- 240e:982:dbba::/48AS146966China TelecomRPKI 有效240e:982:dbba::
- 240e:982:dbbf::/48AS146966China TelecomRPKI 有效240e:982:dbbf::
- 240e:982:dbd7::/48AS146966China TelecomRPKI 无 ROA240e:982:dbd7::
- 240e:982:dbdd::/48AS146966China TelecomRPKI 有效240e:982:dbdd::
- 240e:982:dbe3::/48AS146966China TelecomRPKI 无 ROA240e:982:dbe3::
- 240e:982:dc00::/48AS140293CHINATELECOM Jiangsu province Changzhou 5G networkRPKI 有效240e:982:dc00::
- 240e:982:dc02::/48AS140293CHINATELECOM Jiangsu province Changzhou 5G networkRPKI 有效240e:982:dc02::
- 240e:982:dc03::/48AS140292CHINATELECOM Jiangsu province Suzhou 5G networkRPKI 有效240e:982:dc03::
- 240e:982:dc04::/48AS140292CHINATELECOM Jiangsu province Suzhou 5G networkRPKI 有效240e:982:dc04::
- 240e:982:dc09::/48AS140292CHINATELECOM Jiangsu province Suzhou 5G networkRPKI 有效240e:982:dc09::
- 240e:982:dc0c::/48AS137697CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhou , Jiangsu Province, P.R.China.RPKI 有效240e:982:dc0c::
- 240e:982:dc0d::/48AS137697CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhou , Jiangsu Province, P.R.China.RPKI 有效240e:982:dc0d::
- 240e:982:dc0e::/48AS137697CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhou , Jiangsu Province, P.R.China.RPKI 有效240e:982:dc0e::
- 240e:982:dc18::/46AS146966China TelecomRPKI 有效240e:982:dc18::
- 240e:982:dc1c::/48AS140292CHINATELECOM Jiangsu province Suzhou 5G networkRPKI 有效240e:982:dc1c::
- 240e:982:dc1e::/48AS140293CHINATELECOM Jiangsu province Changzhou 5G networkRPKI 有效240e:982:dc1e::
- 240e:982:dc1f::/48AS138950Jiangsu Wuxi International IDC networkRPKI 有效240e:982:dc1f::
- 240e:982:dc20::/47AS140293CHINATELECOM Jiangsu province Changzhou 5G networkRPKI 有效240e:982:dc20::
- 240e:982:dc25::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:dc25::
- 240e:982:dc26::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:dc26::
- 240e:982:dc27::/48AS134756CHINANET Nanjing Jishan IDC networkRPKI 有效240e:982:dc27::
- 240e:982:dc29::/48AS140292CHINATELECOM Jiangsu province Suzhou 5G networkRPKI 有效240e:982:dc29::
在互联网上,路由以前缀的形式宣告:一个自治系统通过 BGP 告诉邻居,它可以投递发往例如 49.224.0.0/14 的流量。本工具在我们每日更新的全球路由表副本中查找前缀,并显示三项内容:
- 精确宣告:哪个 AS 正好起源这个前缀。存在多个起源(MOAS)对任播服务和某些多归属网络来说是正常的,其他情况下则值得怀疑。
- 覆盖路由:包含该前缀、但不那么具体的宣告。流量遵循最具体的路由;当更具体的路由消失时,覆盖路由才起作用。
- 更具体的路由:前缀内部的宣告,可能属于其他网络(客户,或者劫持)。
对每条宣告的路由,还会检查 RPKI:是否有 ROA 授权其起源 AS。
该路由表来自 APNIC 路由收集器的视角。全球路由表的大部分从任何地方看都一样,但在到达收集器之前被过滤掉的路由不会出现。
常见问题
为什么我的 /24 不显示,而 /16 却显示?
您的地址是作为更大地址块的一部分宣告的,没有人单独宣告这个 /24。这是大多数运营商客户的正常情况。
什么是更具体前缀劫持?
有人在您的地址空间内宣告一个更长的前缀。由于路由器优先选择最具体的路由,流量就会流向对方。设置严格最大长度的 RPKI 会使这类宣告无效。
可以输入单个地址吗?
可以。工具会显示包含该地址的最具体宣告路由。