News for hackers. Stuff that matters.

A comment on HardCIDR will query ARIN and a pool of BGP route servers. Parent comment

Re:HardCIDR will query ARIN and a pool of BGP route servers by jlgaddis on Saturday March 18, 2017 @01:10AM (#13900004)
By "reliable" it sounds like you mean "legitimate"? As in, $asn is "authorized" to announce $prefix? "originAS" exists for that purpose.

Also, it's not clear what they're (ipinfo.io) using as their source for the ASN. Are they simply reporting the ASN as provided by ARIN, etc., or are they actually running BGP and reporting the origin ASN as they see it in announcements. My money would be on the former, in which case any prefix hijacking would not affect the data reported by ipinfo.io.

[ Parent | on HN ]
Re:HardCIDR will query ARIN and a pool of BGP route servers by packetized on Saturday March 18, 2017 @01:30AM (#13900045)
By "reliable", what I mean is that the IP address to ASN mapping is as up-to-date as possible.
[ Parent | on HN ]
Re:HardCIDR will query ARIN and a pool of BGP route servers by jlgaddis on Saturday March 18, 2017 @01:42AM (#13900076)
I don't think a "last_refreshed" date would be that helpful, though. Netblocks aren't being shuffled around very often. I just looked at a previous employer's assignments and it was almost a decade ago that it was last updated. It's still 100% accurate, however.

Regardless, if you want it, that data is available from the RIRs. Go crazy.

[ Parent | on HN ]